Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C1CD6660D4111EFA8D7835F017001B1.roa
File: 1C1CD6660D4111EFA8D7835F017001B1.roa (raw, json)
Hash identifier: g51qxtLhtCvZuRL8U3f6pVviLnhIzgH6PYGXqJSkIXU=
Subject key identifier: 59:75:C2:61:B3:9E:14:C6:76:60:2F:0B:70:15:19:5B:6D:83:56:3A
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0614
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C1CD6660D4111EFA8D7835F017001B1.roa
Signing time: Wed 08 May 2024 13:44:37 +0000
ROA not before: Wed 08 May 2024 13:44:33 +0000
ROA not after: Wed 31 May 2034 13:44:33 +0000
asID: 20011
IP address blocks: 41.133.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1556 (0x614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 8 13:44:33 2024 GMT
Not After : May 31 13:44:33 2034 GMT
Subject: CN=663b81c5-0701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:54:8a:54:d0:36:5e:a3:b3:10:1b:b7:b9:
3b:f4:d8:4c:bc:9f:88:cf:be:6f:e9:7a:23:10:44:
01:95:2e:5e:1f:15:38:e9:c6:6a:de:31:3f:dd:b2:
9c:68:8e:b3:eb:fd:e4:fb:e8:fb:ff:e3:b0:79:04:
9f:99:3c:87:0f:b4:49:04:b8:a0:22:7c:bc:c2:fe:
3e:59:70:c5:8b:be:16:fe:d4:b9:90:85:79:1f:b6:
6a:e3:3d:74:2e:f1:ce:d9:f5:ea:61:07:26:ea:e1:
49:24:0c:ba:99:82:de:22:f9:c0:90:c8:b9:b7:42:
df:e8:51:25:64:4f:06:20:10:85:92:fe:90:ba:d8:
03:8a:ca:b5:7d:b1:8e:af:6d:10:39:92:f3:af:71:
cd:f8:ac:9d:b5:ce:f8:a6:d5:b4:cd:26:80:87:c9:
1f:a5:0f:4c:7d:bb:27:70:59:ae:0c:46:85:90:f3:
c6:5b:5f:83:f8:e2:e4:a1:b0:03:d2:1f:bc:b1:7d:
41:2a:92:00:1f:51:02:1e:f0:39:6c:2c:25:3b:d7:
4a:0c:e5:8d:cf:65:86:62:1a:62:ab:09:a7:c3:dd:
b0:bc:c6:8b:18:d6:22:3c:cc:65:38:60:4a:3c:bb:
f2:62:a5:d9:06:1d:b2:0d:52:8d:b4:27:80:11:9a:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:75:C2:61:B3:9E:14:C6:76:60:2F:0B:70:15:19:5B:6D:83:56:3A
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C1CD6660D4111EFA8D7835F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.133.192.0/18
Signature Algorithm: sha256WithRSAEncryption
02:28:95:23:3e:77:22:82:c7:7c:96:bd:1d:01:42:b6:85:ce:
b8:3d:df:77:dc:f9:dd:f0:91:bd:c7:39:a0:cd:68:40:f3:28:
70:c1:7d:67:9d:25:55:66:88:98:6f:37:da:30:51:c5:a0:72:
da:ab:39:e5:20:cc:ad:32:49:3e:db:a0:80:90:c5:1d:16:c0:
39:08:87:68:be:04:bf:20:0c:e7:13:37:ed:b7:12:dd:9e:81:
fb:65:8a:b9:bc:ff:c4:2e:7d:ac:0e:a7:50:dd:46:93:1d:36:
1b:bb:24:4d:b0:f8:08:7b:f3:bc:17:e2:f2:5e:64:cd:12:6c:
cf:ae:ec:56:8e:a2:49:11:07:c2:7c:04:44:00:5c:98:66:de:
42:ac:b5:4b:53:01:81:85:ab:45:f6:f2:00:ac:2d:be:a8:02:
1b:8b:74:50:7c:78:89:cb:fc:98:ed:d4:00:ff:6f:6a:1d:45:
4a:23:0c:77:27:76:11:f8:6f:57:1b:a3:b5:58:3c:74:a5:7e:
03:d4:ec:3e:76:13:80:aa:e7:e9:54:0a:e9:ee:6a:77:02:a6:
89:ed:a7:a8:f6:75:14:cb:f8:c1:bd:17:e0:7d:36:13:53:25:
1a:7b:c4:6f:63:67:62:ae:4c:c3:a7:09:2b:09:09:98:90:d5:
4b:82:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org