Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F75BA04C0BF211EDA2B7E0A2F1222468.roa
File: F75BA04C0BF211EDA2B7E0A2F1222468.roa (raw, json)
Hash identifier: NcI41/AqT2gus/neZkF03U7NDwGHrVeX1zGwjWfeIds=
Subject key identifier: F0:82:56:BC:12:79:5E:BE:B0:E3:E5:E9:70:CB:D4:8F:4F:4D:E3:C5
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0574
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F75BA04C0BF211EDA2B7E0A2F1222468.roa
Signing time: Mon 25 Jul 2022 08:22:48 +0000
ROA not before: Mon 25 Jul 2022 08:22:44 +0000
ROA not after: Wed 07 Jul 2032 08:22:44 +0000
asID: 36916
IP address blocks: 41.221.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 25 08:22:44 2022 GMT
Not After : Jul 7 08:22:44 2032 GMT
Subject: CN=62de52d8-8845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:1d:0d:59:03:bd:0d:b6:19:a1:13:01:4e:
6f:20:c8:21:fd:46:33:50:5f:7f:6b:26:70:03:d7:
e6:cc:7c:38:ca:c7:5b:2c:17:a8:65:17:9c:ea:e8:
6a:eb:5f:a6:0f:b8:c5:17:9e:be:49:79:2d:48:1c:
93:c4:33:a9:6f:49:b7:b2:4b:1a:17:fe:0b:a6:22:
35:11:46:fc:65:c8:92:3d:5e:05:4e:4e:ff:bd:06:
ac:f8:53:49:5f:80:32:aa:4e:5e:65:1e:11:57:23:
97:04:e2:fa:88:ce:d6:8c:85:2a:99:74:26:a2:d9:
f2:99:88:1e:67:ab:04:c5:9b:38:eb:7e:74:6e:a8:
95:80:a0:d0:ba:87:3b:be:41:f9:12:9c:30:cb:0e:
c1:6e:72:41:16:0d:33:25:eb:a8:fd:6c:18:3b:54:
c0:40:c2:ee:4d:8b:49:80:98:45:e1:ad:e3:e3:8c:
df:29:c2:62:21:7a:31:b1:fc:0e:ef:e0:f4:cd:85:
26:52:76:89:63:96:ff:75:f7:60:86:76:ee:8f:27:
19:8e:0c:bc:ef:91:d9:37:71:87:97:be:0d:84:5f:
cb:99:f4:e3:2b:c1:83:f9:29:4a:e8:63:f1:77:93:
7f:cf:d9:61:29:12:a0:de:31:dc:f3:13:f8:5e:e4:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:82:56:BC:12:79:5E:BE:B0:E3:E5:E9:70:CB:D4:8F:4F:4D:E3:C5
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F75BA04C0BF211EDA2B7E0A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:aa:88:dd:94:55:d3:65:aa:f8:96:a2:83:60:be:97:3a:04:
c9:53:55:d0:c3:7f:c7:28:ec:60:aa:ab:67:99:15:d8:6c:66:
68:bf:f9:b6:79:82:9a:f8:8c:6b:b6:75:aa:e7:1d:73:15:14:
0e:df:e2:fe:73:34:e4:a0:ac:95:a2:65:fb:e7:02:a9:70:db:
14:77:f0:d4:18:b6:b1:c7:2d:0b:53:8d:d6:42:24:b5:30:c8:
17:16:bd:96:d8:97:4c:97:9f:9c:8a:3b:25:1c:28:6e:26:b1:
87:a0:11:0e:ca:60:09:56:f4:2f:7e:1a:f7:78:72:2b:6c:78:
6e:02:95:e6:31:e1:e4:76:c7:72:a0:eb:12:25:c4:ac:1a:22:
3f:0f:3a:d4:77:05:d4:bf:e1:16:a2:f5:5d:4b:44:6c:0c:a4:
5f:c7:cd:0b:aa:62:f0:d2:41:5b:8f:81:39:0b:63:2f:26:2b:
fe:f1:fb:fb:34:68:58:c0:bd:4b:a6:5e:eb:07:11:b5:71:2c:
73:0b:fd:fe:04:04:eb:b5:c1:71:89:89:3e:62:f8:d5:15:19:
19:69:13:2e:bd:53:49:46:99:79:c6:d6:2e:82:70:02:c1:1e:
cf:6d:91:54:cf:18:3b:ce:aa:83:6d:22:e4:68:ef:04:5d:f0:
ab:27:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org