Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/35731BE605FA11EF8E5E3625017001B1.roa
File: 35731BE605FA11EF8E5E3625017001B1.roa (raw, json)
Hash identifier: Hje1MJ7ubuRQYrHdP0Cx+SHPmqbN/dVDL2jxecge1Jo=
Subject key identifier: 15:46:C7:47:AD:68:E4:2A:72:92:3D:E4:55:62:2F:15:BA:F7:FE:53
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 086A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/35731BE605FA11EF8E5E3625017001B1.roa
Signing time: Mon 29 Apr 2024 07:29:27 +0000
ROA not before: Mon 29 Apr 2024 07:29:23 +0000
ROA not after: Wed 19 Apr 2034 07:29:23 +0000
asID: 36916
IP address blocks: 41.180.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154 (0x86a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Apr 29 07:29:23 2024 GMT
Not After : Apr 19 07:29:23 2034 GMT
Subject: CN=662f4c57-38bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:89:42:9f:4e:ff:80:22:1c:e2:63:e5:d9:
3f:f2:44:41:0e:c2:97:89:3c:94:36:0d:82:e7:fa:
68:7d:22:3c:8a:35:e5:e0:2a:b3:42:fe:43:51:f5:
85:80:0a:4f:c3:fb:8e:05:8e:ff:97:03:29:eb:c4:
1e:41:7a:8b:32:01:23:1b:00:53:d0:97:2d:73:5e:
de:20:88:82:5f:bc:de:8f:95:18:2c:96:24:fc:76:
e5:4e:40:46:33:94:34:c5:1f:05:3e:8e:d3:b8:87:
16:e0:af:5f:ec:11:d2:4c:6f:08:2c:f7:de:85:21:
13:a0:3d:9b:75:99:fc:32:47:ff:cd:ad:32:fd:33:
f5:6f:49:d6:f8:bd:94:d6:23:c0:05:ea:58:65:e0:
5a:8c:31:13:62:85:7d:3c:a6:b6:a8:67:46:6b:a7:
67:3a:65:ad:16:64:52:cf:ab:70:e0:dc:71:eb:da:
4e:14:c1:ed:55:51:e7:35:5c:10:54:80:a4:b7:a7:
d7:26:0d:0c:c8:95:68:24:58:ab:d1:67:e5:d1:2d:
45:15:9d:4b:43:31:19:d3:d2:72:1e:e7:9d:40:98:
84:25:ed:f5:44:26:d6:50:bb:95:f0:bf:4f:ac:53:
90:91:93:46:41:1d:88:9d:76:55:c9:1e:24:09:e2:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:C7:47:AD:68:E4:2A:72:92:3D:E4:55:62:2F:15:BA:F7:FE:53
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/35731BE605FA11EF8E5E3625017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.252.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:a1:72:6d:a5:7d:87:ee:10:c3:9f:2b:3e:2b:59:8d:82:20:
a7:5f:d3:c6:42:6a:52:44:75:58:82:f7:ff:7a:06:dd:45:0e:
17:9f:32:3d:ea:2f:b6:54:2e:91:76:47:a1:77:6f:12:c4:22:
e1:dd:65:9e:c0:20:1c:d7:dc:e5:4a:e0:4c:cf:24:fa:ee:16:
01:9b:40:d4:b6:4a:36:b9:fd:db:08:12:7e:a6:bc:ad:ac:ef:
ef:67:70:39:5c:02:e4:d5:5e:6b:08:2a:cf:ea:34:e9:7b:64:
04:b4:e0:b1:51:d8:64:4b:b3:d4:98:53:59:8e:6c:42:be:8a:
63:5d:d9:c5:5c:49:37:6d:b6:4f:e6:f0:26:52:c4:ce:8e:a7:
08:12:5c:1d:66:76:a3:aa:6c:38:a4:bf:d9:15:b1:33:56:85:
6f:59:fc:d6:18:fc:9d:1c:46:9b:eb:93:78:1a:5b:c6:ab:36:
c5:a1:71:eb:a3:89:fc:02:56:00:be:31:f1:48:97:c4:b3:01:
10:b6:7b:0b:f4:de:e8:0d:20:55:c0:ec:bc:51:7a:64:28:95:
1a:28:b0:dc:d4:f2:d2:01:56:43:90:ff:39:52:04:1b:34:1f:
a7:fa:af:3a:66:b8:01:de:04:40:37:17:e7:fe:5f:a0:de:bf:
ec:7c:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org