Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/90EE2C2EB90F11ED9409C1BBF1222468.roa
File: 90EE2C2EB90F11ED9409C1BBF1222468.roa (raw, json)
Hash identifier: bLZoCDQRzljU6a7QZaQ/7m8zC+sEgUgzOUOZvGfwhno=
Subject key identifier: 26:7B:9C:C8:04:A5:F8:25:B0:5C:FD:62:C8:56:5F:82:86:98:9D:36
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 2D
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/90EE2C2EB90F11ED9409C1BBF1222468.roa
Signing time: Thu 02 Mar 2023 15:33:23 +0000
ROA not before: Thu 02 Mar 2023 15:33:19 +0000
ROA not after: Mon 02 Mar 2026 15:33:19 +0000
asID: 29286
IP address blocks: 41.218.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 15:33:19 2023 GMT
Not After : Mar 2 15:33:19 2026 GMT
Subject: CN=6400c1c2-ec72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:a3:3d:1c:83:c8:db:42:55:47:14:00:19:
c6:9f:54:c2:ac:54:fc:96:73:6b:b9:b5:03:d9:93:
86:b8:b3:29:5f:38:77:ee:39:9f:77:d9:cb:d1:db:
3a:02:7c:46:d9:5e:7d:7c:e4:33:87:fd:74:fa:91:
21:56:f0:66:c0:0d:9f:25:f9:8d:a5:59:b8:f8:f3:
4c:e0:a9:ea:57:02:65:90:fc:32:85:90:4c:be:be:
f9:04:41:4e:cf:f6:a5:4a:24:9f:20:b9:b2:92:e0:
7e:4e:dd:80:9d:11:36:38:a0:bc:16:10:04:98:23:
af:6f:ba:c4:46:a8:c5:c9:9c:da:3f:3f:62:c8:98:
99:21:fb:cf:d6:40:79:cb:c1:3e:38:82:8d:f1:eb:
5b:18:82:db:6d:b0:86:08:45:37:fb:58:26:0f:39:
81:04:65:41:a0:df:bb:d7:52:c4:e8:cb:43:cb:02:
c5:c4:85:41:18:14:08:a8:f3:91:c9:1b:b5:3c:73:
e4:dc:b7:8a:aa:63:ba:e5:39:21:8d:dc:07:29:c4:
d3:1e:2d:e5:b4:a2:48:40:9d:5c:f3:81:d0:85:f3:
95:cb:cd:79:ab:f0:ba:7d:1c:8a:c7:56:6d:57:c1:
aa:2c:a7:9d:6f:38:86:0e:a4:5e:30:87:10:bb:6c:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7B:9C:C8:04:A5:F8:25:B0:5C:FD:62:C8:56:5F:82:86:98:9D:36
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/90EE2C2EB90F11ED9409C1BBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.218.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:dd:b0:ce:4d:9b:7d:76:e0:0c:ed:61:13:1c:6e:6b:9e:b4:
22:ab:76:0e:89:69:7d:c5:bc:bb:16:d2:c1:15:53:f9:62:50:
9b:6e:a5:b5:df:9a:0f:6b:f6:bd:26:ca:0d:01:09:bd:84:03:
a8:06:e1:8f:c2:b4:da:2e:20:9c:ff:68:a7:2f:c9:59:05:16:
56:83:dd:1f:36:7a:ec:39:d9:cd:77:48:fd:9f:93:aa:94:46:
76:d7:05:d8:a2:f4:e4:b1:62:6b:1a:ed:d8:b6:c3:63:f8:cd:
29:26:0f:11:45:78:99:36:fa:4b:94:ce:3f:96:ee:88:c1:5a:
7f:e9:c5:0b:e1:7b:3c:f6:a3:e0:7d:d7:09:96:62:12:be:53:
18:a5:8c:61:4a:88:54:e6:ec:76:11:aa:0a:5d:0a:1c:ab:b1:
ba:be:1d:4c:be:b0:78:2c:4d:58:2f:09:91:99:fb:f7:a1:2d:
e0:67:b9:0b:87:41:a7:3f:3d:61:86:bf:f3:74:64:31:e0:a3:
28:90:ee:2e:25:47:62:dc:e0:3c:ff:8a:a0:02:b4:71:c2:60:
75:31:20:c7:14:dd:8e:ce:88:b0:7f:83:23:dd:47:c3:8f:80:
b9:e0:20:b1:85:a9:b6:b4:16:3f:cb:a0:f8:f0:9e:6d:64:90:
de:a1:f6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org