Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2DB8E4162A6611ECB9904D41D8A014CE.roa
File: 2DB8E4162A6611ECB9904D41D8A014CE.roa (raw, json)
Hash identifier: +DLkhe4DKl5ywDsaHbhfCvC0uZ6BAahLwhR7JfDPFD8=
Subject key identifier: EA:9C:A7:F0:4C:F2:20:14:15:92:38:DE:D4:49:F2:4F:E9:8F:11:46
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 03D9
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2DB8E4162A6611ECB9904D41D8A014CE.roa
Signing time: Mon 11 Oct 2021 07:38:09 +0000
ROA not before: Mon 11 Oct 2021 07:38:05 +0000
ROA not after: Wed 18 Oct 2028 07:38:05 +0000
asID: 36916
IP address blocks: 41.180.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Oct 11 07:38:05 2021 GMT
Not After : Oct 18 07:38:05 2028 GMT
Subject: CN=6163e9e0-169c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:e3:2a:e4:ed:0d:4c:b1:c2:bb:8c:f1:f4:
53:c3:64:a4:8e:98:d9:7b:24:69:f7:24:9f:88:f7:
dd:8f:99:8d:27:c3:ef:de:c0:90:53:5a:31:95:34:
0c:03:73:01:81:95:c4:32:a9:9b:3f:e7:11:23:b9:
02:5f:4e:97:a0:1c:3f:89:22:05:fc:87:97:ec:e5:
cc:61:ae:fd:a1:41:43:19:8b:f5:67:87:94:1c:92:
48:43:92:18:66:99:84:d5:19:9f:13:9c:1c:6b:67:
ab:5e:17:78:1e:23:54:86:42:2e:ef:38:d7:92:86:
d7:da:ae:62:29:41:f5:83:8e:3d:12:74:1f:0d:98:
2c:31:e0:a7:71:39:31:2e:02:e0:73:ed:0a:57:fa:
27:ec:01:3c:cd:2b:53:04:f5:1d:16:38:27:5d:60:
b0:d8:ae:49:d7:98:53:6e:1a:0d:3d:3d:98:f1:ae:
ef:65:ce:bc:8e:23:0c:63:8d:42:f0:73:55:8d:ca:
95:77:da:3b:7c:29:59:39:6c:66:1e:ea:41:17:67:
82:a2:33:02:62:1d:00:a4:fb:c0:17:41:ab:55:3b:
00:59:c9:8a:6d:38:37:9d:29:21:2c:79:7d:6b:a1:
62:12:8e:86:1d:86:0f:c1:ed:d5:d1:34:7f:0c:fb:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9C:A7:F0:4C:F2:20:14:15:92:38:DE:D4:49:F2:4F:E9:8F:11:46
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2DB8E4162A6611ECB9904D41D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:95:88:c4:3c:9a:81:f8:91:9f:d0:4f:49:20:26:82:aa:05:
17:62:91:ce:54:86:b4:e1:8c:48:87:36:fd:cf:01:16:c1:29:
1e:43:02:7c:0a:93:49:93:a0:3d:0e:27:eb:e3:65:e6:6c:6b:
d9:e8:c4:e6:a1:f9:83:05:9f:99:24:3d:55:de:21:af:05:0c:
98:06:fd:84:e5:8c:6f:d1:55:66:37:60:63:0d:4a:9f:c6:f9:
b5:72:f5:c7:82:0a:87:7b:06:00:c9:79:1c:39:ab:d2:25:2e:
63:02:ac:91:6f:37:35:d4:40:d4:2d:a7:5e:e8:a1:78:47:5f:
0b:4a:50:9e:fb:39:dc:f6:6e:66:ac:97:37:81:73:48:82:9e:
5b:7b:2d:50:02:bc:ff:42:d1:9c:24:8f:ea:f1:fa:72:c1:23:
02:1b:d7:90:c1:17:7b:c5:67:c6:7c:cb:c1:05:cb:24:90:ac:
30:cc:37:80:a0:82:47:63:6f:6b:d5:a0:c2:01:4a:2e:f9:86:
f5:0f:54:e5:61:25:13:7b:47:2f:3c:62:b2:e5:d1:d2:1d:0a:
04:93:b3:62:77:ee:2b:4f:4f:97:59:8b:b8:72:eb:25:9e:81:
a0:95:1e:58:4f:63:33:65:c8:e2:eb:a9:b3:f4:a7:c0:33:64:
ac:dd:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org