Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DEC7D3643C0411EE851B71564AD9E6FC.roa
File: DEC7D3643C0411EE851B71564AD9E6FC.roa (raw, json)
Hash identifier: 40U1cpUTbOe7ompzu0smFICqxELzOThoe+TY7UcTWj0=
Subject key identifier: BD:4F:2D:8B:C0:6C:27:F3:83:7E:1E:12:64:D3:BB:66:7B:48:C4:A3
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 04DB
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DEC7D3643C0411EE851B71564AD9E6FC.roa
Signing time: Wed 16 Aug 2023 07:16:51 +0000
ROA not before: Wed 16 Aug 2023 07:16:47 +0000
ROA not after: Wed 31 Aug 2033 07:16:47 +0000
asID: 20011
IP address blocks: 41.132.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1243 (0x4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Aug 16 07:16:47 2023 GMT
Not After : Aug 31 07:16:47 2033 GMT
Subject: CN=64dc77e3-c271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:c8:92:dd:0d:f5:59:f5:c4:d5:b3:8b:eb:
53:fb:05:02:d6:77:9f:fc:b5:59:db:4b:4e:98:4d:
d1:ce:ec:0d:b5:e3:da:a1:c8:b4:91:fb:25:b1:a1:
c3:a3:db:2a:66:7f:cb:cd:99:25:2b:df:bf:71:fa:
b3:12:e8:a6:2b:83:19:00:8e:a0:e5:6c:0f:1e:77:
14:3e:fc:f3:dc:da:38:4d:37:2c:fe:92:50:b4:db:
24:30:34:3f:1d:e3:ad:4e:e9:08:40:a4:3b:60:00:
77:38:d3:6f:63:25:49:d5:8a:5d:21:d6:ca:cf:7d:
3d:ec:71:77:1d:fe:9e:e5:86:79:95:fb:08:2c:7f:
eb:7f:0d:2f:b9:46:46:1e:46:5e:df:bb:19:db:ec:
33:fb:c0:e5:23:57:1a:15:3c:34:b1:39:ec:64:ff:
ab:de:35:8c:11:02:e8:e8:40:a1:27:11:26:e4:0f:
86:c6:6c:7e:2e:32:11:e8:da:0e:9e:04:eb:d7:55:
82:6a:cb:91:f9:8f:81:4a:7f:40:43:62:27:21:1c:
87:58:a9:63:d8:6c:4f:01:c1:53:08:65:37:fd:af:
7e:af:59:25:f5:7b:4f:73:fb:86:ee:13:db:b2:45:
49:32:9f:cb:fd:c9:6c:33:1c:83:ab:98:b1:53:bb:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:2D:8B:C0:6C:27:F3:83:7E:1E:12:64:D3:BB:66:7B:48:C4:A3
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DEC7D3643C0411EE851B71564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.132.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2c:48:91:9d:d3:11:c2:13:4f:ed:61:ff:cc:92:e4:78:28:f5:
3e:0b:bf:18:60:b9:b6:1d:01:a1:67:84:04:32:63:b7:b3:22:
67:a6:cd:95:d4:69:02:8b:6a:f8:c9:8c:d6:0c:f8:72:e6:2e:
82:e9:72:a6:cb:d6:92:fb:c3:a8:24:b1:f7:4d:21:9c:cc:c1:
a1:ec:87:35:79:98:b4:c7:5a:5b:c5:ba:63:35:27:4f:70:ff:
db:e4:be:fd:19:2e:ac:fc:74:b9:d2:79:4b:da:9a:46:89:ad:
9e:1c:e3:9c:ff:9a:68:ec:3c:f9:84:98:23:f9:6c:8f:79:e5:
88:e4:dd:da:a3:96:0c:15:d0:22:42:c7:71:4f:42:11:1b:3d:
88:ed:be:7b:ca:46:17:80:20:c7:56:0a:cd:82:fa:0f:de:8e:
7f:cd:64:ac:db:de:f1:9a:0f:7b:ec:5c:e5:79:03:59:6b:ae:
11:ff:a6:cf:a9:8a:c4:ba:41:fe:a4:8d:f7:5e:9b:b4:4f:2e:
03:3a:e3:60:35:94:86:1d:55:ba:85:a3:cd:30:90:96:86:26:
cf:b5:e5:c2:97:a6:cc:d6:33:62:71:b3:2c:cf:7f:43:b8:6f:
b1:76:9e:ee:43:09:c8:5c:8e:48:5c:1f:b6:ee:80:76:e7:b8:
46:97:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:49:26 2024 by rpki-client on console-fra.rpki-client.org