Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/33051D9C9B5D11EBA1707747F8AEA228.roa
File: 33051D9C9B5D11EBA1707747F8AEA228.roa (raw, json)
Hash identifier: thz9XIsff4et/U9PpnO+I4/QoAvP2mWnxvT43opk+F4=
Subject key identifier: D4:8C:14:79:4F:FF:2E:F5:1E:54:9A:A4:7C:A7:E9:B5:53:B1:A0:F8
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: F2
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/33051D9C9B5D11EBA1707747F8AEA228.roa
Signing time: Mon 12 Apr 2021 07:03:36 +0000
ROA not before: Mon 12 Apr 2021 07:03:28 +0000
ROA not after: Wed 30 Apr 2031 07:03:28 +0000
asID: 3741
IP address blocks: 41.77.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Apr 12 07:03:28 2021 GMT
Not After : Apr 30 07:03:28 2031 GMT
Subject: CN=6073f0c8-d215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:15:c9:fc:a0:96:90:61:68:3b:94:70:0c:
1a:17:3b:6b:e8:a4:8e:71:82:6e:54:70:ab:ac:d6:
51:44:b6:3f:dc:aa:00:fb:8d:ec:a8:a7:ef:fa:45:
b3:97:e3:d0:99:e5:04:b3:fc:12:ae:bc:8d:5a:67:
cb:0c:1f:b4:07:3d:99:d4:ab:9e:62:92:0e:02:44:
7a:14:8a:1a:15:3b:10:b8:cb:08:46:ce:65:99:e1:
6b:3b:a9:d7:22:c8:cb:52:cc:d1:51:73:75:b9:b9:
07:34:9e:43:c7:a0:11:80:78:ab:d1:ef:90:f7:78:
1f:4e:af:67:0b:30:6b:6d:80:cb:62:e7:2b:46:0a:
dc:05:d9:fc:9d:c3:69:08:a4:7a:c4:ec:97:48:ca:
e6:be:84:42:70:47:20:93:e5:54:a1:25:ca:11:de:
fc:45:b7:32:4b:c7:1e:3f:76:fd:82:5b:81:5a:dd:
d1:3e:f9:2c:e0:56:ff:b2:90:18:c4:df:d5:42:74:
b7:7b:38:e8:cf:95:63:14:43:9c:0c:30:d2:d3:fb:
a7:71:70:72:b6:94:ab:c9:21:2c:3d:6e:65:29:21:
5d:c4:02:0c:f0:b2:83:03:69:6d:3a:69:e5:ad:fb:
10:5a:f3:3d:a3:6d:cf:32:cb:08:d8:12:4c:e3:b4:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:14:79:4F:FF:2E:F5:1E:54:9A:A4:7C:A7:E9:B5:53:B1:A0:F8
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/33051D9C9B5D11EBA1707747F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.104.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:89:ba:1f:6e:d6:da:72:b1:08:c9:17:bb:90:28:7e:0e:51:
40:63:32:a6:87:22:33:55:e1:57:2f:ed:42:b2:2c:a9:03:80:
1b:b8:dc:89:c8:64:a2:4e:9d:d0:74:d0:0d:b7:dd:09:43:7d:
df:5d:33:91:a2:27:b9:91:7b:19:5b:66:e7:57:50:a6:b1:46:
f5:21:78:cf:a8:6a:3e:26:85:37:b0:98:01:4c:36:00:f2:69:
73:8a:37:ed:d5:9e:56:3f:e2:b6:d0:7d:7a:53:ae:61:11:d7:
28:53:f0:ab:78:f8:08:39:8e:a3:8d:64:83:eb:a3:e2:b4:b1:
af:3a:79:e4:a3:1c:f7:3a:2e:a0:92:27:e9:ff:1f:97:e2:0d:
34:6e:37:2e:3f:6c:18:0b:cb:d1:3b:6a:46:c5:a7:fc:3c:1b:
a4:8c:10:47:a1:42:92:e3:4f:03:dc:c6:bd:94:65:ee:31:bb:
58:6e:b0:94:4a:16:c1:1a:62:39:21:17:71:11:e1:57:c5:83:
c0:f7:2f:57:03:6f:4b:ee:8f:a6:60:0b:6f:37:d9:87:71:8d:
59:72:f7:11:6c:2f:c6:61:6e:d2:ef:6e:97:75:d5:d0:75:aa:
6b:5c:25:f7:15:89:ba:dc:2a:f1:04:40:77:11:f6:10:4c:71:
ac:97:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org