Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AC785F3E0BF211ED89C1EAA1F1222468.roa
File: AC785F3E0BF211ED89C1EAA1F1222468.roa (raw, json)
Hash identifier: 63OHc51L2xRQ8kMqt+FwX9Qf6yd/v3xR5TnC/IsztOY=
Subject key identifier: A9:3F:B2:20:98:B9:AA:95:77:43:7C:C5:FC:15:2B:C5:12:E3:D0:4D
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0570
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AC785F3E0BF211ED89C1EAA1F1222468.roa
Signing time: Mon 25 Jul 2022 08:20:42 +0000
ROA not before: Mon 25 Jul 2022 08:20:38 +0000
ROA not after: Wed 07 Jul 2032 08:20:38 +0000
asID: 36916
IP address blocks: 41.180.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 25 08:20:38 2022 GMT
Not After : Jul 7 08:20:38 2032 GMT
Subject: CN=62de525a-96e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5e:8a:c3:51:13:dc:ec:5c:1a:50:74:83:20:
f4:e1:3d:a0:1c:17:56:99:6b:29:b3:7c:29:07:b1:
d0:7e:b9:8f:45:85:60:91:85:48:39:1b:c7:e1:ff:
9f:7e:58:a7:62:2c:7b:72:3c:a6:db:1c:8c:a2:ab:
de:16:c6:34:3a:7f:5f:62:18:27:36:22:23:22:f9:
e2:8c:ef:65:0d:0a:e9:0a:5b:b6:3a:b2:52:80:c7:
2c:96:77:aa:18:a8:e3:54:15:ca:2b:8c:18:0f:42:
9b:e1:1e:e2:09:43:f7:c2:e6:1c:99:d6:8a:94:11:
6d:b2:6f:a4:86:5d:3d:ed:fc:e9:87:af:c7:06:f3:
fb:32:fe:ec:c4:64:49:63:6c:ed:bc:68:d2:a3:bb:
6e:f0:6a:b9:89:04:3e:1e:28:e4:ab:8d:35:66:c8:
fc:6c:d5:71:04:5d:d7:ee:4b:61:36:f1:7e:2c:ad:
48:9f:3b:1c:5e:a4:b3:39:27:e7:20:e1:d0:a0:e3:
cc:5e:d5:3c:d0:7d:69:9f:49:ae:b4:b9:fe:2a:51:
69:19:28:2a:0b:50:33:68:5c:54:1a:4c:74:bb:38:
67:0c:21:ca:9c:dc:34:7a:2c:20:ed:62:f6:2a:14:
26:a1:01:4c:e4:15:11:41:c9:f3:ed:b7:af:dc:7c:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3F:B2:20:98:B9:AA:95:77:43:7C:C5:FC:15:2B:C5:12:E3:D0:4D
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AC785F3E0BF211ED89C1EAA1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.96.0/21
Signature Algorithm: sha256WithRSAEncryption
09:f7:9f:b5:75:4e:5f:bb:77:dd:3c:2b:e5:14:5f:44:4b:32:
8d:68:e1:34:0e:2a:17:13:b3:3f:8d:d3:7c:bb:b3:a8:ae:ff:
a0:ab:61:53:2a:06:31:0e:90:b8:4f:a9:68:bc:28:18:e0:2a:
9a:89:d8:32:1b:7b:af:7d:7d:83:32:b7:6c:ef:f4:48:fc:24:
97:a4:ef:65:30:aa:13:b1:59:e2:aa:aa:5e:92:6d:f0:86:dd:
a8:40:49:f2:0a:0e:13:76:dc:14:75:c2:0f:d3:27:8e:d3:03:
56:19:4d:be:31:2d:50:31:2b:3c:c8:ed:2f:c3:9c:0c:22:c6:
e8:fd:41:05:ac:96:73:65:d9:62:6e:ca:44:98:93:92:74:8e:
8e:05:48:c4:b4:1b:f1:ab:4d:44:0c:c1:00:4a:2e:fe:a8:ba:
c4:45:48:52:ff:fc:51:72:57:cc:06:8a:86:98:ee:8d:e3:37:
4f:f5:13:65:1b:ad:47:74:0a:f4:c3:38:f9:aa:71:1d:05:f6:
20:d1:b5:50:95:53:80:5a:dc:eb:21:16:b0:e6:9c:26:3c:49:
53:05:bc:c6:9c:ea:73:7b:d1:0e:54:1e:d9:cf:89:bf:ab:17:
bb:48:df:f2:22:5b:9d:ad:4a:d0:17:a4:6a:d8:7a:02:12:e8:
f9:dc:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org