Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/01B62ACEF64F11EEA7BF4372775412E6.roa
File: 01B62ACEF64F11EEA7BF4372775412E6.roa (raw, json)
Hash identifier: JFeLgbzAfmQPQNmjnlZv5H8jcPctU6ppJiDbWstuUUU=
Subject key identifier: 08:1B:03:43:E1:39:B9:C2:3E:3D:58:12:B3:09:9A:DB:C8:18:17:17
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 10
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/01B62ACEF64F11EEA7BF4372775412E6.roa
Signing time: Tue 09 Apr 2024 08:56:09 +0000
ROA not before: Tue 09 Apr 2024 08:56:05 +0000
ROA not after: Sun 09 Apr 2034 08:56:05 +0000
asID: 328866
IP address blocks: 41.92.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 27 Jun 2024 00:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Apr 9 08:56:05 2024 GMT
Not After : Apr 9 08:56:05 2034 GMT
Subject: CN=661502a9-325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:a9:8b:9c:8a:f2:e4:81:b2:03:60:28:bb:
18:ec:66:e0:08:41:4f:e7:67:0d:5e:58:fa:9f:e0:
72:cd:ce:09:c7:a4:ee:d5:cc:c4:66:5a:63:a2:54:
66:48:13:b6:ab:1c:65:25:a6:7e:66:e5:39:57:2c:
69:76:b1:39:61:37:07:e1:a1:fb:5d:61:1e:c0:7f:
fd:1e:c5:80:34:42:24:52:b7:e4:95:6d:af:7b:6d:
8f:cc:b4:85:f5:38:b3:b7:14:4a:48:03:63:76:75:
a8:c7:a5:14:44:c5:8c:28:80:7b:aa:a6:63:70:75:
e5:1e:22:82:97:d5:62:3c:d4:dd:0e:8c:0e:7c:55:
c5:07:eb:91:f0:fb:23:2f:fc:bc:27:bd:bb:f6:40:
91:7c:36:65:ea:00:59:ad:43:46:98:79:41:35:46:
9f:72:5b:2b:a8:07:4a:5b:52:e0:86:e6:28:02:f4:
a6:71:b2:df:85:79:e4:62:29:22:16:1e:4d:bd:14:
ce:37:07:bb:a1:11:a1:8e:9c:ce:e4:d3:88:ba:17:
d9:f5:af:54:d1:a4:54:9e:05:ad:1e:61:eb:25:21:
4e:67:89:c8:f0:20:4d:51:be:64:ed:67:45:b4:10:
c5:c2:d6:e8:91:83:41:78:17:af:24:f6:5d:dc:d5:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:03:43:E1:39:B9:C2:3E:3D:58:12:B3:09:9A:DB:C8:18:17:17
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/01B62ACEF64F11EEA7BF4372775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
48:27:46:5e:61:46:3c:c7:f0:cb:c7:17:00:50:a0:a1:f7:55:
63:af:fc:9d:aa:d1:07:e9:2f:c1:ac:d1:dd:75:dc:bc:39:e4:
f3:46:d4:96:83:dc:9b:7f:12:9a:bf:1a:6e:a4:4f:2d:63:22:
e5:83:5a:74:7a:48:13:ba:f1:37:db:a5:eb:1a:17:1c:7a:83:
e2:b2:76:eb:9d:9e:ef:04:c1:3e:27:dd:56:f0:88:ec:16:ab:
f7:71:94:64:cf:02:9e:3e:bd:2c:eb:02:3f:6b:b3:c9:29:03:
76:a1:05:0b:cd:5c:a2:5b:1e:b7:21:fa:b4:47:63:0e:49:18:
4b:f9:69:71:7d:5b:c5:51:84:ed:44:87:1e:36:d1:09:5f:d0:
14:f9:3c:5e:b5:d6:38:21:3b:c0:f3:c0:50:01:a3:0f:de:56:
83:97:d3:cd:8c:c8:fd:42:59:43:f7:c8:74:58:08:30:cf:df:
8c:9b:74:79:5a:4d:bc:2d:c6:8b:e7:8b:64:92:e7:c2:93:99:
b4:c2:35:9a:0d:be:e1:20:c8:7a:a7:ae:a1:9a:c3:a9:e8:09:
c4:92:1e:01:ba:32:a9:24:95:3b:0f:6d:47:80:62:78:d0:f3:
d2:a6:b5:f1:0c:09:45:0f:5d:e1:cb:89:d8:ce:7e:27:be:ab:
fc:e7:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:04:04 2024 by rpki-client on console-fra.rpki-client.org