Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/16E19A6CF3BA11EC895051A7F1222468.roa
File: 16E19A6CF3BA11EC895051A7F1222468.roa (raw, json)
Hash identifier: cxKVDZ1fO7cxk42DjIzotw0zDNrQa7OaGDPTjlLU+5A=
Subject key identifier: 5A:32:05:50:61:AD:70:98:03:7F:12:3C:C4:20:3A:9A:8D:B7:E2:1F
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0517
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/16E19A6CF3BA11EC895051A7F1222468.roa
Signing time: Fri 24 Jun 2022 12:35:12 +0000
ROA not before: Fri 24 Jun 2022 12:35:08 +0000
ROA not after: Wed 12 Jun 2030 12:35:08 +0000
asID: 36916
IP address blocks: 41.180.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1303 (0x517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 24 12:35:08 2022 GMT
Not After : Jun 12 12:35:08 2030 GMT
Subject: CN=62b5af7f-832f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:f1:c2:9d:1d:85:e1:41:1d:a0:40:64:c0:
ad:50:79:30:21:7f:30:f5:bd:e4:7f:c2:68:80:f6:
69:af:cf:ee:b1:f2:42:e2:d3:15:5a:eb:7b:a7:42:
1a:ca:fe:1b:5b:55:6f:95:04:c9:56:a3:a5:94:72:
83:f2:85:18:e8:d9:a3:71:e6:56:f9:63:6d:79:a7:
7c:be:be:56:09:56:76:1a:64:9c:79:59:c7:3b:dd:
93:84:2a:8b:46:85:fe:16:37:ea:de:02:8c:30:1a:
29:fa:96:fe:96:90:68:04:d7:62:91:e7:40:5f:0a:
5a:65:4e:0b:f9:a6:c4:9d:15:f7:3e:4a:fc:74:51:
c8:7b:95:84:28:7f:c9:68:51:e3:fa:d0:ce:98:41:
00:68:14:03:e3:81:f1:4d:22:06:66:44:33:95:69:
ee:ca:3a:ba:6f:42:9c:ac:8c:cd:c0:25:40:e1:0d:
11:c0:8e:28:74:79:5a:80:ef:88:39:10:53:17:79:
d7:1a:91:51:a3:c8:87:7d:26:23:ba:fd:06:90:e6:
53:65:99:55:45:38:f5:0b:f4:af:06:dd:d9:63:c9:
8e:c1:98:75:c7:e9:a4:39:09:c2:b7:61:3c:46:21:
56:2d:24:97:9d:11:d3:22:80:db:7d:ff:da:b7:d9:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:32:05:50:61:AD:70:98:03:7F:12:3C:C4:20:3A:9A:8D:B7:E2:1F
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/16E19A6CF3BA11EC895051A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.114.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:f5:7d:7d:b8:13:1a:6b:8d:3c:bd:0c:99:28:d1:2e:1d:b3:
35:06:31:d5:43:42:1f:20:5a:af:88:72:04:71:62:ce:45:57:
41:ae:7b:aa:d5:d7:d9:81:29:96:28:5a:15:56:d0:1c:c4:87:
d4:ad:29:69:de:08:8a:d1:8f:91:1a:43:89:78:46:bd:c4:a3:
ae:cf:71:05:69:c7:64:ab:d2:4c:9c:b0:75:2c:63:8f:48:d8:
1a:9f:f0:5c:1d:74:2a:95:be:a2:92:a2:46:2a:bb:ff:eb:b9:
bb:84:82:89:72:f0:c8:10:69:35:a0:d5:9b:13:ee:66:db:67:
78:30:60:b0:01:56:10:ea:4e:c0:e8:84:d6:d1:6d:17:de:5d:
0b:de:36:2b:39:79:7a:81:24:e0:6c:7d:3a:cd:2d:4c:df:ab:
b9:cd:1f:68:3b:b4:10:b6:0d:6d:be:7c:a9:f4:b7:41:70:dc:
9b:59:8d:a0:65:a1:c7:f0:e1:8b:37:2a:3d:bc:85:2f:f9:34:
9b:e0:b6:f9:34:b6:bb:23:5d:e3:7f:73:c4:66:03:db:d0:ae:
e4:e1:7e:5b:90:69:0a:a2:12:2d:54:10:62:96:11:be:d8:bc:
b8:63:77:3a:d9:ca:d5:e0:f3:10:69:dc:85:3b:48:88:20:0c:
fa:67:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org