Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/D9AFC14C980311EE9C9EE232D25BE465.roa
File: D9AFC14C980311EE9C9EE232D25BE465.roa (raw, json)
Hash identifier: 3wIsUAj1b7QA8gDWmN43Tp1fe+wx4WBvqsu3o9Runpg=
Subject key identifier: 20:83:A5:E8:36:7F:0F:91:7D:B1:52:D3:7D:DD:0E:2B:50:2B:2A:A4
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 06DE
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/D9AFC14C980311EE9C9EE232D25BE465.roa
Signing time: Mon 11 Dec 2023 09:01:20 +0000
ROA not before: Tue 12 Dec 2023 09:01:04 +0000
ROA not after: Fri 01 Dec 2028 09:01:04 +0000
asID: 328366
IP address blocks: 41.79.212.0/22 maxlen: 24
102.211.180.0/22 maxlen: 24
102.218.52.0/22 maxlen: 24
154.68.176.0/20 maxlen: 24
154.118.244.0/22 maxlen: 24
2c0f:efe0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Validity
Not Before: Dec 12 09:01:04 2023 GMT
Not After : Dec 1 09:01:04 2028 GMT
Subject: CN=6576cfe0-4944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:fb:65:56:33:44:95:b3:f6:ec:e6:11:f6:
e2:7b:a8:8d:96:a6:27:e8:cd:d2:df:f9:83:87:f0:
d4:01:5d:4f:7b:12:64:66:bc:07:89:99:5f:5a:42:
55:b7:00:18:11:ed:cb:a1:8f:d0:f7:25:e1:75:f6:
7d:2d:c3:82:74:88:98:3c:f7:27:33:e7:00:12:04:
7e:7c:24:1d:d2:c9:9a:9d:49:9b:f9:35:5d:b2:98:
b5:75:4a:c2:f7:97:45:c1:02:2f:f8:0e:29:9c:ef:
4f:21:40:dc:76:ce:28:e6:fd:f1:ba:77:87:1c:61:
23:92:a9:43:be:20:1f:83:70:56:29:11:ca:06:2a:
0b:dd:ac:9e:92:f4:8c:2a:5e:4b:6f:71:77:a6:49:
21:03:61:53:72:59:54:2f:a3:76:46:f0:4d:7d:60:
5f:d7:52:9a:cc:d3:bf:ec:27:b4:da:97:f8:90:ed:
36:29:e2:04:a6:78:12:e4:82:23:6f:55:a2:cd:1c:
7c:8d:12:10:fe:7c:83:ee:b9:30:c4:3d:62:9d:2e:
37:ab:3e:6d:2d:e0:7e:48:02:67:ec:60:08:53:ca:
2f:d8:26:29:26:ba:9c:14:51:01:2f:fe:9a:c5:d7:
04:49:64:83:a5:d9:4c:17:51:4c:b8:c7:9c:e7:13:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:A5:E8:36:7F:0F:91:7D:B1:52:D3:7D:DD:0E:2B:50:2B:2A:A4
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/D9AFC14C980311EE9C9EE232D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.212.0/22
102.211.180.0/22
102.218.52.0/22
154.68.176.0/20
154.118.244.0/22
IPv6:
2c0f:efe0::/32
Signature Algorithm: sha256WithRSAEncryption
32:aa:e4:66:c1:af:ba:e9:87:99:be:a3:9a:a5:04:d8:84:72:
17:6e:06:b2:0c:cb:de:d5:5b:d0:40:4b:b3:2a:fd:d2:2a:5a:
29:a3:fd:de:18:25:8c:77:a9:20:fb:9d:07:2c:64:6e:e4:d2:
41:da:3d:25:a9:a7:d4:fe:ef:d3:ae:c7:74:69:10:22:40:82:
93:c8:c6:e1:bf:bd:7d:bd:2b:e3:9d:da:b6:78:ba:e1:a3:0f:
33:91:11:fd:82:b9:dc:f5:a6:95:be:84:25:b9:34:47:4c:f9:
16:16:da:80:5b:09:79:d7:9e:ea:24:d0:41:de:e6:b3:4b:b4:
7f:fc:97:ff:86:51:05:f5:0a:af:af:2f:dc:0b:02:a3:b3:93:
d6:4d:97:0f:e2:d0:d6:86:90:c8:a3:9a:54:df:25:1f:34:c7:
1c:f1:c2:44:22:67:c1:f3:25:d3:cb:3d:a5:af:f1:11:20:44:
62:3b:ee:e3:ea:52:77:9e:9c:c9:ab:39:47:c0:53:54:f7:ec:
e4:36:72:73:8b:18:55:c4:6a:54:af:1c:c3:1c:48:9e:b0:f4:
84:fd:e9:e1:4c:22:fc:28:d7:75:10:66:5c:3e:8c:3d:80:9e:
66:23:d2:4f:be:cf:09:5d:e6:23:da:13:c5:b0:86:dd:13:94:
f6:2d:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:02:29 2024 by rpki-client on console-fra.rpki-client.org