Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/FA9E2230BF1A11ED8889DD8CF1222468.roa
File: FA9E2230BF1A11ED8889DD8CF1222468.roa (raw, json)
Hash identifier: f652IZ+iORbL35RFlhWPXQd5ZuoBhdUgA+JhyJrO7ic=
Subject key identifier: D3:57:70:2A:D9:FC:2D:F0:71:89:8C:98:69:89:FE:0E:24:44:B3:1C
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 19
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/FA9E2230BF1A11ED8889DD8CF1222468.roa
Signing time: Fri 10 Mar 2023 08:10:12 +0000
ROA not before: Fri 10 Mar 2023 08:10:07 +0000
ROA not after: Thu 10 Mar 2033 08:10:07 +0000
asID: 37182
IP address blocks: 41.93.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 May 2024 00:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 10 08:10:07 2023 GMT
Not After : Mar 10 08:10:07 2033 GMT
Subject: CN=640ae5e3-5c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:aa:12:38:f3:37:0c:2c:06:9a:88:75:7f:
29:42:49:ed:65:c7:7c:f6:ec:62:c9:03:7d:aa:c6:
a1:a3:bf:56:4d:f7:0b:38:a1:8e:57:a6:7d:a1:97:
78:32:e8:4c:57:68:d5:e7:e3:bd:3f:fb:ab:53:c2:
63:1b:3f:43:54:24:3c:de:5a:83:1f:9d:bc:14:94:
28:41:b5:56:19:c0:f8:16:6e:26:91:01:8a:c2:48:
98:36:bb:e8:ec:50:5d:6e:69:a5:c3:ac:00:3a:e6:
fc:e4:e9:3c:65:be:05:d0:a8:78:b1:c9:61:8e:eb:
24:27:9e:d3:4b:3e:52:48:05:5b:52:33:a8:06:d7:
39:35:c6:bc:6b:e5:e3:0e:14:5d:40:7b:06:f2:72:
a2:ca:6a:1d:0b:53:3d:ab:b7:7b:c6:3f:91:87:e1:
cd:e5:46:9c:df:45:d0:1c:5f:64:fa:29:1f:56:cd:
20:92:41:90:39:f8:4f:15:72:1e:02:df:26:32:c9:
9c:13:de:d5:2f:2c:65:39:a6:b4:f4:26:7b:f5:17:
20:a9:5b:f1:36:fb:b2:e8:e4:7d:05:9f:ef:da:d0:
d9:44:f9:a5:89:5e:9c:33:f9:6a:e5:42:16:35:2c:
c0:e7:8b:ae:63:2c:29:ff:75:33:3f:52:53:74:a5:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:70:2A:D9:FC:2D:F0:71:89:8C:98:69:89:FE:0E:24:44:B3:1C
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/FA9E2230BF1A11ED8889DD8CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.93.45.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:88:88:c3:e8:0a:f6:6c:d9:87:93:25:51:cd:60:96:5a:1b:
99:29:67:2a:ff:4c:2a:4a:70:27:bb:80:17:4e:1f:35:17:81:
c7:20:aa:01:0f:38:c0:3e:e3:1c:88:a1:79:5d:91:c7:2c:8a:
29:78:ab:20:70:4c:a8:a7:3c:9b:b6:fd:1e:b8:53:35:a6:df:
d9:79:f7:5b:3d:c2:1a:1a:ef:ce:71:62:f2:c7:d1:44:4a:e9:
17:05:d9:13:3f:ef:ca:49:f7:5a:75:50:04:f8:2a:2f:f9:31:
35:c5:f3:af:62:70:0f:02:2b:ab:fd:ce:b4:77:1d:8b:05:a2:
5d:e6:e2:ff:a4:ad:94:a0:26:fb:86:43:86:ae:43:d8:ae:ed:
8f:78:ec:30:31:28:7f:24:24:c5:8a:9b:2d:5a:86:35:ee:dd:
c0:c6:f3:e8:ab:f3:3f:91:a9:20:25:7a:49:4e:b0:8a:fd:bb:
ab:50:f7:f8:e2:38:29:80:7c:a5:0f:10:75:4a:6a:b6:b7:d9:
7a:3f:76:14:ac:18:9e:9d:1e:3f:57:2d:a8:15:45:9d:cf:2d:
94:39:be:da:82:dc:55:ad:02:9e:ca:1d:14:b8:2f:58:71:e5:
2e:5a:09:68:49:21:bb:15:15:62:77:80:bb:7d:38:05:0d:f0:
f5:dc:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 03:36:37 2024 by rpki-client on console-ams.rpki-client.org