Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/36DF50F60BF311EDA6EC97A3F1222468.roa
File: 36DF50F60BF311EDA6EC97A3F1222468.roa (raw, json)
Hash identifier: xb5mL5JKz6wOmvMojoxMJ2IMEsGfGZ20srHIoOG75x0=
Subject key identifier: F9:75:33:18:4E:D8:96:D5:6D:A8:00:C0:80:0F:96:24:FE:7B:1C:59
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0578
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/36DF50F60BF311EDA6EC97A3F1222468.roa
Signing time: Mon 25 Jul 2022 08:24:34 +0000
ROA not before: Mon 25 Jul 2022 08:24:31 +0000
ROA not after: Wed 07 Jul 2032 08:24:31 +0000
asID: 36916
IP address blocks: 41.221.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 25 08:24:31 2022 GMT
Not After : Jul 7 08:24:31 2032 GMT
Subject: CN=62de5342-930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:7e:81:92:b3:66:61:55:e4:79:60:a1:0e:
03:37:a3:5c:10:7c:5e:21:f9:6a:89:78:b8:1e:18:
54:ba:67:11:05:93:a5:24:01:6a:3d:c1:f7:9b:52:
fd:36:cf:0a:58:08:72:36:56:f7:05:9e:01:45:b9:
2f:73:6c:6a:58:2b:a0:c8:88:38:44:2f:4e:9b:17:
2f:46:4b:e8:99:cc:1f:c3:23:b4:0d:53:49:3c:74:
e7:e0:d9:69:e9:4d:f9:b6:a4:86:ed:c3:40:fc:40:
35:d8:13:f8:44:e2:6d:b1:73:94:ec:54:45:05:e7:
f8:d3:b7:ed:6b:23:8c:8c:8d:09:cb:d4:2f:79:55:
2b:bf:0c:b0:2f:77:25:cf:4c:6a:5b:b0:30:51:0b:
3f:c5:75:ef:01:9b:87:e8:cc:47:b5:72:ff:ff:4e:
10:d2:2d:15:bd:a2:9c:20:55:c3:2f:60:46:38:54:
0c:aa:bb:76:3f:c2:ff:0d:e6:c3:06:37:fd:f2:bf:
85:22:a5:d9:95:44:c7:5a:68:7f:6d:aa:4d:66:f5:
d5:ce:9d:bf:d2:38:d2:b3:4c:c0:0d:2b:f9:9f:b4:
7b:19:47:33:86:74:0e:7a:cb:83:59:f4:20:f4:d4:
69:2c:9d:a8:66:35:1d:ea:88:b2:8c:f1:2b:45:61:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:75:33:18:4E:D8:96:D5:6D:A8:00:C0:80:0F:96:24:FE:7B:1C:59
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/36DF50F60BF311EDA6EC97A3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.230.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:21:c6:8f:0a:26:23:99:99:99:00:aa:f4:b5:50:cf:4f:2b:
3b:7b:0e:17:f9:54:a8:78:ae:21:00:86:d3:d1:7c:70:0a:9c:
59:6c:e4:7a:8c:67:c8:6c:c4:54:36:07:c5:b9:25:fe:18:07:
1e:a2:ec:32:21:83:d3:b1:a3:0c:72:6e:db:c5:b8:58:36:45:
ec:35:07:c5:63:63:6f:d5:9f:91:b0:12:be:4a:4a:c6:06:16:
22:5c:ea:ac:6f:99:7b:50:2c:c7:79:db:70:c4:90:c6:8c:b0:
b3:0e:42:89:72:cb:93:7b:91:8a:59:5f:c4:f0:b1:e7:0c:6c:
30:20:97:52:38:3a:2d:97:87:b6:c7:cd:f7:31:1e:79:18:e8:
8d:6c:82:34:06:ab:a0:e5:1e:32:31:01:b4:da:2b:86:8a:d1:
2b:96:d5:d1:7b:e8:ef:34:b6:37:8f:6f:1b:60:18:96:69:22:
54:f3:17:27:6b:b2:41:93:af:b3:c3:a6:33:2c:e1:c6:4a:2c:
ec:f8:d5:a1:3c:b5:0a:42:14:e1:48:f4:ed:b7:ba:16:9b:46:
f1:1a:eb:c9:03:b9:0f:54:82:5a:79:ed:d8:fa:ab:b8:28:0a:
2f:08:87:c8:91:0f:91:94:97:b7:36:36:c2:07:ff:1d:37:8b:
6f:1d:1d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org