Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/516A0CE00BF311EDA87FFAA3F1222468.roa
File: 516A0CE00BF311EDA87FFAA3F1222468.roa (raw, json)
Hash identifier: tjphmcnmFI564OdA7jX8WnoT4jAenPkqlk24qL2AqBs=
Subject key identifier: 10:4E:1A:F0:84:6E:A3:97:8F:16:0A:A9:56:20:C8:03:01:37:8E:16
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 057A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/516A0CE00BF311EDA87FFAA3F1222468.roa
Signing time: Mon 25 Jul 2022 08:25:19 +0000
ROA not before: Mon 25 Jul 2022 08:25:15 +0000
ROA not after: Wed 07 Jul 2032 08:25:15 +0000
asID: 36916
IP address blocks: 41.221.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 25 08:25:15 2022 GMT
Not After : Jul 7 08:25:15 2032 GMT
Subject: CN=62de536f-0be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4f:ea:b5:ee:af:c2:87:dc:2b:6d:7c:50:94:
4f:26:fd:b4:84:85:75:16:a3:ae:43:d3:44:32:cb:
71:22:a4:bc:9c:7a:0f:14:1a:64:12:30:93:eb:d1:
a1:f6:bc:1d:c7:0a:de:b1:af:e7:9c:17:e3:e9:c2:
9c:0e:be:97:8e:ee:b2:fb:c3:47:9c:b3:bd:47:f3:
b6:ed:7d:85:47:96:1e:09:72:6c:fc:03:85:9e:d0:
71:61:e6:c9:30:30:06:75:88:64:cd:9a:2b:c0:1f:
3a:5d:7a:e5:b3:65:81:19:b0:03:67:66:22:49:dd:
d2:a7:5a:45:2f:d1:83:f2:4e:10:98:df:38:83:bc:
0d:5e:bd:be:00:10:2c:cb:53:4a:bc:57:a9:94:79:
80:85:6f:45:6a:b0:25:e4:6f:5c:4a:81:d7:eb:8e:
dd:ba:43:48:6c:16:0a:cf:27:61:83:b2:d2:01:cd:
6c:8c:85:61:83:df:9f:0c:c4:f5:68:e1:f2:21:ef:
bf:9f:d5:53:62:2d:7e:c2:56:d3:24:bf:a1:3d:b9:
b0:7c:d4:e6:96:ab:77:07:cd:c4:a0:a2:f9:56:82:
54:e2:c1:6e:a0:e5:3d:da:76:ac:09:e6:85:55:ca:
43:3b:81:f9:58:37:55:4a:f0:d1:5f:7a:b7:7d:de:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4E:1A:F0:84:6E:A3:97:8F:16:0A:A9:56:20:C8:03:01:37:8E:16
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/516A0CE00BF311EDA87FFAA3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.232.0/24
Signature Algorithm: sha256WithRSAEncryption
50:72:0f:44:48:ea:7d:98:dd:a6:b0:b4:7f:6d:78:fb:9c:5b:
a4:06:b1:60:2f:88:8d:d8:8d:09:53:4a:30:4b:fd:2f:72:bd:
22:90:e7:10:13:d1:32:0c:8a:0c:fc:51:6d:15:ef:34:4c:0b:
2e:ef:0b:4c:ce:3b:bc:c9:5f:86:d2:04:7b:68:19:1d:fb:d0:
55:be:90:79:e5:96:e6:43:b7:13:b7:05:69:a7:23:71:3a:01:
4b:39:e9:9d:dc:e3:76:57:47:07:84:bc:97:c4:a0:d4:74:73:
e1:59:d3:22:f3:19:fb:2a:d8:e3:11:56:98:60:55:3d:88:10:
5f:c1:14:29:81:03:d3:95:93:5e:e9:8e:29:ee:a7:16:c9:07:
4e:77:7a:d1:42:99:15:22:c2:d0:3d:e7:33:88:ea:b6:10:9b:
5e:4e:e6:34:dd:cc:cd:51:67:25:2e:b4:f1:60:f9:32:24:a6:
38:a7:c5:cc:34:14:1a:4b:18:f9:59:05:26:be:c4:3e:08:6a:
c1:e0:1e:b5:ec:43:f0:75:b4:d9:93:2d:0d:61:76:0e:8a:7f:
33:b8:fc:79:08:9f:27:c7:65:2a:63:7b:9e:ee:94:f7:c7:76:
1f:65:23:4a:cc:e7:25:09:dc:e9:dd:92:0b:b6:25:87:74:cd:
4f:99:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org