Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/00CC3D1C077F11ED89D4E8F2F1222468.roa
File: 00CC3D1C077F11ED89D4E8F2F1222468.roa (raw, json)
Hash identifier: Ghq8RdR4suhFXBx4OUYvhd9Ebd2glLwbENeMBdryUJ0=
Subject key identifier: D3:EE:47:5C:6B:3E:5A:7A:04:4A:37:5E:18:72:37:05:9C:1E:4D:EC
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 0224
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/00CC3D1C077F11ED89D4E8F2F1222468.roa
Signing time: Tue 19 Jul 2022 16:22:37 +0000
ROA not before: Tue 19 Jul 2022 16:22:33 +0000
ROA not after: Mon 19 Jul 2032 16:22:33 +0000
asID: 211138
IP address blocks: 41.216.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Jul 19 16:22:33 2022 GMT
Not After : Jul 19 16:22:33 2032 GMT
Subject: CN=62d6da4d-d860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:6e:c5:6a:dc:40:f3:ae:ee:7f:39:61:79:
33:fb:f6:19:05:f2:70:31:9e:74:7a:6d:98:66:91:
d0:0b:86:d4:48:27:92:6a:da:86:88:0c:7b:08:87:
80:8b:d2:c6:30:ad:f0:15:68:f0:1e:a3:a4:23:4e:
12:d3:29:c3:f4:8d:7a:fe:06:2e:c2:ff:c8:5b:ee:
00:22:fc:6e:e0:db:2e:6d:c3:f0:9c:c6:ce:1f:72:
c9:fe:de:71:45:b7:f1:f1:41:d9:17:e0:e9:1e:1c:
cc:63:87:de:6b:a3:88:a8:c2:0c:af:ad:32:67:8b:
05:8d:91:a4:38:c9:26:7f:a0:2d:1d:4c:ed:99:41:
c3:e3:45:16:f2:f3:66:b3:af:66:d6:19:0e:8e:ec:
39:00:2b:2c:8f:a7:5b:52:dc:51:4d:ed:bf:aa:48:
eb:6c:b6:b2:81:bc:67:73:b7:29:33:cf:2c:f6:c0:
ac:b0:e1:ca:61:8a:00:00:56:fc:14:c6:79:be:37:
80:30:66:53:0d:a1:cd:cf:4e:a9:9b:99:a8:fb:d5:
79:36:04:5d:39:ff:d8:05:0e:d3:ec:bf:5b:bb:24:
74:5c:ff:54:2f:ee:df:ea:99:50:fa:09:81:07:34:
1e:28:35:ac:62:c6:86:45:8c:60:8e:cd:de:e5:be:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EE:47:5C:6B:3E:5A:7A:04:4A:37:5E:18:72:37:05:9C:1E:4D:EC
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/00CC3D1C077F11ED89D4E8F2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6a:d2:0c:ec:88:82:27:67:97:e5:81:2e:70:cc:70:c9:5e:
2f:ad:70:cc:46:52:1a:1a:03:f1:0c:0b:5a:32:dd:9f:ec:33:
15:60:05:3f:89:b2:3a:6f:1a:7f:df:de:13:ba:b6:43:c8:ce:
26:33:de:8d:96:e9:1c:a2:12:49:02:89:bc:3b:f5:97:6e:99:
53:fc:bb:89:a6:61:9a:87:db:67:c7:05:dc:f1:c0:59:2b:d7:
0c:07:35:1f:1c:2d:a1:6a:ac:6e:52:cd:e6:4a:66:0d:4e:f6:
ad:7d:20:b3:b5:1c:14:a6:de:9e:c3:6d:7a:6a:b5:dd:84:e4:
62:fc:cf:09:1b:f5:d5:57:b3:1d:6b:61:ae:f2:9a:fd:8e:4d:
a0:f0:8a:06:87:0d:ff:35:f6:37:14:57:50:65:91:43:3a:a5:
5d:e9:b6:2a:56:73:98:1a:76:9d:da:67:a8:14:bb:d1:e8:4c:
fa:d1:27:0c:98:66:5f:bd:65:db:f6:86:cd:5e:39:32:c4:1b:
8d:f8:80:77:a4:14:06:82:9b:a6:13:ba:28:15:d9:34:d5:6b:
db:b5:df:66:b0:8b:4a:d5:46:4e:ad:44:03:e7:20:cc:3c:b7:
a1:7e:73:ba:ba:5c:ac:78:7a:7b:3e:6a:74:52:27:53:be:5e:
7c:98:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org