Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/88A296F47E8C11EC97193C875A40D577.roa
File: 88A296F47E8C11EC97193C875A40D577.roa (raw, json)
Hash identifier: w22PCrdXZIup/+0fpDZXGuYyZYbUmWdZWKf5L+DrKXw=
Subject key identifier: A8:E8:5C:4D:D4:37:1D:33:C4:CC:7B:E6:DD:64:BB:36:21:41:0A:C9
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 0157
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/88A296F47E8C11EC97193C875A40D577.roa
Signing time: Wed 26 Jan 2022 09:44:19 +0000
ROA not before: Wed 26 Jan 2022 09:44:15 +0000
ROA not after: Mon 26 Jan 2032 09:44:15 +0000
asID: 136175
IP address blocks: 41.216.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Jan 26 09:44:15 2022 GMT
Not After : Jan 26 09:44:15 2032 GMT
Subject: CN=61f117f3-7b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:66:f2:27:b1:9e:9c:4e:94:52:c5:08:52:
5e:d4:70:3c:a3:87:50:83:66:4d:22:d6:e2:0e:66:
cd:8e:55:39:1f:97:40:c0:a2:2a:83:b3:c8:a4:7d:
aa:bd:31:7c:85:b6:ed:2c:80:32:c1:60:d7:67:67:
f0:d5:93:9a:3c:86:c7:a4:00:61:1c:eb:5c:3d:d8:
95:c8:b2:52:e8:6f:79:4b:4b:88:b0:da:37:b7:97:
22:a1:26:da:35:ca:dd:f0:bb:c5:84:19:67:fc:43:
b2:97:58:8b:78:26:2c:64:53:56:4f:33:ae:4d:f2:
f7:63:8a:b7:ae:b4:4f:bf:52:91:29:b4:98:cc:56:
2a:86:b1:7c:28:3b:0f:59:b7:46:65:1e:a5:fc:68:
af:94:6a:f3:38:62:9b:78:87:a4:1d:80:a2:d7:63:
d2:c4:01:ae:83:a3:8d:6b:8f:22:89:a3:5d:ff:1d:
6d:bf:9e:4d:c5:27:45:fe:7f:63:58:9e:cd:0f:31:
f2:6e:3c:75:52:fd:c9:3c:ca:05:51:b1:fd:59:dc:
82:73:6d:53:71:b5:8f:8a:63:c9:d1:bd:25:05:0b:
9e:ed:e7:2b:7f:4d:32:d0:23:59:25:3d:1c:97:74:
ad:35:69:84:b2:ba:77:5b:c4:ac:e1:07:f7:1b:ac:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E8:5C:4D:D4:37:1D:33:C4:CC:7B:E6:DD:64:BB:36:21:41:0A:C9
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/88A296F47E8C11EC97193C875A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8b:7b:24:c8:f8:88:7f:da:fc:bf:f4:90:b5:b7:5d:56:18:
99:42:4f:33:38:63:97:6d:97:43:b2:04:6b:4c:d5:f9:a8:7a:
ad:18:b1:31:e6:7c:20:46:57:2e:3c:0c:4f:29:e8:fe:36:19:
7a:b1:23:b1:31:be:e8:7c:08:56:43:27:51:73:83:bc:79:81:
47:ae:19:b2:21:d0:f6:dc:71:67:9b:b7:8b:04:5b:df:7f:c2:
6a:ca:28:48:8a:59:8d:a4:8e:b8:ef:9a:df:2b:eb:3f:f8:b2:
c8:f0:3f:9f:5f:65:40:68:31:f6:fd:49:8f:6f:03:6f:49:60:
a6:59:85:ef:fd:74:8b:f5:61:32:aa:e3:36:7d:23:7b:b4:a5:
a7:ba:97:84:b8:ae:0e:f0:10:3f:3c:10:90:2c:50:7d:9c:2d:
5d:c5:2e:9c:7a:1e:e9:74:5f:a0:94:87:9e:54:c0:54:7d:da:
35:61:f1:3e:a0:10:2f:6c:d0:5b:c1:98:6f:63:ad:ad:f9:30:
31:e3:fe:a2:98:3c:d7:4f:7b:21:49:f7:a7:81:27:21:33:2f:
8e:88:64:fe:b2:56:16:d5:3b:54:f4:e0:3b:76:25:47:05:43:
50:a2:f8:bd:92:30:b2:4a:91:d9:b0:12:67:07:09:73:dd:c7:
f4:95:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org