Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/575D36080BEA11ED8DA8EF86F1222468.roa
File: 575D36080BEA11ED8DA8EF86F1222468.roa (raw, json)
Hash identifier: Qg4vwGl77lsXgRXBE/0FGrI67UHA0/amKa44DgFoNrA=
Subject key identifier: BB:A9:FD:AA:17:33:48:9B:10:53:F6:BC:AE:3A:2F:B6:5B:C8:D3:36
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0550
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/575D36080BEA11ED8DA8EF86F1222468.roa
Signing time: Mon 25 Jul 2022 07:21:03 +0000
ROA not before: Mon 25 Jul 2022 07:21:00 +0000
ROA not after: Wed 07 Jul 2032 07:21:00 +0000
asID: 36916
IP address blocks: 41.138.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360 (0x550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 25 07:21:00 2022 GMT
Not After : Jul 7 07:21:00 2032 GMT
Subject: CN=62de445f-f02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:99:33:5e:c8:c1:fd:47:a3:e5:d5:6a:89:
d1:93:ca:87:7a:e4:ad:4d:5b:48:fc:9a:05:f9:36:
b2:ef:0c:41:19:31:09:8b:a4:62:ef:74:92:f3:e3:
83:61:e8:68:40:53:11:4a:20:38:d0:e4:60:05:b8:
16:e2:29:7b:2c:c6:0d:b0:7e:3c:ea:0f:a7:63:80:
39:34:43:34:e5:ec:40:68:b4:d5:37:13:bb:e9:57:
c2:ea:1a:09:d1:43:07:49:0b:aa:c4:11:54:e8:57:
5d:23:68:35:6b:0a:08:69:77:a7:ea:4a:6d:b9:14:
23:f6:f1:1f:54:d4:4a:0a:41:be:c8:6a:17:84:10:
2e:38:15:b5:2f:82:2e:81:f8:dd:33:2e:5b:ed:87:
1e:02:27:98:c8:91:bc:00:fb:29:35:cf:f3:56:97:
c3:17:74:fc:b1:3b:e7:55:2b:16:e5:a2:cd:e4:5a:
de:d1:46:ae:34:f9:67:33:b3:1d:2f:3a:5a:c4:ae:
af:e4:f6:2b:5d:e8:39:41:c6:f2:18:49:7e:85:9f:
41:88:09:0f:8c:da:b1:1b:68:dd:42:30:bd:73:ab:
e7:8d:51:7c:20:da:cd:dd:36:79:2c:c5:28:05:5c:
a6:6f:a2:21:f2:61:55:a7:4f:92:44:29:d7:eb:f5:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:FD:AA:17:33:48:9B:10:53:F6:BC:AE:3A:2F:B6:5B:C8:D3:36
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/575D36080BEA11ED8DA8EF86F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.138.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:09:ba:7f:db:19:e0:92:24:49:74:8f:f7:b6:68:5b:10:00:
16:72:bc:eb:75:21:a2:63:d2:9e:25:d3:fc:85:7b:14:d2:b1:
f9:76:cb:3b:bb:fb:91:3d:f6:44:66:7b:bb:c5:82:26:77:92:
7a:59:ca:21:ff:51:e0:95:b7:51:8b:2e:57:35:75:c2:d6:87:
a7:1c:0c:40:d3:eb:ee:9d:1d:cf:36:a7:a5:cb:43:7b:0a:97:
22:84:16:9e:09:5e:dd:ab:98:d4:25:b4:ae:4c:52:7a:75:3c:
dc:5f:cd:78:bf:90:50:88:16:c2:31:1c:09:a7:54:c0:d9:a8:
5d:b0:22:34:dd:20:3f:27:85:36:d8:fe:66:93:08:2f:a6:54:
38:31:60:35:ec:7f:1f:68:57:63:51:30:8d:57:fd:8f:85:db:
94:02:3d:6c:13:c5:20:70:b8:c9:56:de:de:1a:c9:95:72:ee:
03:8a:e4:91:c2:97:f9:aa:6f:56:ec:9c:41:cf:a0:05:f4:a5:
d7:79:a3:30:fe:51:48:f4:b4:28:24:6f:0b:8d:d4:ea:7b:2d:
a8:f4:ff:06:a5:64:5f:05:25:ab:f0:5f:af:84:1b:11:7f:52:
ab:1b:6c:a0:94:5a:ce:48:09:8a:d1:63:9b:21:04:13:80:2e:
e4:14:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org