Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/7DE1A76EAB0211EAAA00EB1EF8AEA228.roa
File: 7DE1A76EAB0211EAAA00EB1EF8AEA228.roa (raw, json)
Hash identifier: UgPlrfbrOUaa0Rure5sbCm3BbNQUJaDxeb/7KDVdWw8=
Subject key identifier: 51:97:08:4B:E9:67:3D:AD:AE:31:21:9B:2E:37:AD:B6:7A:3A:3E:17
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 22
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/7DE1A76EAB0211EAAA00EB1EF8AEA228.roa
Signing time: Wed 10 Jun 2020 10:09:38 +0000
ROA not before: Wed 10 Jun 2020 10:09:33 +0000
ROA not after: Tue 31 Dec 2030 10:09:33 +0000
asID: 37061
IP address blocks: 41.139.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jun 10 10:09:33 2020 GMT
Not After : Dec 31 10:09:33 2030 GMT
Subject: CN=5ee0b162-949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:3d:e9:f4:7b:ab:b7:ca:16:54:f6:3f:f4:
3c:2b:d2:af:88:d3:e6:4e:c6:11:9b:57:06:2b:e8:
26:2e:9d:83:01:ce:a7:68:f1:ec:53:00:a5:b3:7c:
df:cb:b6:c6:8c:6b:75:fc:77:ab:8a:5f:35:3f:a0:
2e:34:79:d9:8b:4b:f2:36:e2:77:df:7c:5b:aa:90:
63:5a:9f:51:f5:4f:7f:2c:09:9c:99:46:cc:65:84:
57:df:a8:21:4e:e0:c7:e0:63:01:8b:b7:ca:e4:ca:
fa:bc:1a:16:8c:8a:b5:ca:37:17:d1:15:fb:aa:e7:
97:cf:b0:8d:10:3c:a9:a4:ce:fb:d6:6c:09:37:a3:
a5:e1:b2:23:8b:47:03:51:d2:48:7a:f2:89:c6:59:
09:19:e9:19:d8:d5:78:f6:22:6b:68:72:b9:90:24:
a3:6e:1f:f4:77:3f:2a:73:dc:92:bf:01:9d:99:6d:
f3:0f:b5:7c:58:c2:5b:47:40:a9:5c:bc:05:f4:a0:
c4:35:c1:0e:aa:bf:09:8c:b1:cb:24:3c:98:36:97:
91:ed:95:3c:a5:b5:dc:b1:e4:f2:94:4e:c5:b7:dd:
0c:db:2f:d9:ce:bf:00:9a:e5:c3:ab:26:57:28:0f:
d8:9f:22:8a:f4:96:a0:71:f3:e3:22:84:99:87:18:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:08:4B:E9:67:3D:AD:AE:31:21:9B:2E:37:AD:B6:7A:3A:3E:17
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/7DE1A76EAB0211EAAA00EB1EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.139.128.0/17
Signature Algorithm: sha256WithRSAEncryption
29:68:b1:37:bf:21:8c:c8:db:13:0e:9b:d3:2e:48:c9:fa:7c:
4b:b9:e5:2d:15:e3:04:a6:0c:96:c3:01:97:66:22:02:60:19:
16:a6:1c:2f:d9:71:be:75:04:a1:8b:d1:6e:f0:4e:0c:69:40:
72:ee:9f:c2:87:15:4c:3e:8b:70:d7:70:84:56:a3:79:01:2c:
ae:ba:fc:e5:4a:6e:89:87:3e:b4:41:ff:43:69:6d:2f:a4:e0:
00:6e:12:e6:77:37:f7:d5:f8:e7:ba:34:2d:84:2d:97:52:46:
99:10:77:11:80:d2:8e:24:f5:b4:6d:5e:f6:49:2f:d6:ba:c6:
f7:d0:ec:46:3b:07:fc:07:fb:77:a1:6d:dc:4e:bd:92:23:90:
d4:dc:5d:c0:0d:25:f5:c1:d7:69:0a:b3:6b:8f:9b:d7:c0:87:
89:a7:06:83:91:1f:2a:fe:18:be:6a:91:4f:db:e6:4f:8a:61:
2c:b6:94:37:f2:ea:ef:19:0a:66:29:52:a3:05:7f:5e:77:5c:
d0:f4:ca:05:72:3f:8d:0a:91:c4:50:52:bf:52:96:c2:37:e8:
47:bb:bb:e9:55:6a:3d:b4:1c:8e:3e:3e:a2:fc:b6:18:e3:6b:
05:fe:dd:09:ce:ec:a3:c8:3c:fc:9e:69:14:e4:01:69:ed:50:
92:e4:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:11 2024 by rpki-client on console-fra.rpki-client.org