Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D5FA0374975211EF8C27654D762E951A.roa
File: D5FA0374975211EF8C27654D762E951A.roa (raw, json)
Hash identifier: NbP4+UvXvYydLQfirJxxbV7qAt+5x8ptUMviZL2FUI0=
Subject key identifier: F8:AE:7E:E8:95:36:36:BF:03:F7:5B:58:FF:BE:71:41:08:AC:78:D0
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 092E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D5FA0374975211EF8C27654D762E951A.roa
Signing time: Thu 31 Oct 2024 06:39:10 +0000
ROA not before: Thu 31 Oct 2024 06:39:07 +0000
ROA not after: Tue 31 Oct 2034 06:39:07 +0000
asID: 36916
IP address blocks: 41.180.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350 (0x92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Oct 31 06:39:07 2024 GMT
Not After : Oct 31 06:39:07 2034 GMT
Subject: CN=6723260e-fe44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:8a:c8:37:bf:2b:8a:30:e3:af:21:97:2e:
06:d7:5e:67:f1:5a:a5:40:00:3e:07:ac:76:25:68:
ce:e6:64:40:97:d7:bc:b1:7f:9c:e0:04:98:5d:b9:
fc:5f:81:9d:03:ba:2a:52:ff:c2:68:c7:e0:47:2d:
77:4d:fa:07:a3:8c:d3:cc:9a:20:a8:72:bf:ff:c8:
60:21:bc:4e:46:a4:67:c0:27:e8:6b:6f:1d:76:ac:
4b:5c:79:d6:59:29:2c:85:3a:51:e2:15:b8:25:fc:
8a:b0:36:51:c5:2e:57:cb:9e:51:ee:e8:37:2a:a8:
b0:2d:98:e7:60:d0:60:42:8d:d9:e1:38:91:b6:02:
e8:80:0d:b5:22:a8:7d:99:1c:4c:32:6d:6b:15:0f:
e8:a3:cd:03:af:e7:79:6f:2d:6e:94:60:19:78:c3:
e0:3a:05:a1:33:c0:98:d2:f6:41:77:dc:15:bb:4b:
24:dd:84:1a:3a:30:3a:bc:31:e4:4d:54:c9:32:1c:
e7:25:4c:d2:7b:d0:7d:8d:61:cd:8f:66:1d:6c:1c:
83:75:e4:7b:a0:e8:02:98:a8:d1:ff:6b:02:16:35:
2c:9f:75:4f:3e:76:9e:03:28:3a:2f:5e:ae:5c:bf:
de:33:5d:2a:40:6d:be:e5:57:1b:55:20:5d:34:71:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:7E:E8:95:36:36:BF:03:F7:5B:58:FF:BE:71:41:08:AC:78:D0
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D5FA0374975211EF8C27654D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:1e:dc:99:92:0a:60:e9:ef:81:b4:b6:ef:e6:28:62:37:3c:
ce:44:5d:4a:be:47:ab:80:b7:57:c2:79:a8:c7:0a:43:2e:f8:
b2:a8:b2:cd:c1:1a:4a:79:fe:d3:07:80:48:b0:dc:fd:5a:86:
d8:91:73:fc:ee:5c:2b:7d:57:fa:b6:cf:55:7d:60:77:89:a7:
a9:98:c2:97:d4:d1:a7:64:e0:81:95:6a:66:af:93:22:4c:7d:
23:b3:58:5b:28:8a:a6:74:55:a3:73:3f:73:04:fc:bd:4b:ea:
f3:4d:2d:b7:ab:6e:7f:87:87:78:38:4a:d5:5d:57:51:f5:b9:
2b:68:aa:98:b7:3f:a7:64:fb:fa:30:df:25:9a:cb:35:fa:29:
ea:d6:4d:b3:ac:ac:81:be:22:9b:ef:d0:d6:e2:e3:30:33:7e:
e3:4c:a2:94:91:4f:af:c7:50:d9:26:b5:b3:ab:67:bd:0c:96:
05:9d:55:87:1c:b1:86:70:14:e4:ec:32:ec:07:18:db:bf:d3:
fb:0e:69:51:d1:56:94:b7:9b:28:12:68:3d:e1:1f:b4:b1:52:
cc:82:20:10:cd:cc:ca:e2:a3:be:28:e8:44:7e:ac:2f:78:7c:
5f:53:a1:7b:7d:91:9b:8e:9a:c6:4a:5d:80:8e:60:ee:cd:bb:
f9:89:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org