Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/0BB14EC8F3B811EC82D1BAA0F1222468.roa
File: 0BB14EC8F3B811EC82D1BAA0F1222468.roa (raw, json)
Hash identifier: jvLdv8Yt/9fzs4PjHK1XLxulst5joTb30I9IRpZDiWc=
Subject key identifier: 24:C8:DF:F0:0B:00:CE:33:8D:A6:19:44:FF:56:33:B5:84:00:9A:33
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 04F9
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/0BB14EC8F3B811EC82D1BAA0F1222468.roa
Signing time: Fri 24 Jun 2022 12:20:34 +0000
ROA not before: Fri 24 Jun 2022 12:20:30 +0000
ROA not after: Wed 12 Jun 2030 12:20:30 +0000
asID: 36916
IP address blocks: 41.180.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273 (0x4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 24 12:20:30 2022 GMT
Not After : Jun 12 12:20:30 2030 GMT
Subject: CN=62b5ac12-3e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:14:49:2a:56:5b:3a:d3:a4:5d:e1:4b:3a:
f5:03:dd:c0:74:d6:4c:89:97:c0:4c:c0:4d:8c:02:
70:de:9c:09:44:22:50:49:e7:de:07:cd:90:88:c3:
73:02:e8:f1:76:bb:a5:b7:98:13:85:1c:bc:71:41:
25:2c:3f:f0:09:b7:6a:3e:21:d6:b7:c3:85:73:0b:
29:e1:85:91:69:87:86:11:53:c1:d9:fc:30:e7:df:
2e:d6:22:a0:05:71:03:d9:fd:73:b2:26:05:58:51:
e8:62:11:cb:c7:d6:4c:cd:f4:63:aa:26:24:2e:17:
71:b7:59:6f:19:16:c5:3e:95:1e:1b:88:be:53:84:
f0:ff:0f:a4:05:93:f7:3f:1a:8d:4d:e8:36:54:05:
8e:04:8b:b0:16:32:fd:26:f8:a9:b8:e9:77:2a:ed:
54:61:65:d3:63:b1:1c:5a:05:51:47:bc:52:19:f5:
44:cd:58:f1:6e:c2:f8:26:ba:6a:29:3b:8b:56:25:
4a:f0:e9:58:b3:80:b6:69:12:8a:24:e8:ba:9d:a8:
39:ba:d0:a3:1f:fc:21:8b:3b:59:f3:4e:5d:fd:b8:
07:f0:54:d3:b7:a8:df:54:38:bd:81:d4:e2:83:da:
29:1e:f1:2a:ec:4e:80:fa:fb:6b:38:ca:54:08:5c:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:DF:F0:0B:00:CE:33:8D:A6:19:44:FF:56:33:B5:84:00:9A:33
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/0BB14EC8F3B811EC82D1BAA0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.16.0/21
Signature Algorithm: sha256WithRSAEncryption
34:7c:1d:c2:10:6b:ac:ce:61:26:f1:c8:68:3a:2e:d8:4f:94:
95:90:d8:ae:13:ea:e0:8b:85:17:d8:7a:1c:c4:88:dc:a3:49:
c4:9c:7f:ad:cd:f0:6e:af:ca:77:57:cc:c8:04:7d:d4:8e:17:
c9:ba:fa:cb:e1:d6:e6:c0:79:5e:00:c9:09:85:a5:e7:05:f1:
97:42:8b:97:36:f6:be:06:6d:28:39:25:70:b1:95:bf:be:2a:
a4:2b:7f:e3:3f:f9:05:3a:81:bf:2a:f3:bd:c2:c3:9c:bb:ce:
4d:43:18:0d:c9:75:30:87:76:93:ad:8e:81:41:da:31:27:41:
b0:01:2c:ec:d9:21:a4:16:cc:16:5b:03:3f:4c:60:d7:c4:d3:
8a:70:b3:e6:7c:a9:7a:94:a9:8d:06:06:53:6d:39:b4:1a:06:
51:fa:27:17:55:30:e8:2f:e5:72:46:1e:5f:3c:e0:d2:3c:96:
b2:16:a0:f9:e1:d8:8e:68:6e:db:b6:48:48:54:8c:d7:08:65:
e3:6f:95:47:35:f7:37:e4:20:e6:95:38:b8:ae:0c:02:ef:8c:
3a:68:33:8a:0b:03:59:b5:5a:7a:a1:32:6a:5f:0f:ad:d0:ec:
f2:a8:34:bb:85:73:2c:b4:87:8e:e7:b9:10:f5:81:cd:eb:34:
cc:95:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org