Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1056D6F4F3B411ECBD135E94F1222468.roa
File: 1056D6F4F3B411ECBD135E94F1222468.roa (raw, json)
Hash identifier: I3voAyKajez05EdjV3tPl0iwZduNl7llsDJ7ZWunfnE=
Subject key identifier: 35:BD:0E:8B:BE:47:B6:EB:72:CC:93:40:20:F4:22:B2:E1:8D:B7:A9
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 04E5
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1056D6F4F3B411ECBD135E94F1222468.roa
Signing time: Fri 24 Jun 2022 11:52:04 +0000
ROA not before: Fri 24 Jun 2022 11:52:00 +0000
ROA not after: Wed 12 Jun 2030 11:52:00 +0000
asID: 36916
IP address blocks: 41.180.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 24 11:52:00 2022 GMT
Not After : Jun 12 11:52:00 2030 GMT
Subject: CN=62b5a563-e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:86:f6:71:1d:14:51:3f:95:61:51:73:f8:
39:4d:8b:24:c9:f7:d6:60:0a:67:67:21:4b:22:25:
25:4f:05:3f:bb:e6:ae:52:dd:11:47:6d:ad:5a:b9:
6f:1b:83:ca:76:d3:b8:5f:9e:16:cb:52:bd:82:01:
8e:f6:72:01:72:13:d2:11:6a:4d:91:58:00:a8:3d:
de:b8:24:b8:cf:7f:b9:68:89:e7:d6:af:d3:1c:32:
19:a1:6c:79:f6:5e:37:1d:85:2e:ec:4e:f1:76:52:
91:57:dd:64:63:6e:32:a1:d3:7e:f8:53:e5:49:55:
a4:8b:1e:c2:9f:0a:28:8a:10:12:04:1c:b2:94:e7:
b2:f1:46:71:15:0c:63:c4:20:ef:af:ab:95:25:d6:
6d:5d:fd:be:d2:1d:52:29:15:ec:7e:9f:c6:72:7f:
25:6b:0e:55:7c:76:af:94:09:eb:13:73:70:8b:66:
43:85:e9:a8:2c:c8:84:8d:4e:62:17:d0:ab:0e:b8:
a6:53:fb:41:7f:ea:c7:26:64:05:85:77:6b:7f:4a:
97:d9:3e:36:91:46:bf:8c:e4:e9:2a:d2:8b:b8:e0:
72:98:2f:ed:ac:1d:d1:a2:84:aa:bf:e5:7a:32:e8:
1e:2a:8e:19:2c:7e:3f:78:45:ac:7a:8c:c1:4a:fb:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:0E:8B:BE:47:B6:EB:72:CC:93:40:20:F4:22:B2:E1:8D:B7:A9
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1056D6F4F3B411ECBD135E94F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.104.0/21
Signature Algorithm: sha256WithRSAEncryption
13:ed:e8:de:15:df:83:40:01:4e:72:e8:dc:d5:54:e3:4b:26:
58:a7:f9:1b:10:9b:c3:c2:d0:89:ff:ff:d2:dd:98:9d:d8:f7:
9c:e7:57:f5:14:00:3e:12:f9:3d:c5:d4:34:99:4e:a6:7d:3f:
46:88:a3:70:a0:cb:3a:23:fd:21:62:d6:19:05:1c:2c:cf:54:
3d:b1:ab:53:35:ea:d0:9c:c7:c5:72:08:d5:4f:39:f8:31:81:
2a:ea:37:5c:8e:bf:6e:0d:f6:89:51:78:48:55:0c:97:1b:b0:
80:c5:14:6f:e5:ea:25:e1:39:46:e3:6f:76:c9:51:1b:c9:bc:
5d:96:b2:5a:90:38:3f:d1:14:7c:53:e7:f8:73:65:8c:e5:21:
ab:ed:71:f0:da:22:6e:94:56:cf:03:e8:6f:8d:42:3d:83:77:
d3:5f:b0:7a:a1:67:41:a1:b7:06:7e:27:1d:ea:69:eb:4b:a9:
95:79:c4:1d:96:3b:72:76:b9:c1:a9:60:4a:1c:2c:a6:12:09:
a3:6c:25:7b:50:6a:5f:37:e1:80:b1:ee:64:b7:14:fd:81:fc:
9a:42:f7:05:f2:00:78:0c:c4:fc:de:f4:63:f8:59:3c:16:77:
6a:cc:d3:4d:f0:a2:c4:0d:41:c2:85:cd:3c:95:15:ea:d8:01:
7a:93:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org