Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/7ECDEEE6387311EF9CCF594A762E951A.roa
File: 7ECDEEE6387311EF9CCF594A762E951A.roa (raw, json)
Hash identifier: 2ZeihCUzI0W9JMOxurwJNNO7X97D4kJnt3ZQCqSXzLk=
Subject key identifier: E2:A3:48:F7:CA:32:37:49:C8:73:A0:45:8F:EB:36:30:89:09:9F:B7
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 86
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/7ECDEEE6387311EF9CCF594A762E951A.roa
Signing time: Tue 02 Jul 2024 13:03:37 +0000
ROA not before: Tue 02 Jul 2024 13:03:34 +0000
ROA not after: Mon 17 Jul 2034 13:03:34 +0000
asID: 328866
IP address blocks: 41.92.200.0/24 maxlen: 24
41.92.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Jul 2 13:03:34 2024 GMT
Not After : Jul 17 13:03:34 2034 GMT
Subject: CN=6683faa9-f15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:44:e5:9b:05:9f:f2:b7:15:97:2f:e4:6f:
d2:38:77:a1:1b:fe:95:ac:3e:e8:df:c8:39:38:10:
cb:56:75:15:02:74:e2:54:0e:4e:f4:7c:3c:2b:17:
14:59:af:46:eb:c8:12:20:74:c9:af:e8:c0:5e:86:
7c:eb:db:6e:7b:76:98:e6:5e:a8:05:c3:ee:79:24:
0e:3a:e4:92:d5:8e:71:59:38:37:ed:0b:1c:bd:4f:
39:f5:54:cb:1f:4b:c8:e5:d0:82:62:41:16:7b:b4:
ab:64:c6:f5:e3:03:11:35:0a:e1:47:b0:a5:77:e3:
ac:b1:5d:18:87:56:60:d1:04:8b:e8:d5:44:e7:ed:
f5:e0:41:b4:80:b4:8e:31:ce:ef:c2:92:3a:88:9d:
40:b1:5c:66:c8:34:e9:2e:4f:a3:4c:0c:0d:30:a0:
ed:55:01:f5:d7:cd:d2:7a:ed:13:3c:87:8b:91:36:
a9:3a:0a:47:b1:3d:a1:9e:ae:11:39:6a:e1:b7:ed:
de:60:bf:5d:e4:64:59:87:bd:58:f1:6c:28:d6:44:
00:e0:14:fb:fe:68:54:43:63:c7:20:92:10:1a:ff:
14:54:4d:2b:2c:0a:cb:8f:1d:6e:12:ed:ae:bb:a3:
8c:a5:f5:a1:5a:52:0d:a5:e3:f3:03:9e:7a:4f:f1:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:48:F7:CA:32:37:49:C8:73:A0:45:8F:EB:36:30:89:09:9F:B7
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/7ECDEEE6387311EF9CCF594A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.200.0/24
41.92.202.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:64:76:5f:d1:6f:3b:97:e1:3f:bc:96:22:de:91:ae:7c:56:
04:05:68:98:94:62:ba:46:e0:2d:10:90:b4:ff:a8:f6:c9:57:
0d:32:a7:a2:60:77:8c:c7:c4:f6:a9:1f:f0:99:9f:e8:ae:f4:
c3:dc:a5:e3:1f:01:65:ac:fb:e7:85:dc:dd:dd:36:d3:33:5b:
0d:f2:7a:29:eb:9a:94:00:ab:94:46:22:82:88:b5:00:67:00:
10:89:a6:ac:86:e9:56:99:b5:fa:ad:94:6c:1d:14:56:1f:9f:
f9:15:24:aa:93:24:09:96:18:c9:fc:01:26:70:4b:17:4d:13:
35:91:74:82:5b:57:58:f9:e4:69:d4:7e:4e:d3:e7:2f:1f:71:
8e:7c:69:55:fa:aa:8a:3f:1b:a6:59:8e:d6:22:5b:85:cd:51:
8b:ce:f2:ae:01:82:65:e1:7d:a1:7c:5a:96:e6:0f:56:2c:fb:
fa:99:0c:9a:bd:7a:22:5d:b8:dc:3f:1a:da:a2:d2:33:72:e6:
bc:24:81:b9:0c:6e:24:7a:e7:b2:f1:2b:3d:74:09:8a:09:a4:
87:55:d9:b8:cc:34:89:43:5b:a7:d9:4a:1b:c4:e4:26:e8:d6:
82:c2:79:0b:00:81:e7:75:0c:db:ea:f1:16:98:0d:bf:17:fe:
2b:b7:17:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:45 2024 by rpki-client on console-ams.rpki-client.org