Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1FC37E0C58DD11EC90249AD05A40D577.roa
File: 1FC37E0C58DD11EC90249AD05A40D577.roa (raw, json)
Hash identifier: xMFtJZhm8L5JCVIG+3J/M2SkxXwG+7iXieRnX4vo4bo=
Subject key identifier: 7B:F6:0F:98:60:34:46:5F:50:6C:8F:1D:CB:ED:3A:29:67:66:D8:D4
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: FE
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1FC37E0C58DD11EC90249AD05A40D577.roa
Signing time: Thu 09 Dec 2021 10:45:29 +0000
ROA not before: Thu 09 Dec 2021 10:45:24 +0000
ROA not after: Tue 09 Dec 2031 10:45:24 +0000
asID: 327980
IP address blocks: 41.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Dec 9 10:45:24 2021 GMT
Not After : Dec 9 10:45:24 2031 GMT
Subject: CN=61b1de48-ee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:84:f6:27:c7:f7:20:67:e1:38:b9:b2:68:
0c:8f:04:15:03:54:24:4b:4e:59:32:7b:88:11:46:
0d:36:b8:93:31:8e:a8:39:c1:5a:c3:34:bd:c1:f3:
9f:64:96:6a:08:0b:08:cd:32:e1:30:6c:fc:c6:65:
10:d1:ed:03:f1:43:c1:45:a9:2f:6d:4d:a5:87:b9:
25:14:ed:e7:1e:3f:96:ce:39:ae:f1:50:b8:bb:5b:
e0:4d:c3:57:6f:af:1a:de:80:8a:f3:fe:0f:b3:52:
c5:ab:a4:ad:14:c8:70:84:82:f5:16:c4:eb:1e:f7:
5c:b5:92:5e:11:4b:0e:8f:f4:2e:e7:d4:6d:a5:b6:
05:cd:6a:84:ff:60:15:26:86:b1:b4:ab:4c:73:2f:
a0:5e:35:ce:88:84:d8:a5:48:6f:85:98:60:6f:85:
73:88:e8:f9:63:96:91:a2:c0:00:57:a3:f5:10:9b:
2d:01:cc:80:17:6c:8c:25:b7:53:11:58:56:99:7b:
a9:db:5d:8c:e0:6a:68:60:d0:61:e7:e0:ca:9a:06:
0c:36:41:16:92:6f:0d:52:9a:2f:82:02:d4:45:81:
16:de:69:6c:eb:47:11:00:06:07:64:ac:d6:29:b3:
bb:59:ea:54:55:31:e2:17:c4:95:16:c4:15:b1:96:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:0F:98:60:34:46:5F:50:6C:8F:1D:CB:ED:3A:29:67:66:D8:D4
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1FC37E0C58DD11EC90249AD05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2a:c4:68:29:63:c4:82:5f:a6:3c:8f:9d:61:a5:4f:10:ca:
a7:ee:4b:d8:2b:74:38:07:22:37:8f:38:1e:67:54:03:87:c5:
ea:aa:ca:6b:b8:88:2a:c9:76:c8:67:d3:c7:ad:4d:ec:46:35:
86:7e:89:d9:99:d5:3b:5a:08:77:40:55:81:47:c5:2b:a7:7d:
de:7c:80:fa:61:07:4e:ec:4e:71:c7:3f:7e:5b:a1:42:f2:69:
c4:31:bf:81:28:15:25:72:ba:8a:aa:fe:13:d5:90:41:dd:bd:
82:a8:cb:7c:c0:5a:f3:fb:7b:91:e2:a9:98:96:64:c8:71:bf:
63:bc:fa:bf:91:3e:47:bc:a7:15:5e:df:d9:bf:f5:be:17:4c:
c5:4f:8d:61:f1:2b:a8:70:a7:dc:9f:e4:4f:dc:0f:99:bc:33:
91:70:19:a7:e0:e0:b7:28:64:4a:de:5d:9e:7d:6d:c0:c8:64:
0c:d2:2a:2e:fb:c1:7e:aa:de:76:33:0a:ca:62:45:15:c6:fa:
20:75:93:51:89:21:06:43:8c:92:fd:76:49:4c:60:62:ba:b6:
3f:42:20:d5:6a:25:84:03:67:17:d3:34:b7:ee:05:26:2c:78:
e3:fe:ca:2d:1a:49:ed:96:f6:25:5e:51:5f:ab:1a:d3:2e:b5:
26:c5:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org