Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3D18FE387E8411ECB7B3866E5A40D577.roa
File: 3D18FE387E8411ECB7B3866E5A40D577.roa (raw, json)
Hash identifier: hGrgcoiOB9LV7KES3CloBAD5cKPmYUDU2adSf4C80mc=
Subject key identifier: A9:98:68:3D:EA:FF:6A:28:8C:5F:AA:9E:2F:8E:E2:B7:28:05:44:66
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 013B
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3D18FE387E8411ECB7B3866E5A40D577.roa
Signing time: Wed 26 Jan 2022 08:44:57 +0000
ROA not before: Wed 26 Jan 2022 08:44:53 +0000
ROA not after: Mon 26 Jan 2032 08:44:53 +0000
asID: 327980
IP address blocks: 41.216.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Jan 26 08:44:53 2022 GMT
Not After : Jan 26 08:44:53 2032 GMT
Subject: CN=61f10a09-c5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:98:20:33:0e:2b:60:c8:9c:13:40:ad:47:
96:53:96:50:35:ff:45:b6:aa:d1:89:2f:d5:dc:08:
cb:12:d2:76:c1:c8:a6:41:a1:ab:a9:8e:5a:1d:fc:
d4:28:a9:bb:19:3f:b7:42:27:1a:56:02:56:ef:ce:
1c:16:f4:3d:56:ba:5d:fa:5e:fd:5f:7d:d4:f1:63:
3c:3a:03:14:dc:6d:86:da:27:3b:9f:7f:b9:15:6f:
51:47:ae:66:81:21:22:e8:e5:c6:e0:82:da:41:5e:
8e:b8:70:30:d0:7a:26:cd:6a:2d:1c:6d:d1:9c:3d:
04:7e:ff:27:6c:1e:3d:3f:c8:36:c3:f9:06:10:97:
b0:0f:67:fa:8d:b5:ed:ff:6c:60:da:8c:e6:b5:d3:
62:a6:4f:61:37:d8:fd:10:67:6a:fe:e9:32:63:1c:
9c:60:20:e2:f3:00:d2:97:f0:5e:40:48:69:f8:76:
89:14:21:a3:65:4d:47:f7:f7:90:10:93:45:cc:91:
8a:ae:60:d1:f6:26:bf:c8:51:53:b5:74:42:b9:40:
12:a7:7e:af:ce:8a:fd:56:a5:24:d9:28:8f:e1:a1:
ab:cf:ca:aa:c9:95:2f:8b:2d:9d:30:f2:e8:3e:ee:
3b:bd:85:ca:42:be:8f:ee:a4:19:b1:a6:99:20:7b:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:68:3D:EA:FF:6A:28:8C:5F:AA:9E:2F:8E:E2:B7:28:05:44:66
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3D18FE387E8411ECB7B3866E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.176.0/24
Signature Algorithm: sha256WithRSAEncryption
68:bc:a9:1b:66:96:08:7d:53:45:2e:dc:83:e8:10:9f:18:6f:
4e:01:75:54:15:a9:88:76:5e:f1:0d:62:5d:cc:92:c2:52:0d:
5d:99:57:fd:3b:d3:d6:4c:67:a2:3e:b1:8f:28:6a:a3:8b:ed:
bc:49:22:ae:a9:de:c6:46:04:95:21:a5:13:e1:57:ac:b5:6f:
89:1c:4d:df:e3:91:ec:79:bb:42:1f:c9:50:52:15:43:8f:8e:
f9:47:be:09:d2:68:d5:3b:b2:3b:50:45:a4:56:22:a7:96:67:
c0:82:2d:f9:a0:05:af:15:5a:9a:22:c4:73:00:19:62:3e:4f:
ab:32:29:18:53:11:5b:fa:89:7b:be:e6:8b:6d:c2:84:39:4d:
5d:49:4c:76:c3:12:80:a1:be:5f:92:3d:aa:37:03:87:ab:61:
fa:7c:3e:31:68:31:e9:29:07:e1:c4:53:62:16:93:83:c7:e8:
df:e9:9b:40:c2:a3:2a:d6:8c:10:74:d6:5a:48:f1:25:da:d6:
26:78:03:0d:b8:8d:b5:67:ca:c4:f2:02:ad:00:52:80:f5:dc:
2f:6e:95:3e:8e:be:06:27:b7:ea:a1:92:5d:7d:4b:e5:34:12:
23:eb:24:21:39:e6:da:e4:b8:9d:61:5d:3f:39:de:f3:02:b3:
5d:a0:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org