Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/BF0E084CB48411EEA741ADC1775412E6.roa
File: BF0E084CB48411EEA741ADC1775412E6.roa (raw, json)
Hash identifier: pbHLgwmFsnTnS+kV3SQI/eIbOqME4mfk74uvBQxi0l8=
Subject key identifier: D5:73:13:58:F8:D8:AA:99:F6:31:DA:4D:7F:B3:77:22:2D:ED:4F:27
Certificate issuer: /CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Certificate serial: 0A
Authority key identifier: 13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/BF0E084CB48411EEA741ADC1775412E6.roa
Signing time: Tue 16 Jan 2024 15:34:33 +0000
ROA not before: Tue 16 Jan 2024 15:34:30 +0000
ROA not after: Wed 15 Jan 2025 15:34:30 +0000
asID: 328446
IP address blocks: 41.222.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Validity
Not Before: Jan 16 15:34:30 2024 GMT
Not After : Jan 15 15:34:30 2025 GMT
Subject: CN=65a6a209-25c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:e5:1d:b7:73:97:b0:d0:75:d2:f2:8a:be:
7e:b2:a6:38:0f:b4:4e:c4:fc:32:ba:1e:4a:81:11:
d2:b9:08:d1:4b:7b:75:65:ce:bb:7a:ca:c0:d3:9a:
07:94:e5:57:24:65:6c:ba:36:f2:27:9e:b2:ca:71:
31:18:ce:b8:ad:9b:da:9f:97:9a:c9:1c:11:28:96:
3b:8e:f3:a3:0d:07:9e:d3:fd:94:65:02:5e:2f:cd:
e4:a7:f0:53:97:f2:d6:d4:95:f2:92:2c:56:a0:6f:
2c:99:63:31:75:29:67:cd:9a:8a:87:2c:c5:08:23:
ea:58:4c:41:47:b1:b9:c1:8d:b2:a6:db:b8:c1:d3:
5b:7e:24:f1:6a:25:41:aa:f0:27:50:25:88:69:61:
00:d4:cb:b5:f3:8a:41:30:52:5d:4c:77:c9:02:0c:
c3:18:f6:56:53:0a:0e:1e:a9:88:46:45:48:26:01:
7d:dc:63:93:9c:e6:9e:eb:44:81:a7:b7:cb:cd:76:
8c:b4:77:43:60:2a:f2:5b:c7:5d:ff:3d:f4:06:dc:
bd:7c:ec:db:10:5b:76:90:f5:ec:f1:84:e5:c4:73:
25:05:9d:58:9b:98:96:89:8b:b9:b6:61:14:06:ac:
ce:db:7f:63:1f:33:2a:5d:61:5b:7f:75:f3:db:3e:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:13:58:F8:D8:AA:99:F6:31:DA:4D:7F:B3:77:22:2D:ED:4F:27
X509v3 Authority Key Identifier:
keyid:13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/BF0E084CB48411EEA741ADC1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.124.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3e:5a:e9:1f:8f:b1:5b:40:18:ea:f2:c6:82:ad:db:ad:87:
09:2b:18:3c:fb:d8:71:f2:9a:57:73:fb:f0:b7:76:46:d0:ca:
2c:cd:9e:ed:e2:01:c9:e4:a0:f5:7d:48:21:4e:e0:67:ac:97:
56:e9:6c:fe:21:2e:70:33:ff:4d:60:9c:3b:42:92:5e:84:58:
f0:07:16:6c:b3:a0:f8:08:26:59:dd:75:b7:ee:5b:af:df:c8:
4c:3f:6b:48:1a:69:b2:03:14:c7:78:a6:fd:d0:06:11:62:02:
4c:22:cc:51:b8:4a:b2:8e:04:29:ad:87:83:2f:9f:48:8a:23:
7b:fc:41:23:86:ee:bc:76:0b:4b:b6:92:da:1d:44:a8:83:9b:
a2:9e:f5:75:b9:12:97:ee:a9:7e:b2:2a:51:f0:f2:46:df:81:
88:1f:20:ef:68:f5:d2:b3:89:dc:da:ec:e9:e9:02:4c:bc:81:
d9:fb:73:0b:18:42:ee:f4:b9:13:a0:2c:9f:9c:58:b2:4e:87:
9f:3b:95:21:58:a5:75:8d:1e:f7:21:d1:65:84:f7:df:01:47:
fc:8e:62:7f:97:76:da:4c:87:fd:83:37:9b:7d:45:6f:65:7f:
f3:99:9c:44:f1:bf:f6:48:de:fd:43:af:e2:be:45:e5:33:38:
c6:f6:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:45 2024 by rpki-client on console-ams.rpki-client.org