Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/4DA6D5AABF2311ED810C1AA5F1222468.roa
File: 4DA6D5AABF2311ED810C1AA5F1222468.roa (raw, json)
Hash identifier: wL+3y0iUXD0m8cSy6A50CC7aAwxi4NrUsvOH6RSb0E0=
Subject key identifier: 5F:3B:19:12:23:E9:F5:92:CE:DC:A8:02:80:84:F9:7E:67:F5:C1:E9
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 3F
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/4DA6D5AABF2311ED810C1AA5F1222468.roa
Signing time: Fri 10 Mar 2023 09:09:47 +0000
ROA not before: Fri 10 Mar 2023 09:09:43 +0000
ROA not after: Thu 31 Mar 2033 09:09:43 +0000
asID: 37182
IP address blocks: 41.93.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 10 09:09:43 2023 GMT
Not After : Mar 31 09:09:43 2033 GMT
Subject: CN=640af3db-f0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:1c:db:a8:ad:88:1d:6b:c6:c6:36:87:b2:
ca:44:07:17:33:ae:86:c5:cf:72:47:c4:5b:25:2f:
aa:65:f2:c9:d9:3c:17:7b:55:f6:15:bc:ad:f2:d4:
f2:ef:42:d8:24:7c:e2:2f:24:e3:0b:ab:7b:73:6b:
f2:3f:2a:88:3c:6f:72:84:4f:0a:4d:64:e4:a7:0e:
10:70:af:4b:00:fd:a1:3a:79:75:8d:51:9c:32:ab:
0c:9e:c0:30:26:77:84:4a:0a:e2:36:20:d1:33:6a:
c2:49:2c:95:12:64:67:03:77:70:9c:76:0e:77:1c:
7d:5c:1e:6f:fd:d5:3a:29:c8:a9:5e:4e:1f:20:8f:
20:1c:a9:01:93:ff:1f:07:f3:dd:19:16:7f:15:46:
a2:41:ec:d1:b6:98:55:d5:23:12:cd:cb:f2:34:58:
eb:ba:16:d8:1d:dd:f1:49:5e:ca:08:b4:b8:e3:11:
d0:a6:e8:aa:26:4f:8e:f7:d9:ca:c6:bf:be:e9:25:
7f:a4:a3:d3:59:29:b8:ee:8f:f5:43:a5:64:52:f2:
78:fd:59:12:0a:05:d0:69:df:81:29:e4:ca:1a:76:
e4:f3:80:bc:99:5f:81:38:bf:2a:69:ff:cd:45:41:
74:b7:8e:4f:fc:dd:43:e4:e5:b6:ff:75:38:d4:b3:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3B:19:12:23:E9:F5:92:CE:DC:A8:02:80:84:F9:7E:67:F5:C1:E9
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/4DA6D5AABF2311ED810C1AA5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.93.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:eb:80:32:97:3b:33:8d:4e:6c:13:9f:1e:c4:50:31:4c:04:
f4:6a:0f:67:60:a6:40:13:f4:f8:a2:60:d9:79:e2:3f:c2:1a:
5c:60:ba:a1:7f:46:2e:53:dd:63:d0:ab:82:36:db:2f:f2:14:
1f:fc:2e:28:c1:9a:e8:7d:62:20:b9:cd:1c:4d:38:8f:d0:e2:
54:a9:51:13:7c:53:de:03:82:6d:3e:2f:d6:c9:f8:48:24:6e:
03:3c:2f:ba:76:2c:c0:b8:c6:fb:d6:34:a3:37:8d:be:b8:9f:
8e:5e:91:7b:49:1b:90:da:a5:a0:69:ce:14:e9:f7:3c:db:a8:
49:f3:ad:eb:77:7d:66:5e:31:20:6b:76:e4:7b:2b:81:a2:10:
b2:68:17:57:b7:e3:cc:5a:d8:90:1b:51:22:bb:db:e8:28:b1:
8c:bc:dc:7b:4a:7e:25:41:59:10:41:5a:4f:61:a0:b3:83:3e:
0b:16:8d:28:64:51:be:c9:5a:47:74:38:d6:6b:e7:1b:b7:6e:
5d:b1:32:49:1f:89:25:85:cf:ba:02:62:29:04:83:01:c0:bd:
cc:f3:fd:d5:f1:22:8c:dc:3f:c9:66:0a:e8:5c:4f:04:1a:39:
15:6d:01:96:cf:0a:0b:48:f7:d6:12:37:9b:44:eb:d2:0c:a7:
f3:d9:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org