Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/121DAF00BF2211EDB7967CA1F1222468.roa
File: 121DAF00BF2211EDB7967CA1F1222468.roa (raw, json)
Hash identifier: /VH8LgFyOmAI1neTjqQIx+qLdKjBWdiTb54RZyILEes=
Subject key identifier: CD:B1:4F:77:24:07:AC:60:A3:A1:08:73:E1:E4:7F:6D:7C:03:E5:97
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 31
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/121DAF00BF2211EDB7967CA1F1222468.roa
Signing time: Fri 10 Mar 2023 09:00:57 +0000
ROA not before: Fri 10 Mar 2023 09:00:54 +0000
ROA not after: Thu 10 Mar 2033 09:00:54 +0000
asID: 37182
IP address blocks: 41.93.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 May 2024 00:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 10 09:00:54 2023 GMT
Not After : Mar 10 09:00:54 2033 GMT
Subject: CN=640af1c9-9a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:a2:f7:09:13:24:fd:29:a6:d6:39:b5:1a:
13:46:43:7b:ce:1e:7c:3f:9b:9b:05:dd:ac:a6:5f:
53:a6:95:ec:a7:44:8f:e2:25:60:e1:d4:73:19:86:
cc:d7:43:3c:82:6f:25:ee:8f:a0:e5:f3:4c:70:6f:
f4:e4:a7:32:b4:c7:a8:d7:7a:56:17:66:c4:3e:83:
52:31:dd:43:29:35:64:be:ae:0b:fd:92:1f:3c:2b:
d9:be:f2:73:66:a7:c8:35:05:3b:ec:4c:0b:be:46:
70:15:a1:7f:45:96:5f:f4:f6:c6:5f:9f:90:a8:bb:
6d:1d:a4:c2:df:01:4a:45:2f:f9:34:e4:24:b7:7b:
09:71:30:a5:ba:e2:2e:9e:72:3b:e0:ff:a6:92:ca:
a7:22:cd:47:fb:0b:0e:57:8b:32:dc:8c:bc:d9:23:
bf:a7:25:9e:e7:79:39:cb:8b:63:43:8f:ec:9e:cf:
04:1d:a1:ee:9e:40:65:99:ed:e6:72:e2:05:0d:16:
50:da:d1:c9:04:a9:01:15:6a:08:f9:5a:ce:f3:8c:
bf:99:ee:6b:d6:7c:c2:55:d9:d6:4e:4a:65:4d:a5:
00:64:ee:1e:fc:7f:5b:53:2f:fd:8f:dd:4a:c4:f9:
8e:c8:a0:2a:f2:69:22:43:87:69:95:bc:7d:90:74:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B1:4F:77:24:07:AC:60:A3:A1:08:73:E1:E4:7F:6D:7C:03:E5:97
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/121DAF00BF2211EDB7967CA1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.93.72.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a1:ce:6d:ed:5f:cb:3f:80:da:6b:39:9e:e0:5e:28:62:fb:
55:8b:86:01:1f:42:10:8a:62:04:87:f0:3d:4e:45:f2:91:b5:
e7:67:4f:24:8e:fa:b1:a8:eb:5f:87:79:a5:41:19:05:f2:4e:
42:8e:ca:5c:07:74:50:70:f8:8d:2b:e5:c9:f4:21:56:04:25:
a9:4d:e4:aa:53:ce:dc:26:e9:43:ff:0a:b7:5b:95:d6:c3:6f:
2b:5c:b9:64:08:62:b9:d4:8f:79:0a:ad:eb:c3:96:fd:39:2f:
90:df:ee:51:69:49:1d:f0:da:a1:2b:11:ed:54:b1:42:10:a9:
05:a3:5f:8c:76:1f:a3:29:d7:89:7b:d3:6d:f1:e5:0d:aa:1a:
0a:5b:5c:1d:33:e8:a9:22:5b:8b:30:e0:fb:71:1e:79:c1:8e:
bf:80:d9:02:e7:bc:4c:58:39:27:91:1d:52:15:93:fb:8c:c4:
ac:9b:9a:c2:8c:c1:31:dd:54:5e:fe:1b:d2:b2:7b:66:f0:6d:
92:0b:55:67:5c:ad:f1:43:86:9e:7f:01:2c:cb:65:a3:0d:5c:
b4:40:17:5d:ef:49:4f:f5:9b:0e:d7:38:ff:82:b3:00:0a:fc:
7e:45:d8:1e:44:5b:26:25:b3:fd:55:8e:8c:af:85:5b:4b:13:
f8:e2:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:51:16 2024 by rpki-client on console-fra.rpki-client.org