Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/5608A8742F8D11EEB951988A4AD9E6FC.roa
File: 5608A8742F8D11EEB951988A4AD9E6FC.roa (raw, json)
Hash identifier: hunNaWXpDU49FgYOOk36+YRdO8QxWwMMkZUeXcW3DBQ=
Subject key identifier: 75:2F:17:26:AE:94:65:61:DB:59:52:EC:6F:58:9E:CA:23:52:AE:56
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 04F1
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/5608A8742F8D11EEB951988A4AD9E6FC.roa
Signing time: Mon 31 Jul 2023 10:30:57 +0000
ROA not before: Mon 31 Jul 2023 10:30:53 +0000
ROA not after: Fri 31 Jul 2043 10:30:53 +0000
asID: 198949
IP address blocks: 41.80.0.0/15 maxlen: 24
2c0f:fe38::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 31 10:30:53 2023 GMT
Not After : Jul 31 10:30:53 2043 GMT
Subject: CN=64c78d61-4045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:ed:03:1c:c8:12:ff:96:fc:59:a6:ec:fc:
97:03:74:0a:e3:fd:55:0d:96:9d:16:24:36:eb:98:
84:07:e8:44:2d:fd:31:bb:5d:4f:5c:18:43:4c:1a:
d9:ef:d4:7e:57:4b:cd:b2:1c:b5:b2:0f:f9:7b:d6:
2b:7e:3e:e6:24:f0:76:3e:a7:c0:7d:96:da:50:c5:
61:07:2e:79:d9:27:5c:66:d1:f5:b3:22:a3:af:b6:
20:a6:67:69:2d:24:64:b7:6b:e0:57:72:a8:72:fc:
a7:5a:14:12:06:17:b7:68:01:1c:b0:5b:d5:a1:1a:
1f:13:ec:07:f5:7e:c5:c6:49:d7:d9:99:3d:6b:dc:
60:71:6e:79:03:64:37:53:b8:b6:02:5c:91:44:d5:
0a:09:e0:96:47:77:6f:12:07:ce:b0:2f:bc:79:38:
57:7e:c4:47:18:d3:66:e6:31:a7:bd:92:0a:72:99:
8a:70:a5:1b:36:99:ff:cc:ce:c0:18:66:bd:2a:07:
73:8b:43:41:d4:38:1d:f9:fc:eb:13:a3:0c:57:88:
ce:d9:8e:5e:71:65:f6:60:c1:ec:92:4a:1d:a9:90:
18:72:62:68:ae:52:be:ad:b7:5d:9d:13:01:80:2e:
63:89:ad:7e:4a:8d:e9:ce:e9:33:9b:d2:b6:c4:26:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:17:26:AE:94:65:61:DB:59:52:EC:6F:58:9E:CA:23:52:AE:56
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/5608A8742F8D11EEB951988A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.80.0.0/15
IPv6:
2c0f:fe38::/32
Signature Algorithm: sha256WithRSAEncryption
3b:44:83:e7:3e:c6:32:b9:74:7f:05:ee:45:72:33:cf:15:3f:
88:41:e5:a0:55:50:15:2c:af:96:19:b5:1f:1c:4a:3a:19:ab:
2e:00:cf:af:a4:65:74:66:6a:23:4e:1e:06:8c:89:58:9f:b0:
2e:e6:fa:de:5d:c0:4f:c7:0c:d3:02:b8:54:d1:d4:93:7f:23:
65:93:bb:d1:6d:9b:31:57:c1:be:50:bf:f4:6a:38:db:dd:bc:
57:f7:c0:9f:d2:db:86:06:af:01:89:83:da:dd:aa:fb:43:b7:
35:5f:fb:ba:6d:8b:19:d7:8b:08:e9:a3:a4:2a:b8:6c:9c:c0:
11:7e:c3:26:a6:d7:d2:e4:ca:87:e1:67:ea:bf:07:69:b8:cb:
8e:f8:28:55:e3:3d:d0:55:e2:64:1c:96:01:a6:45:8d:92:53:
67:91:1d:cb:4b:04:48:6a:50:95:96:94:24:5a:c3:fc:b3:57:
4c:59:ac:b6:53:49:79:29:91:cb:c6:32:f9:22:55:00:d2:30:
21:cd:9b:ec:5f:08:db:b5:55:82:86:d1:aa:57:83:13:29:f9:
fe:2f:d9:f8:a0:d8:13:cd:92:bf:58:37:7c:db:59:9c:51:fa:
14:6d:39:ab:22:52:38:14:0d:ee:bb:c6:66:dd:f7:32:32:7a:
37:7d:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:20 2024 by rpki-client on console-ams.rpki-client.org