Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/9F760182864511E980359A57F8AEA228.roa
File: 9F760182864511E980359A57F8AEA228.roa (raw, json)
Hash identifier: JfR+cGc/NacDq66cJcP1mnmtznOSJj3hgdYO7OA0hMI=
Subject key identifier: 34:8A:07:70:1A:6A:C7:EB:80:DD:62:D1:64:50:16:BD:62:9B:27:AF
Certificate issuer: /CN=F3670C40AF/serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
Certificate serial: 02
Authority key identifier: 7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/9F760182864511E980359A57F8AEA228.roa
Signing time: Mon 03 Jun 2019 21:22:00 +0000
ROA not before: Mon 03 Jun 2019 21:21:50 +0000
ROA not after: Mon 30 Jun 2025 21:21:50 +0000
asID: 37353
IP address blocks: 41.78.4.0/22 maxlen: 24
41.222.224.0/22 maxlen: 24
41.222.225.0/24 maxlen: 24
41.222.226.0/24 maxlen: 24
41.222.227.0/24 maxlen: 24
154.70.208.0/20 maxlen: 24
197.242.200.0/21 maxlen: 24
2c0f:f988::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AF/serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
Validity
Not Before: Jun 3 21:21:50 2019 GMT
Not After : Jun 30 21:21:50 2025 GMT
Subject: CN=5cf58f78-4701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:9a:02:73:0b:58:f7:b0:36:ac:ad:6d:17:
1b:7f:df:a3:81:e2:9e:a5:a3:d6:f5:b3:35:a6:d8:
d4:f0:1d:2c:e6:56:9b:de:34:9c:e0:b8:d3:8b:66:
34:34:5b:9e:85:7e:d6:36:eb:90:48:3e:63:12:61:
7d:86:d2:da:ab:44:48:da:e9:b2:de:33:a1:f7:d0:
d1:66:30:66:22:23:34:05:ec:77:1b:18:d8:40:2a:
9f:97:14:8b:39:e5:e7:3b:c3:a1:30:b6:d5:6b:86:
50:95:0b:9c:51:83:a8:45:55:9b:e3:a6:96:6f:bd:
6f:fc:b2:6d:e5:b8:50:07:fb:85:8d:06:c4:c6:11:
f2:4f:81:c5:0a:97:ba:17:3f:e9:77:20:d6:57:41:
36:48:bd:45:0d:23:54:90:48:76:a6:cd:a4:4b:34:
44:94:ec:db:3c:2c:45:90:16:b8:af:1a:80:5a:8f:
b9:f6:98:3d:d0:66:9a:03:24:29:5f:ef:4a:49:d6:
f0:eb:ed:7d:1f:b6:f0:01:50:23:29:54:a0:bd:cf:
72:ef:df:4c:2d:12:a5:f2:0b:5d:85:6a:73:9a:4a:
e8:41:d7:74:36:f4:1f:13:52:ce:e0:b3:fe:9a:60:
97:a2:d0:cb:a6:41:e9:12:79:80:d5:b4:31:4c:70:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8A:07:70:1A:6A:C7:EB:80:DD:62:D1:64:50:16:BD:62:9B:27:AF
X509v3 Authority Key Identifier:
keyid:7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/9F760182864511E980359A57F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.78.4.0/22
41.222.224.0/22
154.70.208.0/20
197.242.200.0/21
IPv6:
2c0f:f988::/32
Signature Algorithm: sha256WithRSAEncryption
3a:7d:98:60:e9:2f:a5:5f:b9:72:44:89:90:13:b8:85:95:31:
f9:27:e4:36:c9:21:5f:d6:32:71:22:83:89:ad:99:39:46:67:
85:69:4c:e4:90:4c:16:86:8d:a7:04:3a:33:5a:0d:dd:81:8e:
72:f7:5b:81:61:09:64:e9:33:7a:b7:e6:9e:38:82:d6:47:17:
49:8a:9f:8c:b0:aa:17:ed:60:95:ae:9d:63:7b:63:ec:5e:1f:
cf:f6:34:40:b1:79:10:27:c2:39:7c:6a:f4:d2:25:34:77:2c:
a5:f8:6d:8e:d9:5e:0c:30:25:c5:c0:d4:9e:25:c3:93:8e:44:
38:c4:2f:16:cb:94:e1:69:c1:5f:8e:f9:53:2c:c8:d6:c3:4e:
de:4f:c3:54:91:7b:16:63:29:1f:41:0b:09:1c:b9:48:ed:65:
7e:21:8f:e8:aa:ca:f2:8d:82:6d:7a:47:b0:5c:95:f7:90:c9:
aa:0c:d1:b6:3d:f3:39:42:8b:a0:97:e2:f8:b7:f1:2b:4c:3a:
be:a2:24:cf:aa:29:c1:48:5a:b1:73:b7:f7:96:83:4e:47:b1:
f2:52:16:71:dc:3c:a5:45:3d:8e:56:7b:40:85:bf:b6:9a:e9:
e4:71:13:3b:7b:1a:61:87:66:91:74:2d:85:b2:1d:61:a9:89:
11:74:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:21 2024 by rpki-client on console-ams.rpki-client.org