Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/C3F993AA4FBF11EEACD401854AD9E6FC.roa
File: C3F993AA4FBF11EEACD401854AD9E6FC.roa (raw, json)
Hash identifier: I8EhRjgX/9Wi35S6e4fIvvz4/bj2O5Af3wO7EY6GkL8=
Subject key identifier: 12:B3:9F:F5:C2:FE:71:A3:01:14:AD:7F:EA:87:2E:16:61:D4:B9:00
Certificate issuer: /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial: F4
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/C3F993AA4FBF11EEACD401854AD9E6FC.roa
Signing time: Sun 10 Sep 2023 09:52:34 +0000
ROA not before: Sun 10 Sep 2023 09:52:30 +0000
ROA not after: Thu 10 Sep 2026 09:52:30 +0000
asID: 37284
IP address blocks: 41.74.64.0/20 maxlen: 27
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Validity
Not Before: Sep 10 09:52:30 2023 GMT
Not After : Sep 10 09:52:30 2026 GMT
Subject: CN=64fd91e2-346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d7:03:63:ac:2b:9f:91:5d:37:95:f4:c5:1c:
89:44:02:8e:10:b9:a7:54:de:3e:33:04:6d:83:93:
c6:d2:f7:60:b5:32:06:09:5f:23:73:ba:93:b9:d0:
a0:bc:54:50:b4:a5:9b:10:62:22:f4:70:ba:95:a6:
34:1e:c7:af:62:b9:e3:e1:82:61:2e:6e:17:35:e7:
5e:12:7b:09:40:5a:37:a0:60:3f:52:e0:be:1e:04:
5d:75:88:14:e5:9c:dd:d8:52:db:09:70:6c:3a:8f:
a5:4e:21:44:e8:3b:78:83:01:6f:07:a2:2c:1a:17:
90:b5:28:7f:cb:d8:c1:26:b8:4e:83:6f:5f:ce:28:
a0:58:6f:e2:2b:0e:fb:b8:e1:81:8f:54:ee:6f:39:
64:42:a3:23:2a:a6:d1:05:fb:ff:89:a6:0c:07:7f:
d9:12:2b:ce:b7:63:a3:20:cb:18:ac:49:ff:15:e2:
91:ff:46:8a:5e:6a:e1:27:81:58:ee:d4:c3:14:f4:
e7:26:7b:f1:ce:89:ef:35:b3:fe:da:cf:59:07:c3:
24:02:a1:08:5f:e9:14:d9:d5:22:8e:f1:2f:8a:26:
53:aa:f5:d8:e7:80:cc:7a:36:38:b0:e8:29:92:9f:
24:6d:3a:97:79:df:05:0f:47:ae:f9:3a:eb:5c:f5:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:9F:F5:C2:FE:71:A3:01:14:AD:7F:EA:87:2E:16:61:D4:B9:00
X509v3 Authority Key Identifier:
keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/C3F993AA4FBF11EEACD401854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.74.64.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:04:9a:4e:2c:5f:88:8d:ad:d1:a7:d1:0d:72:15:39:bb:26:
4d:48:22:fa:a1:ff:7f:cb:55:4b:3a:0f:17:39:b3:15:cd:08:
a7:e2:8c:17:e0:4d:33:c2:4a:9a:c1:4b:1f:0c:82:fe:59:92:
2b:ab:e6:b3:5f:81:30:a5:a2:da:b4:5c:c9:e0:37:d8:1f:39:
ba:eb:23:60:32:52:4c:2a:ff:62:b3:4c:9c:66:a1:26:38:97:
30:50:01:b2:8d:00:c0:59:4c:4c:85:dd:6d:da:f6:7c:3d:47:
75:4b:79:6f:fc:9d:08:3b:4b:b6:4b:7d:e4:e1:9b:12:ed:cb:
8d:0d:b5:8d:76:7e:30:05:28:c8:08:a9:98:1c:96:07:41:4a:
a1:6d:b3:32:25:9d:63:ed:69:d7:77:d3:02:44:47:d6:46:14:
5c:71:28:64:22:94:f1:af:b7:f0:df:1c:38:47:b7:dd:bc:c9:
87:c7:44:02:92:88:c5:00:c3:82:0e:a5:eb:95:de:7b:eb:1f:
19:0a:f0:53:ba:c8:93:2c:49:6a:97:e7:ab:2f:4d:18:97:99:
be:b9:60:98:9f:c3:c7:19:be:52:42:5e:47:aa:46:49:ac:83:
f6:ac:23:68:3a:55:13:5f:b4:ba:ee:a2:f2:b2:43:f3:bd:3f:
c6:f3:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:34 2024 by rpki-client on console-fra.rpki-client.org