Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/C10CD8A62EED11EFBB91475E762E951A.roa
File: C10CD8A62EED11EFBB91475E762E951A.roa (raw, json)
Hash identifier: +GopixwYFgxwApDEisDd+3N08mZ9XQbjdM+uCxLPgTY=
Subject key identifier: 82:A2:76:B7:CC:ED:C3:AE:4B:5C:6C:66:3B:6A:BE:49:BB:BA:0B:46
Certificate issuer: /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial: 02
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/C10CD8A62EED11EFBB91475E762E951A.roa
Signing time: Thu 20 Jun 2024 10:13:35 +0000
ROA not before: Thu 20 Jun 2024 10:13:32 +0000
ROA not after: Tue 23 Jun 2026 10:13:32 +0000
asID: 198247
IP address blocks: 41.188.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Validity
Not Before: Jun 20 10:13:32 2024 GMT
Not After : Jun 23 10:13:32 2026 GMT
Subject: CN=667400cf-1f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:91:61:ec:e8:35:a1:88:87:32:89:49:10:
b2:0f:a3:f7:ce:9b:0a:08:03:3c:3a:40:12:a8:4a:
db:7a:10:79:ad:4e:7b:f7:79:0e:23:57:9f:42:27:
97:63:ee:0e:8c:47:7d:3d:7d:81:c7:1c:4d:a9:10:
f0:38:9f:b1:10:ba:c3:06:9b:9b:a6:53:66:00:33:
fd:b7:fe:ea:10:00:ff:bf:dd:39:d5:4d:35:97:a9:
eb:8a:4e:03:aa:a3:04:e7:17:82:2e:9c:f6:84:7d:
66:26:fe:99:33:23:a4:06:32:12:60:12:50:ba:53:
ac:b4:77:54:3f:d7:41:40:27:ad:48:5e:f5:4d:de:
0d:f5:54:2e:f3:91:e0:84:87:41:0d:fe:96:c4:48:
a9:9e:29:f3:b1:e9:bb:74:c8:0d:51:c3:51:61:97:
14:9c:6d:c6:9c:8e:73:a9:18:76:5b:f1:89:c9:c5:
b6:a1:1d:ad:8e:0c:10:cf:cf:b5:3a:71:11:6d:8b:
3d:5f:01:47:77:7d:2f:75:2a:5b:4a:90:c5:30:e8:
c6:1b:b9:3b:e8:0a:6e:38:fd:31:b6:74:49:69:1c:
3e:8d:b4:70:9a:e5:d0:11:4a:9e:c3:c6:f2:a0:19:
b3:3e:49:b4:4c:4b:c3:5b:5a:f1:64:fb:4b:3e:6c:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:76:B7:CC:ED:C3:AE:4B:5C:6C:66:3B:6A:BE:49:BB:BA:0B:46
X509v3 Authority Key Identifier:
keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/C10CD8A62EED11EFBB91475E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.188.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:dd:97:75:f4:4a:51:13:49:d7:73:30:40:dc:60:12:23:84:
30:ef:b5:79:31:c6:13:91:30:79:37:ee:fe:66:88:d8:4e:0e:
89:83:66:8a:27:5f:b2:4b:70:9c:3c:6f:76:36:1e:dd:7f:43:
3a:8f:e2:aa:d9:df:63:cc:25:71:c3:e5:38:68:73:95:55:3a:
4b:c5:e4:53:2b:ef:38:78:dc:be:e7:34:51:76:fc:a8:16:36:
b3:ad:3c:cd:1f:bb:62:0f:86:4c:f7:f0:df:e0:b7:7d:21:bf:
10:3d:2e:e2:ea:3e:94:1d:c6:7b:3c:ca:33:8e:11:69:44:c8:
5f:ca:c1:a4:91:32:3e:4a:d7:ae:f2:b2:69:13:b4:23:dc:18:
4d:85:58:7d:f0:81:fb:2f:3f:01:e6:e6:33:02:a4:42:ff:60:
3f:d2:27:1b:53:ea:a3:69:3e:d5:c7:30:a4:ae:17:98:45:f2:
a1:4d:be:d0:f7:35:7b:85:14:af:50:e2:51:93:0d:90:2a:dd:
a5:8d:b8:5f:68:18:c5:1c:ef:17:28:92:df:b4:02:12:87:f5:
28:91:c1:68:73:87:2b:34:2f:1c:d2:3b:c3:59:ff:2f:8f:d3:
6f:a7:fc:cb:9e:89:d1:6a:17:ea:5c:bd:8a:57:6c:9d:8b:fd:
64:d6:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org