Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/959F65C20BF311EDACC2E6A4F1222468.roa
File: 959F65C20BF311EDACC2E6A4F1222468.roa (raw, json)
Hash identifier: 6rlouORk1+KbMNHS/ejIrzAvGJmvUaoH7YMqy+iS4vc=
Subject key identifier: 46:B3:E5:78:8C:A5:15:8E:03:A1:03:95:FE:FE:8F:1E:9E:01:79:52
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 057E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/959F65C20BF311EDACC2E6A4F1222468.roa
Signing time: Mon 25 Jul 2022 08:27:13 +0000
ROA not before: Mon 25 Jul 2022 08:27:10 +0000
ROA not after: Wed 07 Jul 2032 08:27:10 +0000
asID: 36916
IP address blocks: 41.221.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 25 08:27:10 2022 GMT
Not After : Jul 7 08:27:10 2032 GMT
Subject: CN=62de53e1-ef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:f5:8f:1f:98:a9:59:b8:07:73:b5:f0:81:
0f:a2:c6:05:77:e1:ed:c9:46:ae:50:3d:0a:ea:36:
a6:01:93:92:ba:15:27:46:ff:99:09:ed:32:f4:ff:
6f:48:d7:ee:d1:ab:3d:05:2c:04:15:29:61:e2:ba:
08:34:8a:44:a8:fb:05:43:f5:44:cb:85:cf:99:70:
d1:fc:f6:3b:83:1e:c1:12:61:ed:29:24:64:46:57:
f1:32:e7:e1:13:93:fe:e5:d4:32:28:d4:b3:cb:0b:
7a:2b:75:28:00:9d:f7:01:6f:30:3c:78:49:4f:dd:
77:39:69:39:36:36:2b:8c:e0:11:dc:de:44:a7:5a:
55:a6:4a:ae:3d:56:3d:27:de:ac:8b:2b:bc:fe:ff:
bc:5a:d3:dd:13:24:1a:ee:32:25:ed:98:bf:1f:22:
40:b5:2a:7a:12:88:f6:50:1e:be:73:2f:21:4f:77:
0d:bb:1f:17:b8:a4:e8:02:be:ee:b0:b3:03:6f:b4:
ba:62:d2:85:83:11:fe:de:84:39:37:01:17:71:ae:
3b:bd:39:55:6d:a2:dc:ab:4d:a2:07:50:26:ae:3b:
3c:0c:90:ad:d8:c9:b7:56:2f:87:0f:a3:83:fd:d8:
84:12:1c:47:a5:c8:24:96:3e:ff:8b:2c:34:80:9d:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B3:E5:78:8C:A5:15:8E:03:A1:03:95:FE:FE:8F:1E:9E:01:79:52
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/959F65C20BF311EDACC2E6A4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:91:ad:ad:20:df:39:8c:01:02:3c:bd:ec:50:34:1f:36:e9:
ec:41:11:8b:95:cd:5c:0c:1a:d5:74:b7:a9:df:69:c5:73:02:
95:9e:a2:19:08:2e:7e:60:cd:a8:65:ab:2c:d1:b6:bf:43:23:
72:c7:58:17:a3:ac:0c:92:ee:46:ff:5d:42:44:e4:20:e6:8f:
25:6c:b1:3a:18:c8:27:49:a2:0f:e7:54:16:1a:55:c1:1e:54:
fe:9a:3a:2b:c2:3e:35:25:a0:3e:ae:b6:58:fc:3e:8e:fb:08:
5a:cb:a6:0b:7e:eb:43:6a:f4:8b:2a:b9:c7:d0:0e:56:29:54:
4f:c7:65:bb:71:22:36:88:32:4e:16:64:46:c9:f1:23:9c:0d:
18:de:91:4e:30:9a:55:43:28:c7:8e:fc:b3:9d:3b:43:ec:d2:
69:97:f9:90:56:b2:2d:e9:2e:e6:b3:fa:23:00:d9:ae:ef:73:
5a:4b:7c:41:96:8b:31:25:e8:30:73:21:6b:62:99:e5:bd:d0:
fd:ae:72:0d:51:d3:fc:1d:68:33:9f:92:38:0c:46:a9:f1:5a:
68:82:00:dd:d7:82:9f:8d:15:0f:3b:ca:75:e9:9c:0a:0a:57:
97:55:9a:13:57:40:7d:fe:da:93:21:14:3d:fc:4c:7b:66:7e:
23:ff:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org