Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/1FE2B490676B11EE89F68D6C4AD9E6FC.roa
File: 1FE2B490676B11EE89F68D6C4AD9E6FC.roa (raw, json)
Hash identifier: VkyUxkKXn7LwkNtssSbTSgdVTqQDeGhmPVIGCEo/UYw=
Subject key identifier: B5:4C:98:3E:79:55:85:94:E7:CF:7A:EB:68:93:90:ED:D0:86:BC:5E
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: EB
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/1FE2B490676B11EE89F68D6C4AD9E6FC.roa
Signing time: Tue 10 Oct 2023 12:47:09 +0000
ROA not before: Tue 10 Oct 2023 12:47:05 +0000
ROA not after: Fri 10 Oct 2025 12:47:05 +0000
asID: 15964
IP address blocks: 41.204.64.0/19 maxlen: 19
41.204.64.0/24 maxlen: 24
41.204.71.0/24 maxlen: 24
41.204.83.0/24 maxlen: 24
41.204.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 10 12:47:05 2023 GMT
Not After : Oct 10 12:47:05 2025 GMT
Subject: CN=652547cd-a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:8d:e2:c8:fb:58:bb:c9:11:60:0c:2b:87:
7b:05:a4:14:e6:2a:01:fa:72:9c:a4:72:d4:49:49:
4e:17:a3:70:5a:75:d9:3a:b1:62:8d:03:2a:83:59:
48:79:45:55:7a:dc:bd:e7:a0:30:43:15:86:bf:ef:
91:df:a0:99:fa:12:0b:e2:d8:7f:ef:64:0a:c1:03:
1e:10:42:ac:39:dd:da:73:a7:28:17:a2:6e:9e:a2:
70:76:87:93:22:fd:6b:cf:55:5d:93:78:d8:29:5b:
0a:87:76:98:27:08:a2:ce:89:1e:fb:41:af:e1:8f:
7c:c5:b8:80:41:68:e7:87:f6:f6:86:1b:83:0c:11:
b5:36:52:cd:39:93:9a:1b:3b:3f:6f:04:4a:5f:2b:
a4:e0:d2:c9:98:3f:5e:9b:0d:1b:df:62:02:ff:35:
89:bf:b1:4e:04:35:a5:05:ca:70:fa:a8:70:4e:c7:
67:dd:8b:ce:25:23:fb:ca:52:a8:12:22:1e:37:0b:
ee:29:93:83:60:13:05:56:c2:89:4f:bb:df:55:8f:
1a:3d:c6:62:68:1c:b4:79:63:68:b5:ee:13:e4:5b:
c4:77:d3:ea:ce:a4:5d:2a:14:75:62:29:69:bf:c3:
d3:a0:62:96:81:a7:dd:bd:c2:86:76:e3:a9:be:5a:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:98:3E:79:55:85:94:E7:CF:7A:EB:68:93:90:ED:D0:86:BC:5E
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/1FE2B490676B11EE89F68D6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.64.0/19
Signature Algorithm: sha256WithRSAEncryption
77:78:b4:ef:0a:23:9a:7d:4a:83:cb:49:7e:8a:09:5e:fc:7f:
21:01:81:9f:24:fa:bb:74:ce:2e:4a:ed:dc:e1:97:b9:07:71:
81:09:46:b9:a3:8e:70:fa:7e:b0:df:f6:41:a1:5b:bb:61:ff:
fd:ac:20:7f:c8:19:56:74:93:1d:b7:e5:37:fe:97:78:5e:3b:
aa:fa:23:a6:1e:c6:df:17:da:06:be:58:4a:b5:e5:62:0a:f2:
7f:02:db:0b:81:79:d4:b0:c9:1a:9a:f3:61:cf:56:69:fb:f8:
6c:74:18:7f:27:61:38:df:b9:82:65:0e:00:0c:0b:6a:57:55:
34:23:e4:22:1c:6a:30:9f:66:b7:d0:04:1c:d2:f4:c9:f6:ca:
f6:4f:58:49:c1:38:47:0b:3f:94:1b:b3:4f:06:9e:f0:89:7b:
b6:5c:d7:c7:51:dc:1a:bd:de:0a:b3:f1:f7:ee:63:6e:ff:c3:
35:32:f0:15:63:e5:b4:05:58:3c:bc:02:56:bb:8b:0b:77:c6:
c9:c4:3f:7b:ca:fa:d5:06:ec:fb:2a:3e:4f:d7:36:52:aa:65:
16:ce:8b:ba:a0:4a:a4:10:64:13:06:9e:02:6f:4e:38:87:a0:
c1:77:21:4b:be:d9:28:89:27:45:97:3b:c9:6e:6c:04:3e:9d:
24:54:bb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:24:09 2024 by rpki-client on console-fra.rpki-client.org