Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/14D64DEC2F8E11EEADEF630E4AD9E6FC.roa
File: 14D64DEC2F8E11EEADEF630E4AD9E6FC.roa (raw, json)
Hash identifier: rBVKfBnpXS85m3ETw75aRyH+TK0t3D9ORSjQx2faoL8=
Subject key identifier: 84:E9:27:AE:63:CB:60:92:5A:56:D3:DA:AD:99:2C:39:7B:A8:FB:40
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 04F7
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/14D64DEC2F8E11EEADEF630E4AD9E6FC.roa
Signing time: Mon 31 Jul 2023 10:36:18 +0000
ROA not before: Mon 31 Jul 2023 10:36:14 +0000
ROA not after: Fri 31 Jul 2043 10:36:14 +0000
asID: 198949
IP address blocks: 41.203.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1271 (0x4f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF
Validity
Not Before: Jul 31 10:36:14 2023 GMT
Not After : Jul 31 10:36:14 2043 GMT
Subject: CN=64c78ea2-2694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9a:5f:3e:58:f8:93:16:b3:65:c6:39:1b:89:
c4:67:9f:e4:e1:0d:6b:58:47:e7:a1:7e:39:bb:14:
84:1a:ca:55:1a:bd:b1:8f:44:74:b1:05:46:50:3f:
4c:c9:c8:ff:1d:ef:93:e1:cc:bc:51:b8:3b:80:54:
68:69:76:ea:04:da:64:37:cc:ae:6d:87:70:21:19:
43:3d:26:3d:48:da:7e:95:4f:76:63:21:36:7f:58:
a5:59:0c:d7:2b:7e:b5:17:58:59:bf:fc:35:2c:10:
49:98:47:a0:9d:1f:1e:b5:9a:3e:5d:89:bb:8b:8a:
d8:f8:4c:67:98:cc:22:a4:f2:62:d9:8c:04:09:8d:
6d:61:7c:5a:6b:e8:b5:2d:64:9f:96:a4:58:95:6d:
fe:70:17:ef:ba:90:e9:01:b2:d5:25:f3:80:72:e4:
46:69:73:9e:9a:36:0c:f8:cd:01:89:31:ef:0d:b7:
af:4c:89:03:0f:26:01:fb:db:b2:aa:cc:01:32:25:
98:3d:13:ee:ae:53:2a:87:37:f2:f5:86:ef:25:66:
84:21:b1:0b:7c:8e:f6:02:72:20:75:c0:23:8e:e0:
48:bd:b8:33:9d:be:df:a0:97:c3:a5:bd:bd:fb:fa:
31:7d:18:f8:e6:49:e2:0d:15:58:0b:cb:c0:4e:f1:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E9:27:AE:63:CB:60:92:5A:56:D3:DA:AD:99:2C:39:7B:A8:FB:40
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/14D64DEC2F8E11EEADEF630E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.203.208.0/20
Signature Algorithm: sha256WithRSAEncryption
c7:d1:a1:59:b3:8a:7f:64:b5:7e:21:15:69:ca:13:5d:26:31:
0f:db:64:90:11:b6:d5:4e:2c:13:a0:c3:27:3d:74:0b:7f:7f:
a8:2d:e7:ba:c1:5c:bc:e3:90:2d:e8:3a:34:44:2a:05:27:05:
ea:08:c3:0d:28:73:e2:1f:77:ac:7b:f3:e5:15:3e:9e:93:f4:
99:c3:c1:60:df:1c:2b:75:2b:b7:32:f8:bf:ea:a5:1b:52:5a:
fc:c4:78:16:d7:ac:74:73:e4:7d:5c:9f:ab:06:8d:2e:d2:f9:
bb:5f:84:47:5c:e9:98:02:48:e7:b4:61:55:12:40:c9:ef:30:
68:58:1f:19:fb:16:6a:d5:26:18:82:4a:a2:05:47:dd:69:44:
38:58:24:f0:ef:12:a1:95:2c:36:0e:0b:b1:01:4d:a4:ea:b0:
f1:af:d0:b6:06:40:14:b3:af:2a:8e:2f:0f:82:d5:e3:60:49:
82:7f:03:4a:c5:a8:b1:5e:f5:6c:dd:5d:9e:cc:55:68:fc:21:
ce:63:00:ec:d3:e6:f0:2c:75:d7:51:b1:d7:10:c0:37:8f:8b:
4d:91:c0:d3:d8:29:5a:ee:a0:80:c6:9c:57:f3:67:74:58:9b:
a0:7c:12:85:c9:9d:ed:4b:ce:09:d4:ad:18:0c:8c:96:8d:a9:
be:c7:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:08 2025 by rpki-client