Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BBC18D9AF3B911EC8D1F02A6F1222468.roa
File: BBC18D9AF3B911EC8D1F02A6F1222468.roa (raw, json)
Hash identifier: nzxFvlYtYswMjUCMM9ohXWBBzAQUUcnvw0pth4gtP1c=
Subject key identifier: 3F:3F:84:E2:37:C6:82:42:06:9C:BB:54:51:EC:5A:7D:47:68:4E:05
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0511
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BBC18D9AF3B911EC8D1F02A6F1222468.roa
Signing time: Fri 24 Jun 2022 12:32:39 +0000
ROA not before: Fri 24 Jun 2022 12:32:35 +0000
ROA not after: Wed 12 Jun 2030 12:32:35 +0000
asID: 36916
IP address blocks: 41.180.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 24 12:32:35 2022 GMT
Not After : Jun 12 12:32:35 2030 GMT
Subject: CN=62b5aee7-2bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:7e:31:71:bf:1f:f4:78:5e:1e:05:72:a8:
89:18:17:02:8e:e2:cd:fb:40:2e:e4:c6:13:2c:e1:
a2:79:fe:02:8d:41:a5:4e:51:a4:a8:5f:20:37:cc:
75:96:8d:a9:6e:24:e2:80:fd:0b:b2:63:a1:bd:5b:
77:9f:91:32:2b:05:48:e6:c5:e9:fe:7e:36:1e:d7:
be:7e:b6:b5:33:e2:0c:8f:f4:d1:73:85:13:e0:04:
af:7b:2c:76:a5:de:40:1a:a5:50:83:3f:98:c1:63:
64:17:e8:25:c1:b2:92:81:8b:86:97:ad:d3:d3:80:
2d:8a:f5:db:8a:33:d3:48:59:68:78:0d:d6:b0:f1:
57:95:6a:57:50:73:9d:6e:24:9d:30:be:76:36:ce:
a6:a7:94:2d:2b:78:76:4d:dd:75:87:66:a5:57:b0:
cb:4e:aa:2a:ed:3d:a0:48:b1:64:1f:19:9d:38:22:
aa:cc:07:fb:5d:23:51:43:d4:58:54:5a:fa:5d:89:
72:38:e7:55:78:37:49:3b:5c:ca:a2:b4:43:54:64:
fe:98:76:c7:17:b7:0a:4a:5e:2b:cd:b8:e2:3c:ba:
43:ba:0e:d3:11:9a:9b:68:d2:58:6e:fb:49:37:0a:
d3:eb:be:d9:ad:f7:12:ef:00:88:e9:09:63:fe:3f:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:84:E2:37:C6:82:42:06:9C:BB:54:51:EC:5A:7D:47:68:4E:05
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BBC18D9AF3B911EC8D1F02A6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.64.0/20
Signature Algorithm: sha256WithRSAEncryption
90:33:12:04:43:c2:2b:9a:b2:8f:99:55:71:b8:8b:2a:af:bf:
de:74:45:09:f7:85:62:8e:a6:3a:4f:0d:3f:6f:c8:f8:ca:76:
38:e7:54:e8:10:60:ba:46:dc:f6:e0:39:c4:44:3e:64:88:26:
e5:0f:1e:03:af:c5:a1:04:2a:aa:04:b6:a6:16:cd:1a:47:67:
70:64:89:1d:86:b2:38:f0:72:d3:08:6a:aa:8e:70:4c:6f:17:
fa:7f:7b:e0:4f:95:ca:e6:13:80:cf:c8:11:b6:c0:bc:ff:05:
5b:77:45:fd:28:25:2e:a6:d6:6a:d8:72:25:18:28:b2:b7:13:
6e:70:43:a8:19:9e:97:f8:8e:84:b6:44:ec:77:df:08:3f:4b:
df:bd:dc:55:f0:1a:c3:bd:41:41:60:85:89:6a:4a:c5:57:0c:
19:8b:d6:e4:bf:13:67:e7:8c:13:1e:f4:d0:d5:3b:f0:d0:f1:
58:de:c1:7f:c6:43:62:61:3e:bd:32:f2:90:6b:e4:01:ff:3e:
9c:27:f4:d0:d4:bc:18:f3:8f:f4:4e:e7:9e:dc:7d:c3:46:f5:
9e:bc:11:47:c1:4d:cc:ab:3c:2f:cd:ed:bf:98:78:b6:e1:52:
ef:7c:2e:18:cf:44:61:6d:b8:f7:57:f2:3b:de:bb:94:91:76:
17:88:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org