Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3769E3EA797711EEBE1F1F8B4AD9E6FC.roa
File: 3769E3EA797711EEBE1F1F8B4AD9E6FC.roa (raw, json)
Hash identifier: T+E3iN3PsgXEwbqYDeu+Uf2VZec5XVe+yYg48Tc28oU=
Subject key identifier: E1:7E:E7:F2:0F:B1:46:CA:D3:C2:07:E5:BF:D4:BD:C2:32:C8:3C:C2
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 07A9
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3769E3EA797711EEBE1F1F8B4AD9E6FC.roa
Signing time: Thu 02 Nov 2023 11:59:03 +0000
ROA not before: Thu 02 Nov 2023 11:59:00 +0000
ROA not after: Wed 23 Nov 2033 11:59:00 +0000
asID: 30431
IP address blocks: 41.180.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Nov 2 11:59:00 2023 GMT
Not After : Nov 23 11:59:00 2033 GMT
Subject: CN=65438f07-bfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5f:b0:df:3c:37:8e:ac:53:dd:7d:5f:1f:01:
84:f7:37:fb:1d:5b:6c:4e:10:97:18:60:d4:df:10:
83:29:b1:10:fd:06:39:0e:3c:51:b3:bd:a3:63:41:
e8:11:05:c1:76:95:75:7a:71:c5:67:01:e6:74:85:
94:02:0b:cb:39:b8:0e:ca:b5:7b:06:5d:99:c3:ed:
35:7c:df:43:44:6f:23:2f:f4:47:72:6e:e2:66:10:
20:da:8c:7c:bd:1a:92:ab:23:1f:75:52:84:b8:29:
5e:5f:1f:3e:79:5c:0c:79:c2:9d:45:7d:e2:34:cb:
dd:26:22:25:8e:ed:c6:2d:8b:9e:54:a8:58:3a:48:
65:28:76:52:98:a3:b6:c6:cb:fe:17:1f:c9:8f:07:
b6:4e:ad:00:85:dc:55:37:23:8c:24:4d:43:4c:6e:
73:46:48:25:35:60:83:c5:19:19:96:32:53:be:c2:
ab:5c:27:c7:21:83:ce:0c:cb:6b:ae:48:d6:13:3d:
0f:ae:90:71:00:24:be:22:15:2d:c7:f7:be:42:22:
db:64:91:4d:b8:14:83:8a:1d:11:b5:e7:2e:cf:6c:
62:18:ee:71:57:bf:fb:de:4c:c9:50:78:d0:37:04:
09:c4:7d:cc:f9:47:30:21:3e:c5:5c:ab:5d:57:0c:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:E7:F2:0F:B1:46:CA:D3:C2:07:E5:BF:D4:BD:C2:32:C8:3C:C2
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3769E3EA797711EEBE1F1F8B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:cf:54:d7:45:64:7e:07:03:69:2a:ae:3f:b8:11:59:36:b0:
45:a8:9d:87:c2:26:57:5a:0c:ce:70:f3:14:db:1c:2a:cd:72:
41:ea:d7:2c:9e:75:10:2b:04:eb:40:df:bb:8d:92:9c:88:be:
41:96:b9:e9:6f:2a:94:53:c6:b2:0b:20:1c:54:81:d1:84:49:
f1:ce:7d:26:69:61:c7:b0:f6:ab:50:a3:7a:f6:59:b2:c8:9b:
9f:f1:4f:1b:3c:95:b0:c2:55:2a:ed:c8:e5:d2:3e:b9:c2:d5:
7f:2d:ec:ed:06:9a:c4:b8:2f:59:4e:2f:58:fc:a2:22:ab:5e:
62:76:f5:d0:fc:1b:35:3f:fa:76:66:36:f2:9a:b9:e1:1f:25:
22:1c:10:a7:de:65:d1:47:97:4f:bf:e2:15:fa:ef:5a:9e:ae:
44:d2:44:7d:ce:43:b0:30:9a:2b:fa:98:c7:fb:b5:56:ec:c8:
29:b1:06:31:cf:d6:cd:78:ff:8e:73:2b:2c:f9:4a:1c:12:c5:
11:ea:66:69:62:fd:2d:c7:c5:f6:44:62:9d:e9:06:86:04:59:
f6:52:de:eb:fa:20:66:b6:f1:1c:c2:36:51:c8:af:dc:d1:fb:
65:54:76:ed:3c:72:d8:c8:18:34:b6:f6:9c:17:7a:3e:58:dd:
23:0b:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org