Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/B996E016325411EF8DEC646B762E951A.roa
File: B996E016325411EF8DEC646B762E951A.roa (raw, json)
Hash identifier: vSG99bao4yl4XVWBsita9YLRsOSaJbFDYOSTGXNEIuA=
Subject key identifier: A5:C8:26:3C:10:10:1D:A1:39:1F:18:9C:B0:5F:2B:F6:2D:50:77:E5
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 73
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/B996E016325411EF8DEC646B762E951A.roa
Signing time: Mon 24 Jun 2024 18:08:14 +0000
ROA not before: Mon 24 Jun 2024 18:08:11 +0000
ROA not after: Mon 26 Jun 2034 18:08:11 +0000
asID: 328866
IP address blocks: 41.190.224.0/22 maxlen: 30
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 30 Jun 2024 00:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Jun 24 18:08:11 2024 GMT
Not After : Jun 26 18:08:11 2034 GMT
Subject: CN=6679b60e-d633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:7e:73:4f:68:75:99:05:b1:4a:fb:a7:5d:
83:17:ee:fc:6e:da:92:4c:2e:a4:ab:56:8b:95:2e:
f8:ed:5d:b6:fb:0e:95:c3:f7:2e:bf:ff:85:ff:db:
ce:cc:42:b2:c5:ec:cc:99:69:10:88:d6:f9:24:cc:
4c:27:cd:88:10:35:de:26:34:4c:47:80:19:45:a6:
e0:47:6d:90:dc:65:23:b2:a5:3d:6c:0e:36:04:44:
c2:71:1e:05:16:6f:b6:44:a6:f1:68:95:48:6d:39:
1a:df:9a:4d:96:f4:4c:1f:56:e2:af:07:0b:67:cc:
41:ed:b2:dd:08:62:d8:91:17:7a:cc:35:0b:51:a0:
92:49:70:c9:3a:5a:ee:5a:98:10:a4:bf:88:06:ca:
19:c1:40:19:09:95:99:ae:7c:50:82:d2:62:61:4b:
58:e1:3a:2a:18:76:b0:43:6d:2e:92:66:05:31:63:
b1:d9:f9:de:e6:c4:9f:f4:c3:c7:88:0b:a6:b8:af:
e9:90:59:06:29:8e:7c:79:75:31:ff:38:7d:39:b6:
50:2a:33:ce:cf:f4:79:ad:65:ea:1c:fa:17:15:34:
a9:fe:ce:2e:95:b0:d7:6b:7c:77:8f:bf:3d:69:12:
4f:20:7b:55:71:18:0e:c7:63:75:b9:1a:03:80:4a:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C8:26:3C:10:10:1D:A1:39:1F:18:9C:B0:5F:2B:F6:2D:50:77:E5
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/B996E016325411EF8DEC646B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.190.224.0/22
Signature Algorithm: sha256WithRSAEncryption
44:87:df:0a:b0:20:2d:97:81:58:af:f7:5b:dc:31:88:9a:ec:
bb:39:dc:63:df:af:80:0d:90:07:2e:0a:8f:57:30:85:8e:77:
9c:16:5c:6c:dc:9b:21:7e:83:44:71:6b:7a:9b:ec:64:06:a7:
5a:9b:fd:1a:9b:36:37:a4:3d:b0:0b:5b:16:65:89:38:42:ac:
af:a6:97:70:91:46:84:a6:6e:2b:a2:f1:fd:68:e3:3d:f2:0d:
79:40:b8:df:a8:88:14:11:dc:b1:13:92:f9:cb:48:6a:7c:01:
3f:fc:c9:7a:9c:94:ba:76:90:0d:00:0a:8d:35:31:84:73:40:
3a:82:54:4e:9f:92:27:8f:b8:6d:b2:43:54:bd:3c:b7:54:b4:
9c:43:3f:da:c9:f4:06:94:31:de:d3:bd:35:b7:ac:df:53:b4:
3a:38:df:b8:6b:a3:2b:4e:26:0d:46:c2:f3:bf:3f:1c:11:09:
d1:85:cb:71:08:11:18:81:fa:59:13:f9:7e:72:98:5f:61:9f:
36:dd:0e:95:25:10:b7:95:01:7a:f5:0b:06:2a:70:ae:33:50:
5f:52:1b:ce:a7:85:01:ec:a6:ec:a9:63:8a:ca:21:f5:34:3a:
d2:5d:f5:88:00:84:83:94:29:ed:60:a4:c4:87:d4:17:57:55:
51:f7:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:56:02 2024 by rpki-client on console-fra.rpki-client.org