Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CA6DF5768F8511EFBD5FABA1762E951A.roa
File: CA6DF5768F8511EFBD5FABA1762E951A.roa (raw, json)
Hash identifier: lEq/EQLKuDAKWKf1XaCeeg6p9Ip92z7i+PS1pwf1m9w=
Subject key identifier: D5:15:A7:E6:3E:0F:D8:49:CA:C9:89:A6:A3:C5:B8:41:BF:BD:8F:20
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0920
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CA6DF5768F8511EFBD5FABA1762E951A.roa
Signing time: Mon 21 Oct 2024 08:23:46 +0000
ROA not before: Mon 21 Oct 2024 08:23:42 +0000
ROA not after: Tue 31 Oct 2034 08:23:42 +0000
asID: 36916
IP address blocks: 41.180.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Oct 21 08:23:42 2024 GMT
Not After : Oct 31 08:23:42 2034 GMT
Subject: CN=67160f92-c1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:06:d8:0c:fe:34:fb:29:74:6d:4f:bc:23:
e9:e9:85:b4:45:95:37:b9:77:d1:17:4f:e3:37:b3:
88:c5:1b:6d:be:d2:4b:9c:ea:b9:55:20:fe:a2:89:
d8:71:25:9b:ef:c1:e1:b5:e6:e6:69:ed:d5:7e:f9:
38:fd:1d:6a:8e:09:3d:ad:c3:c8:0e:0f:5d:31:5d:
34:d6:3c:ae:74:ad:4a:31:2c:08:dc:43:c7:eb:e4:
22:b1:f1:bb:38:04:77:50:a6:74:7a:0c:b9:68:de:
56:92:d5:00:a9:32:75:31:aa:f5:38:f5:57:ab:c8:
3c:8a:6f:a4:d2:3f:c0:5e:94:25:55:04:0f:e5:11:
cb:f5:39:6f:c3:63:fa:04:d3:7a:9f:ab:a7:e0:95:
ab:30:d3:a8:45:d0:7e:da:58:ca:db:f8:d8:d3:44:
b9:9e:e8:a8:9a:f0:32:43:b0:8c:f9:a6:81:b0:72:
9e:83:3b:ec:ef:8f:e9:97:2c:2d:4b:c9:bc:b9:95:
fd:25:01:95:16:b4:7d:55:18:33:2d:36:d7:b0:39:
ae:c2:a4:38:27:f4:e7:f9:fa:0f:cd:cb:09:61:bf:
b8:59:e5:39:2a:30:d2:1f:fc:7a:dd:74:85:bc:a2:
03:2c:cd:69:14:2b:1b:e5:80:4c:db:d6:73:65:73:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:A7:E6:3E:0F:D8:49:CA:C9:89:A6:A3:C5:B8:41:BF:BD:8F:20
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CA6DF5768F8511EFBD5FABA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.140.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b1:23:28:9e:22:6f:cc:2c:02:19:28:70:04:84:33:1c:8b:
16:d3:72:67:fd:0b:93:a6:07:89:5d:16:63:c0:76:43:d6:32:
b0:e0:46:1a:8a:3b:f5:4d:cb:c6:13:db:22:19:2f:ed:40:7f:
ba:e4:4f:8d:f9:63:ce:83:46:ed:2a:d5:6e:d4:a3:ef:a5:e4:
13:e4:ea:35:d1:1b:30:7f:f6:22:b6:cb:d9:32:02:08:c5:6f:
0a:42:b4:24:53:82:e3:5a:31:a6:ee:63:59:d1:cd:81:09:df:
2c:9e:06:00:76:66:90:b2:07:10:53:f4:7a:74:7d:d2:de:11:
4a:3e:51:6d:a2:28:8f:e3:0f:fc:17:fc:5a:50:6c:a5:97:dd:
0a:a9:7f:a0:66:b6:e9:70:00:8b:2c:e2:b5:fe:17:01:5c:cf:
56:bf:0e:75:28:ab:42:90:2b:40:6a:cc:9f:b4:b4:9e:0d:dc:
4f:68:10:3e:c1:8e:cf:d8:07:39:e5:8d:3d:fa:ee:04:7d:a8:
68:8e:23:77:63:9f:cb:86:e4:a0:62:c6:70:8c:ca:c5:cd:f4:
12:76:e6:67:c8:14:49:2f:62:13:59:21:e9:d9:0a:3c:17:fb:
c6:43:50:b8:e9:1d:db:85:48:c7:f3:9f:2e:e0:a6:4b:6e:79:
56:ca:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org