Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/0EFFADE0C7D511ECAF071E8FF1222468.roa
File: 0EFFADE0C7D511ECAF071E8FF1222468.roa (raw, json)
Hash identifier: gcN0BJK1zxY9VlRgQV0UPi1kcMQDj2ZpcoRelVbiDRE=
Subject key identifier: 09:50:70:61:80:C7:A4:B5:42:60:91:E1:BA:F3:40:84:7B:65:4C:F4
Certificate issuer: /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial: 05
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/0EFFADE0C7D511ECAF071E8FF1222468.roa
Signing time: Fri 29 Apr 2022 15:57:23 +0000
ROA not before: Fri 29 Apr 2022 15:57:20 +0000
ROA not after: Mon 22 Apr 2024 15:57:20 +0000
asID: 37584
IP address blocks: 41.222.72.0/22 maxlen: 22
41.222.72.0/24 maxlen: 24
41.222.73.0/24 maxlen: 24
41.222.74.0/24 maxlen: 24
41.222.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 15:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Validity
Not Before: Apr 29 15:57:20 2022 GMT
Not After : Apr 22 15:57:20 2024 GMT
Subject: CN=626c0ae3-451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:b8:80:99:6e:cb:b0:d5:51:55:cc:43:1f:
4c:fa:99:29:89:ca:44:e1:05:99:ef:34:43:3d:60:
e5:6b:8a:0e:86:54:49:28:9a:eb:1d:12:9c:b6:5c:
46:29:ed:b3:06:b8:da:bb:2c:a4:2a:6b:57:f6:13:
0d:d0:6a:c4:05:ee:a7:bd:9f:fe:3f:bf:8f:94:2e:
1a:80:37:8a:bb:6d:38:3c:08:e9:34:4d:5c:92:d5:
46:a5:a8:df:e4:37:ce:af:2a:f6:fc:9f:0c:1a:ff:
cf:0e:51:38:e8:8e:df:29:4c:96:3a:3b:e8:10:3f:
65:01:b8:eb:ea:48:17:6d:90:15:ad:af:0f:0e:a6:
b7:38:b1:c2:b1:8e:9f:0b:d4:f3:44:f6:3d:c7:ef:
f8:07:3c:e4:50:2b:ff:1b:e3:c5:d3:c1:bc:fa:46:
05:47:cb:a0:cb:35:0d:e8:bf:d7:6e:85:02:99:fb:
82:3d:61:8d:9e:49:e8:38:87:19:0d:9c:69:0a:6e:
a4:2d:80:34:fd:5f:6e:68:2a:c5:82:ac:35:db:42:
44:8b:d0:29:04:1b:1e:2c:80:4e:0f:19:02:7d:21:
b6:c0:a6:9b:da:9e:7b:66:f6:aa:1f:97:8c:e5:b4:
89:37:1a:ab:96:52:10:0d:be:15:54:b1:40:00:3c:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:50:70:61:80:C7:A4:B5:42:60:91:E1:BA:F3:40:84:7B:65:4C:F4
X509v3 Authority Key Identifier:
keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/0EFFADE0C7D511ECAF071E8FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.72.0/22
Signature Algorithm: sha256WithRSAEncryption
77:f5:bb:00:9a:83:59:5c:dc:57:7e:5a:3a:40:85:af:f8:c8:
fb:a9:c8:60:71:7e:5a:89:45:ab:d5:1e:e0:7a:6c:9f:d0:2d:
7a:d3:1d:fb:ce:25:ef:71:18:0e:02:d1:5d:ec:ec:2b:28:11:
86:f7:c2:45:7d:b9:a9:7d:4f:68:81:87:6b:3d:68:8c:96:d9:
6d:ef:19:81:fb:be:b7:a3:dd:30:27:02:71:4f:e7:03:87:44:
45:7e:ad:ed:9f:f3:9d:b0:2d:97:14:b0:46:05:d2:13:95:5b:
23:95:55:8c:96:17:4b:68:8a:64:82:b7:5e:50:43:0f:6c:6f:
6c:b8:05:9b:8f:8f:0f:a3:e8:2d:87:c4:ca:db:e9:85:2e:fa:
fe:41:a3:5a:8f:99:5d:20:fc:20:b6:40:c5:4e:60:64:e0:58:
ca:b5:56:2d:89:b7:51:a9:d6:69:49:bf:d5:9a:89:d0:89:44:
fa:dd:41:ab:83:bc:06:ef:b8:26:11:28:e1:4c:0a:a7:62:8f:
09:76:25:fe:6d:f4:c7:e2:db:a2:86:07:46:e0:c5:e5:4f:90:
fd:b1:d4:7f:8b:70:35:db:0b:56:7f:f3:db:39:77:f5:b9:d1:
48:96:b8:b9:9a:87:e7:33:20:09:49:c9:0f:9b:dd:3a:78:ad:
48:76:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:09 2024 by rpki-client on console-ams.rpki-client.org