Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F037A01AF3B811ECA86A80A3F1222468.roa
File: F037A01AF3B811ECA86A80A3F1222468.roa (raw, json)
Hash identifier: fxtgCGeuKuWxP3oyxbkOFxIA2dbFzz7TtmeepO1rSgs=
Subject key identifier: 3A:D0:A1:C7:B0:BC:78:B8:29:42:78:CF:E6:E1:DB:79:95:C1:BF:20
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0507
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F037A01AF3B811ECA86A80A3F1222468.roa
Signing time: Fri 24 Jun 2022 12:26:57 +0000
ROA not before: Fri 24 Jun 2022 12:26:54 +0000
ROA not after: Wed 12 Jun 2030 12:26:54 +0000
asID: 36916
IP address blocks: 41.138.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 24 12:26:54 2022 GMT
Not After : Jun 12 12:26:54 2030 GMT
Subject: CN=62b5ad91-5283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:1a:6b:bd:de:1b:fe:6c:e9:9e:9e:3e:d2:
91:e9:e7:cd:f0:e1:8a:a4:b8:5b:2a:b9:30:ea:3e:
3f:b3:d7:7f:60:9d:c0:bf:96:ca:cc:4e:77:7f:a5:
bf:ad:03:7b:ab:fb:f2:a1:b9:35:81:4f:2c:8b:bb:
f1:31:27:b7:61:16:0e:1d:f9:cb:26:a5:5a:70:7e:
c2:0e:d0:18:51:bd:0c:ea:a6:b6:ff:98:2a:c1:12:
38:92:d2:9d:bc:17:73:d3:d5:fa:dd:e8:61:6c:e6:
fc:ac:5e:50:1a:2b:36:9a:a5:7d:cc:b7:6b:38:e1:
37:42:a6:de:dd:52:75:58:49:32:cd:19:57:7e:5f:
cb:f0:96:20:53:d1:d6:8c:6c:d0:a4:4e:75:5b:16:
d5:39:75:4a:67:68:3b:6f:72:0c:b0:ed:25:8c:ae:
7c:f2:a6:84:72:22:67:93:05:09:12:d4:ac:9a:7c:
d0:27:b1:91:aa:9b:5d:d7:ab:6a:e6:9d:0b:c6:44:
20:bb:2e:18:8b:44:07:ce:5c:2f:0d:ac:d7:ff:ce:
e3:f6:b3:11:88:c1:bc:6c:79:83:03:53:9e:df:46:
f1:df:c4:40:12:c1:c5:c9:6b:2b:22:61:cb:5c:0b:
65:e9:e6:17:cf:0c:3c:07:27:d8:ad:63:82:20:4e:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D0:A1:C7:B0:BC:78:B8:29:42:78:CF:E6:E1:DB:79:95:C1:BF:20
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F037A01AF3B811ECA86A80A3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.138.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:41:c4:4c:af:aa:09:42:ea:3f:37:3f:c1:a5:d1:1d:f6:70:
fe:60:0b:3a:e3:bb:dc:bf:b2:dc:a4:64:c6:6e:27:0f:68:95:
85:f4:a5:fc:25:b0:b4:09:26:f0:b4:03:65:9e:e2:93:bf:d6:
72:ca:de:5b:f6:72:80:c5:7c:11:c9:ff:20:44:5a:3c:91:4a:
ee:c5:b7:83:7d:9b:cd:03:39:e4:b5:cb:b5:2b:15:9e:cd:e8:
fc:21:bd:b2:23:00:f8:8d:48:bf:9b:05:d8:46:21:b0:43:c8:
4f:ff:a1:09:ac:e3:dc:ac:6f:0b:83:2c:6a:41:7d:58:ab:49:
f7:b2:e9:eb:8c:34:01:40:bc:99:77:77:65:f4:fb:91:d7:61:
2c:91:11:b7:8e:75:0d:77:2c:2c:8e:8f:d8:7d:2d:dc:c0:9e:
e7:1e:0e:64:c4:0d:5b:2e:ff:c5:2b:b1:35:58:f9:b7:12:c5:
ee:30:2e:7d:13:74:84:03:26:a5:8c:fe:42:27:90:f7:ad:73:
a6:a6:41:88:23:fa:0c:e6:3e:b7:68:df:91:3a:08:f1:c4:a7:
72:d3:ac:82:9b:c0:11:2f:98:c3:0c:7b:fe:eb:0a:06:8f:2e:
51:f2:b8:6f:b4:71:97:67:c9:fc:59:a2:6b:98:a6:4c:f0:14:
73:f6:ee:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org