Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7DE75FE0F3B411ECB4A5CA95F1222468.roa
File: 7DE75FE0F3B411ECB4A5CA95F1222468.roa (raw, json)
Hash identifier: oDDdUSWQ1Yo3d6vTaZudzJ6Wam6Kf4132Isy3RQRK+k=
Subject key identifier: D9:AE:A5:33:19:78:CE:C7:F9:71:55:9B:A1:72:1F:05:92:29:97:96
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 04EB
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7DE75FE0F3B411ECB4A5CA95F1222468.roa
Signing time: Fri 24 Jun 2022 11:55:07 +0000
ROA not before: Fri 24 Jun 2022 11:55:04 +0000
ROA not after: Wed 12 Jun 2030 11:55:04 +0000
asID: 36916
IP address blocks: 41.180.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 24 11:55:04 2022 GMT
Not After : Jun 12 11:55:04 2030 GMT
Subject: CN=62b5a61b-ae76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:16:a9:e9:d3:91:3f:6a:3b:fb:cc:bf:3c:
04:61:fd:5e:cf:c6:3b:f6:8a:0d:f6:3e:08:50:72:
21:61:fc:67:f7:df:81:fc:54:c6:7a:af:e5:e1:e1:
3b:d1:b4:ec:45:d2:c8:42:e7:92:d8:5d:eb:39:81:
c9:cb:5c:7d:bb:0f:47:a6:3b:8b:6d:ac:56:6e:e7:
b5:44:a1:5a:58:5d:04:29:12:90:75:c0:78:93:33:
44:e2:4e:4b:fa:27:69:e2:d1:cd:d5:05:31:26:1b:
37:ba:8d:7b:4a:d3:54:27:24:dc:cb:47:ee:31:05:
97:29:e4:bf:ef:aa:d6:77:04:cb:5c:cf:23:1f:ae:
44:8c:16:fc:e6:5a:cd:e0:48:b3:4b:b2:46:24:67:
a2:ad:4c:1d:68:97:3a:78:3d:40:72:d0:ec:f3:f7:
ce:cd:dd:5a:ee:79:b1:b9:0c:23:77:b3:8f:5e:8d:
66:78:13:19:ec:ae:48:75:3b:28:10:ba:14:54:e5:
b9:f1:ec:47:93:a8:de:56:d5:c8:40:74:11:6e:28:
f3:ad:23:3f:f8:f6:34:75:d0:e5:f9:c5:85:db:80:
96:61:ce:a2:9a:23:46:25:82:08:0a:2b:92:d0:b9:
16:68:d3:ec:71:9e:85:e9:1a:6d:58:64:5c:68:d8:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AE:A5:33:19:78:CE:C7:F9:71:55:9B:A1:72:1F:05:92:29:97:96
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7DE75FE0F3B411ECB4A5CA95F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:bb:83:ce:d4:ed:b8:c0:56:34:b0:16:36:42:b5:b7:4e:2b:
26:d9:83:80:c2:97:80:8f:30:11:42:77:b9:9f:96:ef:16:a1:
6a:cf:bf:9e:3a:52:32:93:19:38:d7:66:57:b1:2f:89:6b:31:
1f:8e:04:5e:61:dc:b8:27:24:df:2c:d6:1a:b1:b2:d7:1b:cc:
f4:b7:e2:c9:2c:f4:16:50:5c:c1:a7:7d:42:93:b7:46:98:c3:
a6:d6:29:fb:6a:45:90:20:50:19:d3:31:d5:87:50:62:b5:65:
5d:a6:62:9a:a6:7f:48:96:66:26:45:48:33:19:de:70:9b:e0:
0c:99:ab:0c:f0:b8:cb:4d:08:c5:c3:3f:60:26:62:8a:f8:41:
27:ad:a9:2e:23:af:ee:3b:dd:84:b1:75:49:23:10:47:fd:a1:
22:05:d4:3b:46:e2:d0:7b:ca:69:4c:4d:10:17:12:0b:9a:79:
46:53:35:cb:ae:cf:3c:dd:d8:0c:0b:94:3b:e9:9c:cd:42:4d:
a3:52:39:76:c9:9b:6a:3d:bc:4a:0a:02:73:5a:e9:e0:39:4e:
b0:5d:da:c6:53:ed:1c:96:94:65:5c:82:99:41:c9:2d:73:5d:
e4:bd:df:86:3d:6a:7c:d1:99:17:9f:6e:cb:e7:2f:76:2d:02:
ea:a3:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org