Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/5441A5BA3E8F11EFB89E8F87762E951A.roa
File: 5441A5BA3E8F11EFB89E8F87762E951A.roa (raw, json)
Hash identifier: 4xIis8gARgaPEKIucmwJRXfmQHw2+Pjv/MDW5gWNjgE=
Subject key identifier: BE:DC:DD:D8:00:FC:32:93:FE:2B:5D:39:7E:61:A0:5A:D0:5D:CC:60
Certificate issuer: /CN=F367FC8BAF/serialNumber=77412D7CC1053CE19D379CCC6007B925A1E74CA1
Certificate serial: 0193
Authority key identifier: 77:41:2D:7C:C1:05:3C:E1:9D:37:9C:CC:60:07:B9:25:A1:E7:4C:A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/5441A5BA3E8F11EFB89E8F87762E951A.roa
Signing time: Wed 10 Jul 2024 07:37:59 +0000
ROA not before: Wed 10 Jul 2024 07:37:55 +0000
ROA not after: Wed 10 Jul 2030 07:37:55 +0000
asID: 9129
IP address blocks: 41.209.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.crl
rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FC8BAF/serialNumber=77412D7CC1053CE19D379CCC6007B925A1E74CA1
Validity
Not Before: Jul 10 07:37:55 2024 GMT
Not After : Jul 10 07:37:55 2030 GMT
Subject: CN=668e3a57-a385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:8d:d1:8d:96:69:b2:d3:8d:bf:df:85:be:
0a:89:8a:91:9e:87:ca:07:79:f3:c4:88:f2:1d:33:
df:62:0a:45:b4:b8:13:96:e9:5d:ab:53:54:92:9d:
d2:8e:fa:52:2b:11:5b:31:b8:b4:fa:e3:c6:e3:a2:
ec:53:68:08:14:b0:13:57:98:52:5d:49:4e:e9:3b:
a6:85:35:b1:46:f4:06:68:e0:fc:5f:c3:9f:f2:07:
66:19:ed:7b:cf:a6:c5:d7:89:70:c5:91:b5:83:69:
f0:ff:f8:f0:84:6a:53:88:48:83:36:88:04:ea:35:
15:ba:df:d1:e5:6f:96:f1:fb:89:4c:e3:9b:20:8f:
07:6f:65:37:40:8a:7d:44:4e:9c:59:fc:12:6b:0d:
f2:98:8b:e9:d9:e8:62:1c:5f:7a:c9:3f:48:24:e0:
77:32:ec:ee:00:0a:b3:c1:37:40:f6:67:65:9d:91:
78:96:fd:09:29:6f:bd:6d:83:8d:d5:74:63:9e:7f:
f8:43:a1:80:ee:74:ad:bd:a1:01:32:b9:d7:3e:b9:
dc:47:0a:43:85:1d:1b:3e:d3:a3:e5:90:e1:47:7e:
28:da:31:83:ef:0d:72:84:f4:48:a1:4f:c9:53:b8:
ca:a0:4e:0a:a9:c9:7f:a6:9c:47:f3:91:25:19:b7:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:DD:D8:00:FC:32:93:FE:2B:5D:39:7E:61:A0:5A:D0:5D:CC:60
X509v3 Authority Key Identifier:
keyid:77:41:2D:7C:C1:05:3C:E1:9D:37:9C:CC:60:07:B9:25:A1:E7:4C:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/5441A5BA3E8F11EFB89E8F87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.209.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:a5:71:34:87:06:95:fe:cd:c4:36:f5:8b:02:16:00:72:57:
88:08:e9:c8:54:7f:e4:83:30:f9:71:57:e1:40:c8:45:47:68:
5d:be:3a:93:3e:5e:64:c3:03:a2:85:66:e2:37:2b:90:c2:32:
1a:3c:45:44:31:d1:a8:ea:4c:9f:19:32:44:17:16:f3:73:30:
cb:b9:8d:ea:a8:74:66:11:c7:0c:85:9f:8a:19:e6:41:b9:cf:
dd:5a:61:5a:47:23:88:52:8f:73:41:cd:7d:62:95:84:e5:f9:
bc:ef:53:20:7a:d5:d4:a9:05:32:91:b2:c0:32:62:02:e4:8a:
ea:48:19:b3:07:8e:57:11:0e:9f:07:8d:37:40:5c:14:af:b4:
7e:4a:30:8c:14:9b:c3:3f:48:f8:39:fa:9a:67:8b:fb:5a:b8:
55:62:96:cb:66:5b:06:70:35:0a:23:8d:02:6f:5f:7b:38:12:
59:b1:41:56:ce:2d:af:33:5e:f7:38:c4:ec:99:ac:cb:fa:72:
4b:05:69:f7:35:3d:8e:02:4e:25:86:df:95:f3:50:04:58:39:
de:5a:21:1d:bd:3b:88:c4:1e:29:45:47:7b:fd:52:5c:aa:fb:
7c:3c:87:0f:6c:bf:f8:66:72:cb:eb:ec:23:ae:31:6b:5d:6c:
67:65:ab:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org