Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B292C80C797711EEB8B1D30D4AD9E6FC.roa
File: B292C80C797711EEB8B1D30D4AD9E6FC.roa (raw, json)
Hash identifier: K8daNHa8dKQIXWY9vZp4mmMg/gfK33bBZP9xhHnQq2I=
Subject key identifier: 17:F0:03:E8:BF:5C:BF:12:89:B6:6D:A1:64:94:C6:4F:F3:47:19:35
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 07AF
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B292C80C797711EEB8B1D30D4AD9E6FC.roa
Signing time: Thu 02 Nov 2023 12:02:30 +0000
ROA not before: Thu 02 Nov 2023 12:02:27 +0000
ROA not after: Wed 16 Nov 2033 12:02:27 +0000
asID: 30431
IP address blocks: 41.180.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Nov 2 12:02:27 2023 GMT
Not After : Nov 16 12:02:27 2033 GMT
Subject: CN=65438fd6-23b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:94:fa:91:c2:24:cd:e4:82:b3:c0:44:08:70:
7f:e8:97:ae:87:70:32:57:3e:6b:58:af:e4:38:f2:
c0:d9:9b:ca:45:06:90:3f:6d:74:52:56:39:31:91:
40:f6:80:40:7f:2b:45:6a:77:78:7b:84:11:d0:14:
e2:3c:ca:c5:06:09:df:3b:2c:47:82:70:09:48:95:
90:e3:70:80:ca:74:df:9e:80:8d:01:d4:36:95:d4:
56:41:57:2f:fb:1d:86:4b:cf:9c:17:2a:cc:b5:4a:
a0:36:96:1e:e1:e0:d1:4c:ec:b4:a8:86:10:31:80:
aa:aa:24:54:49:20:21:da:a2:2f:20:b1:74:22:8e:
65:77:0b:8c:d3:7f:60:82:32:dd:a1:b4:23:48:9d:
3f:98:03:1f:82:dd:38:2f:76:af:17:29:fa:7c:e7:
73:d5:03:d8:f1:8f:be:ff:1c:ad:e9:83:6c:47:87:
f7:92:99:83:44:aa:10:3a:82:86:99:39:fd:fc:1b:
31:4e:cc:92:93:e1:92:78:38:ae:a4:4e:64:be:1e:
0b:0b:b9:e3:78:41:21:4f:d6:6c:11:ed:ca:6a:4f:
ed:0f:1d:b8:97:fc:e3:38:6b:5b:2e:5a:19:60:5f:
2d:05:53:ef:32:44:ce:7b:b3:ee:c9:23:dd:f1:dc:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:03:E8:BF:5C:BF:12:89:B6:6D:A1:64:94:C6:4F:F3:47:19:35
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B292C80C797711EEB8B1D30D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.208.0/21
Signature Algorithm: sha256WithRSAEncryption
10:38:8a:b5:e7:e5:1f:4b:ef:82:96:ba:49:91:e8:a1:4b:b4:
b7:1d:fc:e3:60:16:22:d6:92:76:1c:74:71:f9:e5:71:21:ab:
47:56:12:64:c8:6a:9b:f3:6d:3d:49:7a:8b:d3:ad:c6:4b:d8:
45:d9:0a:6c:a1:af:d7:0c:59:8b:0d:bf:e2:71:ef:2d:ab:ce:
0e:d8:92:59:32:63:59:35:0d:fe:c1:16:95:54:a4:27:5e:f8:
f5:53:be:df:1f:48:e0:50:ca:0d:e1:31:83:0e:7e:27:41:59:
31:fb:89:6a:97:8a:9f:3e:e2:37:8e:01:3d:90:ab:43:e5:60:
9d:7d:19:70:fa:f6:06:f7:49:a5:65:ca:d3:2b:07:5b:74:80:
ae:25:fd:26:80:7c:74:ab:a7:ab:1d:12:27:5e:ad:90:bc:cc:
08:64:4d:0b:a8:8c:51:47:39:7b:35:58:ad:0c:d5:e6:2d:86:
cd:39:ae:57:cd:4b:62:29:89:5a:a6:31:80:09:9c:0a:ba:f0:
6c:c5:e5:d8:6e:38:7b:b3:c4:ac:10:c5:db:e5:ad:e3:8c:d2:
84:60:fe:69:2c:e0:bb:71:ac:43:8a:57:f6:7b:98:be:91:90:
4d:a0:3d:18:a4:af:0d:7d:b6:cc:16:dd:3a:2f:58:f4:ca:c5:
70:38:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org