Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/0332F694AA6211EA84373977F8AEA228.roa
File: 0332F694AA6211EA84373977F8AEA228.roa (raw, json)
Hash identifier: yMasz+8upXI4SIFaRoZw+RpsGMpU6WZH5rMWZCIkVjo=
Subject key identifier: 7D:12:19:23:49:83:C0:63:F7:78:66:14:28:5C:D3:59:63:F2:79:B5
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 17
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/0332F694AA6211EA84373977F8AEA228.roa
Signing time: Tue 09 Jun 2020 15:00:53 +0000
ROA not before: Tue 09 Jun 2020 15:00:48 +0000
ROA not after: Tue 31 Dec 2030 15:00:48 +0000
asID: 37061
IP address blocks: 41.80.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jun 9 15:00:48 2020 GMT
Not After : Dec 31 15:00:48 2030 GMT
Subject: CN=5edfa425-fc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:92:5e:b9:90:cc:ac:e6:6c:78:b0:84:ee:
15:90:25:51:2e:d8:ba:41:e3:f5:f4:1b:7b:2c:17:
88:9f:b8:dc:bf:83:15:ee:3e:4a:22:0c:72:fd:83:
9d:1c:61:db:d9:4b:2c:fa:df:52:f9:08:1a:3f:91:
1b:16:a2:d7:02:ab:0f:91:16:b3:f5:98:8e:22:e5:
d9:be:e9:88:35:5b:30:7c:4b:8d:cf:6a:2b:2c:8e:
5b:45:5b:cb:58:f9:80:6b:40:13:e1:f1:06:b4:21:
10:5c:62:20:1d:c5:73:01:4e:5b:e0:59:6f:c2:d2:
36:34:ab:8a:07:db:f7:19:a1:c5:60:79:86:ae:b0:
f4:a5:e1:3c:a2:57:a2:2b:a3:34:81:58:09:cc:f4:
8c:dd:db:20:16:15:37:d3:cf:b2:19:30:91:9e:0f:
56:db:22:3a:8b:54:c2:45:99:a6:2d:9c:95:37:9c:
7b:6b:76:d2:1e:44:36:56:d1:a7:b9:f0:dc:84:97:
de:93:af:ac:37:e2:99:e9:f5:b7:4c:1d:e1:ba:4e:
b8:71:ac:30:c9:12:b5:76:b2:05:bc:5c:f3:1b:62:
89:12:f8:77:fd:76:b7:24:57:4b:ac:c9:f0:e6:de:
b8:96:75:21:95:49:45:8b:2e:41:09:39:4b:51:30:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:19:23:49:83:C0:63:F7:78:66:14:28:5C:D3:59:63:F2:79:B5
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/0332F694AA6211EA84373977F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.80.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a5:31:ce:cb:ae:d1:c2:25:73:59:8d:03:ad:4e:9e:dc:b7:15:
7f:6c:80:24:c3:db:9c:c2:5c:b1:e2:ff:bf:02:b8:da:99:0e:
d2:f0:50:d6:6b:55:48:4e:97:3f:cd:cb:10:27:c2:d7:6e:73:
5d:cb:00:8b:9a:48:c4:39:dc:3b:9e:42:83:ee:02:2c:2c:b4:
ac:fd:02:9c:b4:61:3b:f0:ae:4b:86:1d:38:62:3e:32:40:3d:
88:76:15:3b:68:92:9e:76:1d:53:a3:e9:b6:b9:74:26:77:c4:
00:39:74:c0:aa:b7:5e:13:bf:4f:be:53:b2:69:34:97:aa:fb:
c6:7a:61:34:53:64:3f:48:25:ee:6d:ea:e1:85:8e:db:fb:d0:
84:9d:1f:9f:52:9a:31:37:3e:2e:25:21:3a:30:54:b4:bb:0b:
8a:4e:ad:01:fa:34:4a:a7:12:6c:23:cb:67:ba:58:89:32:cd:
f5:3a:8e:ee:09:63:2c:99:09:4a:37:72:11:9f:d2:54:42:d2:
09:2f:04:bf:a4:1e:5d:35:1d:b1:d3:cb:ec:8d:ae:97:32:05:
f0:3c:87:6a:0f:9d:ac:fc:d5:5b:68:bb:8f:b4:ea:92:95:17:
5d:74:06:03:ee:73:99:81:ec:75:85:26:19:db:6f:26:c0:5a:
d5:2c:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:45 2024 by rpki-client on console-ams.rpki-client.org