Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0F563E8424D211EE8E5C42444AD9E6FC.roa
File: 0F563E8424D211EE8E5C42444AD9E6FC.roa (raw, json)
Hash identifier: hrncCFNeFvYR3vquRxFE7njVcF7Y/kBd3xhz0r8m7OU=
Subject key identifier: AB:EE:74:0F:26:08:6C:8A:4C:45:85:86:AB:3D:35:21:A0:A2:31:B0
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 03AF
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0F563E8424D211EE8E5C42444AD9E6FC.roa
Signing time: Mon 17 Jul 2023 18:45:11 +0000
ROA not before: Mon 17 Jul 2023 18:45:07 +0000
ROA not after: Sun 17 Jul 2033 18:45:07 +0000
asID: 211407
IP address blocks: 41.216.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Jul 17 18:45:07 2023 GMT
Not After : Jul 17 18:45:07 2033 GMT
Subject: CN=64b58c37-30ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:a5:b1:69:db:3a:69:92:12:f2:52:d1:5e:
f0:26:88:bf:44:ec:7a:0d:64:37:b8:fa:2b:15:31:
a6:58:dd:48:b4:c8:9a:a2:07:ab:3d:9d:7d:6d:fb:
f6:03:cd:8c:88:e6:8a:27:1e:3d:8d:82:62:cb:c0:
3f:5f:7d:d0:3c:be:8b:c5:65:52:77:7c:d0:88:80:
3d:b0:d6:31:40:a1:c9:df:5c:de:17:11:65:5e:0d:
8a:dd:1b:8b:e7:cb:51:fd:8e:42:7e:db:58:41:8d:
33:a2:92:a4:30:cd:c9:07:c5:86:e5:4c:21:3e:83:
c7:ae:1e:fd:ee:57:12:d0:1c:55:c6:a0:85:1b:45:
5f:7c:08:62:33:89:dc:80:0a:66:c6:8f:b5:ff:02:
4c:c4:17:15:9d:0e:0c:8f:4e:86:47:b1:89:64:a0:
e5:df:43:93:ad:61:68:e6:60:0d:38:9a:fb:d5:fc:
3c:94:06:9e:78:5f:19:16:f2:ab:ad:fc:53:80:59:
05:1f:60:c4:9c:06:a6:36:6d:d4:b0:f6:e9:67:f1:
a4:60:74:54:94:f7:67:58:84:0c:11:06:ed:ef:15:
4a:15:37:fd:fd:33:7b:6e:a8:65:19:39:f1:d4:6c:
93:4f:6b:10:92:54:d3:47:fb:29:49:db:81:4b:b9:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EE:74:0F:26:08:6C:8A:4C:45:85:86:AB:3D:35:21:A0:A2:31:B0
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0F563E8424D211EE8E5C42444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
70:18:d5:eb:a0:ba:2c:11:31:f2:90:de:97:3e:84:17:b9:fc:
65:34:9d:63:f0:c3:58:ca:6f:d3:fa:3c:43:fa:7b:03:13:14:
e0:ca:c2:47:b5:a7:15:ed:d5:99:3a:08:6b:b4:c1:e9:a6:86:
62:df:44:53:ee:0b:26:42:ae:8d:b6:46:10:b5:c9:28:a5:bf:
98:22:fd:ac:dc:fa:36:17:3d:ea:19:83:b0:81:d2:5f:71:bb:
53:69:e8:bc:5e:7c:c5:c6:be:ec:c9:37:c4:e2:38:78:c5:07:
e7:b2:dc:4c:ba:de:b1:2a:3e:2e:e3:89:66:68:f6:fd:b9:52:
e0:14:a4:4e:3a:df:16:5b:9e:ca:d7:a1:6a:4d:77:d9:24:25:
38:70:a8:19:be:d5:6e:58:7f:6e:e1:c3:6f:f7:f9:15:8f:9b:
6a:d3:db:29:df:e0:49:43:61:af:7e:ea:d1:16:15:02:7a:b9:
6b:a4:eb:cd:16:28:cd:a4:6b:39:a6:f5:0b:7b:35:2f:a2:0b:
f4:2b:08:d5:7b:48:b7:b4:4f:fa:cb:c4:8f:bd:62:12:28:64:
bd:26:f6:09:c6:17:f4:e2:3a:be:73:be:a4:ae:24:dd:27:dd:
b3:d5:38:f6:50:2c:79:b3:b5:25:23:ed:4b:34:6f:8f:8e:86:
db:e9:c7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org