Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/94186D48BF2111EDA28403A0F1222468.roa
File: 94186D48BF2111EDA28403A0F1222468.roa (raw, json)
Hash identifier: BidiaCah/58T5pr09ZLk1KqGSn+qXLOUXGrcNuZGyDU=
Subject key identifier: C4:AF:49:27:23:B9:56:F4:0A:80:5A:9C:F2:10:CE:5C:59:63:E7:6F
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 2B
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/94186D48BF2111EDA28403A0F1222468.roa
Signing time: Fri 10 Mar 2023 08:57:26 +0000
ROA not before: Fri 10 Mar 2023 08:57:22 +0000
ROA not after: Thu 10 Mar 2033 08:57:22 +0000
asID: 37182
IP address blocks: 41.93.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 14 May 2024 00:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 10 08:57:22 2023 GMT
Not After : Mar 10 08:57:22 2033 GMT
Subject: CN=640af0f6-8786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:52:dd:f2:a2:e4:c9:31:8d:c2:f3:82:e7:
7b:fe:1a:7c:bd:5d:5f:03:ad:21:9b:30:db:19:43:
4a:c3:4c:24:81:e5:e5:22:ce:85:f8:40:af:f3:ba:
77:cb:f8:28:92:ec:bd:60:f1:ba:a5:ec:69:fa:a0:
e7:9d:69:0b:37:0c:2c:58:89:a1:a9:06:68:19:05:
f6:ed:bc:ba:a5:6d:6e:07:ff:4a:cd:60:d9:7c:9b:
d4:d8:c3:af:4d:5f:44:2e:11:d8:7a:98:6d:ce:35:
8e:b7:ca:a9:d1:cc:39:85:2b:22:83:43:43:70:10:
7e:6f:ca:72:a2:52:e8:4f:f2:95:54:42:34:09:81:
e4:28:78:df:77:16:95:cc:73:17:a7:9c:47:d2:92:
2e:00:7b:7d:7b:dd:f0:27:75:83:96:c9:93:a8:75:
70:4b:8c:b1:3a:6a:75:67:e8:94:f3:6d:df:4a:17:
13:90:ef:83:be:bf:fd:8e:31:62:c9:f2:bd:4c:76:
79:3a:34:36:94:5a:b4:8f:0b:9c:d9:82:4c:78:8b:
54:20:40:52:bd:16:cc:48:1c:23:f4:43:e8:8a:3f:
5e:57:27:7a:58:14:f5:c4:91:d9:40:33:7f:2e:63:
7c:0b:f3:94:08:a0:66:a4:ab:83:fe:69:ea:c8:41:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:49:27:23:B9:56:F4:0A:80:5A:9C:F2:10:CE:5C:59:63:E7:6F
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/94186D48BF2111EDA28403A0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.93.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:5f:5c:04:c4:b2:71:1a:06:86:89:af:10:e0:34:1d:23:d0:
5e:a2:97:20:95:0d:45:05:d5:0c:7a:62:97:2e:16:5f:c1:37:
b8:83:83:17:9f:2c:ef:e1:d7:b7:05:22:dc:04:1b:a4:70:57:
14:e4:e1:6c:a3:8d:24:a0:65:b8:7a:5d:fc:2d:e9:02:1b:8f:
a6:c9:ef:68:b0:2d:6d:2d:f7:95:aa:20:c8:33:7e:97:4a:3b:
b4:ee:f9:49:3e:ff:f8:65:de:d0:94:8d:a2:bf:c2:ea:34:e4:
bf:5c:37:8e:8b:95:67:08:4c:64:5d:f3:db:bf:01:0d:05:c6:
ea:3e:d6:ed:79:70:d2:ae:db:84:1b:12:41:e9:6f:59:03:8e:
71:41:39:1d:85:3a:2d:fe:c5:69:05:26:d6:3c:5e:a9:65:86:
5a:be:62:d2:83:d5:02:06:44:00:88:c6:cd:9f:64:3f:c8:2f:
51:c9:cd:a0:d1:15:bd:3b:9a:04:e3:fd:6b:82:ae:e1:1f:42:
08:42:d5:d7:26:21:cb:c5:70:ac:19:d5:48:91:77:26:76:47:
bc:7e:ea:87:49:76:5d:37:2f:2c:cf:7c:dc:6c:26:1b:22:5d:
cf:e0:af:b7:c0:a9:ad:e1:60:9e:12:33:49:4f:24:91:4a:00:
2f:5a:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:24:46 2024 by rpki-client on console-fra.rpki-client.org