Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E3CF74080BF311EDB414C6A5F1222468.roa
File: E3CF74080BF311EDB414C6A5F1222468.roa (raw, json)
Hash identifier: Lky1dvw+3KQyyBKdpT/7p6r+xsXb+kYLyQ3VMc/j9s4=
Subject key identifier: 9E:E4:5C:FB:45:EF:08:00:8E:BD:4B:69:C9:87:DF:C4:6E:BD:7A:B5
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0582
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E3CF74080BF311EDB414C6A5F1222468.roa
Signing time: Mon 25 Jul 2022 08:29:25 +0000
ROA not before: Mon 25 Jul 2022 08:29:21 +0000
ROA not after: Wed 07 Jul 2032 08:29:21 +0000
asID: 36916
IP address blocks: 41.221.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 25 08:29:21 2022 GMT
Not After : Jul 7 08:29:21 2032 GMT
Subject: CN=62de5464-0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:f5:07:d7:8a:49:30:76:38:be:08:6e:08:
ea:c8:a0:ec:62:96:9c:ba:16:fd:ad:c3:f8:02:8c:
5d:0e:40:46:2e:55:17:d4:d7:bf:02:d9:c2:0d:05:
6f:8e:9b:8b:69:b0:3f:38:8c:95:52:01:73:fb:8c:
5c:ee:35:74:e3:2d:16:65:6b:be:bb:9b:07:fc:38:
28:6b:87:76:35:19:72:24:b5:95:0a:1c:da:37:b9:
15:76:db:f9:7d:66:0c:f2:7a:cd:1f:8a:b1:d6:c4:
13:b3:b7:5e:6b:c1:2d:90:27:e1:60:14:a2:da:c9:
5f:a6:8e:d0:9c:9f:1d:38:1d:33:5b:72:27:0c:26:
fe:f7:a5:1d:85:c9:eb:41:78:33:db:1e:4f:27:af:
f8:b6:6b:61:e2:35:e8:fa:fe:96:3e:ea:3e:e0:ec:
a9:2e:8d:7e:b1:16:b3:4a:b2:1b:de:36:fa:90:9b:
d2:3f:55:c8:11:8f:db:c6:04:04:1f:f8:5a:15:b8:
f8:49:ef:11:de:ef:c2:64:32:e6:ef:69:da:23:38:
5e:27:c8:26:49:95:66:b6:d0:a7:2b:73:6f:d0:cb:
e9:fa:49:05:57:7b:87:37:36:45:57:08:86:72:11:
14:2e:98:51:e5:11:34:47:d9:b3:84:ad:90:5b:b7:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E4:5C:FB:45:EF:08:00:8E:BD:4B:69:C9:87:DF:C4:6E:BD:7A:B5
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E3CF74080BF311EDB414C6A5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.238.0/23
Signature Algorithm: sha256WithRSAEncryption
44:9c:e6:73:b5:a3:fc:bc:0a:a3:ed:2b:4e:7d:75:6f:56:6b:
2e:03:97:fc:13:1b:da:82:7b:b8:b2:61:9f:b0:51:a2:d2:b4:
56:38:02:7d:20:9d:b7:a2:e1:73:5a:39:86:69:2b:e5:c8:d9:
03:33:87:68:9a:60:a6:ff:4e:cd:d0:ba:05:6e:f8:f3:74:03:
06:d0:f6:b0:68:ad:bf:1b:7d:58:48:4a:ff:d7:83:a9:8f:49:
39:f6:30:c8:71:c0:34:40:93:ea:ea:f3:a9:53:1d:08:28:d5:
10:b5:ce:3d:8c:37:c7:ad:03:c9:9e:d4:0e:01:6a:db:da:da:
75:8d:96:76:67:68:6d:b8:c2:9a:6e:cb:e5:46:82:cf:b8:e5:
9a:43:f1:e3:67:81:5e:95:92:c7:34:4a:82:cc:63:16:61:fc:
35:86:93:51:45:b8:d6:8e:62:70:b0:4c:19:10:e4:b0:d1:29:
41:52:df:3a:97:e0:ca:e2:a1:df:a3:ce:25:b7:60:8a:48:15:
36:45:98:11:78:5d:8b:b3:bf:d8:0e:2d:70:74:87:76:bf:38:
40:7e:42:da:93:53:6c:2b:c8:4d:c2:87:18:0c:d7:74:58:88:
2a:d0:64:cb:10:37:97:51:2e:a4:9d:54:53:80:6f:44:a8:6d:
ab:fc:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org