Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AEA66C80F3B811ECA91DD8A2F1222468.roa
File: AEA66C80F3B811ECA91DD8A2F1222468.roa (raw, json)
Hash identifier: a6WEtDVrR+9ajEDegxBvul2Xf9squU/Z4QuhZE+gSYA=
Subject key identifier: 19:6E:51:1D:EF:D3:73:E4:A0:25:4C:62:44:51:44:4A:4D:90:71:59
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0503
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AEA66C80F3B811ECA91DD8A2F1222468.roa
Signing time: Fri 24 Jun 2022 12:25:07 +0000
ROA not before: Fri 24 Jun 2022 12:25:04 +0000
ROA not after: Wed 12 Jun 2030 12:25:04 +0000
asID: 36916
IP address blocks: 41.138.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 24 12:25:04 2022 GMT
Not After : Jun 12 12:25:04 2030 GMT
Subject: CN=62b5ad23-4ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:8a:39:38:ba:0f:25:b6:b2:12:0b:d8:69:
1d:a0:10:e3:c1:c7:3d:49:22:37:10:21:6a:2c:e6:
a5:eb:f3:c0:d5:23:eb:56:c7:16:df:16:f8:71:39:
5b:51:bb:4f:ab:7d:0d:ea:7a:e3:5a:eb:ab:21:92:
74:99:2c:c9:5d:79:9b:b8:61:7f:8e:27:3e:b7:f7:
0f:de:7f:47:64:73:ca:ab:04:33:e7:b0:45:2d:0f:
d2:d7:51:5e:6e:ef:c7:45:ee:a3:10:f9:e1:f3:d1:
bc:83:ca:d9:fe:00:b9:ab:bd:5c:aa:c6:50:15:e8:
ad:bf:21:ba:8c:bc:cb:d5:7f:02:40:27:93:92:5f:
1a:84:7f:29:fc:ca:6e:12:fa:49:20:bc:48:62:78:
c8:2a:74:3b:81:e9:47:7e:45:1a:d6:e1:7d:d4:dd:
08:55:5d:42:f5:ae:64:cd:1b:99:0b:84:08:be:79:
a4:5e:ef:22:4b:cf:00:6f:77:a2:3a:b4:53:f7:be:
ee:14:9f:89:7b:19:4e:53:d2:99:3e:10:b4:a2:50:
11:a3:f9:b6:41:76:61:ac:28:01:b8:13:96:35:d6:
d2:30:18:e0:19:9c:b2:3a:d7:27:95:76:68:a8:ff:
3a:71:19:bd:45:e6:51:9a:1c:69:d7:b7:31:ed:12:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:51:1D:EF:D3:73:E4:A0:25:4C:62:44:51:44:4A:4D:90:71:59
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AEA66C80F3B811ECA91DD8A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.138.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b0:19:d8:6b:98:30:32:4e:2e:e7:74:f2:fa:f0:49:de:a1:
15:61:cb:7d:6f:6e:df:2c:af:13:e7:33:0c:87:5c:6c:13:9a:
e9:ca:2d:83:fd:3e:81:67:4d:cf:7e:c3:4f:52:3a:38:73:f1:
d9:71:44:7a:ca:18:01:19:bf:2c:83:84:fa:50:f3:21:5c:bb:
99:12:1c:b2:e3:69:c2:94:ed:23:84:db:ab:e0:60:c3:7e:10:
a5:66:6b:2e:92:64:b8:82:05:da:46:86:d7:e8:94:b6:81:04:
81:dd:d9:14:c3:bc:ee:86:cc:3d:91:50:26:5a:84:98:a2:f1:
ea:70:bb:5d:cb:5e:b7:f1:9c:9a:b9:de:83:9d:43:c7:d7:88:
c8:9b:06:4b:b6:aa:a9:d2:29:1e:0c:6a:0e:b4:7f:d8:ad:24:
f3:e4:9e:ac:8f:fb:93:69:64:49:b8:22:c7:af:e3:b4:97:f6:
ac:b4:f9:05:d1:77:16:29:e8:5f:1e:fa:c3:ba:1a:5c:67:2f:
17:ee:6f:0d:60:19:29:92:03:e7:70:d3:29:80:ea:9b:e5:7b:
1c:ea:4a:a8:c2:ca:65:08:53:ca:c6:cd:d7:5b:86:33:4f:9d:
b3:97:34:41:a3:3c:2a:fa:74:f2:8a:b0:17:4b:08:2e:1b:f7:
19:95:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org