Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/A0D24DF67E8611ECBE0EA4755A40D577.roa
File: A0D24DF67E8611ECBE0EA4755A40D577.roa (raw, json)
Hash identifier: MafVgzxyumYkACUDU162eLPKpdlrPAKDQMJCmIH26AA=
Subject key identifier: 94:C4:45:85:22:41:A2:BE:27:82:75:85:1B:93:27:9B:C3:FE:46:A2
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 0153
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/A0D24DF67E8611ECBE0EA4755A40D577.roa
Signing time: Wed 26 Jan 2022 09:02:03 +0000
ROA not before: Wed 26 Jan 2022 09:01:59 +0000
ROA not after: Mon 26 Jan 2032 09:01:59 +0000
asID: 327980
IP address blocks: 41.216.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Jan 26 09:01:59 2022 GMT
Not After : Jan 26 09:01:59 2032 GMT
Subject: CN=61f10e0b-bd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bf:41:8b:56:31:0d:0e:89:d4:c6:f9:e4:70:
88:9b:df:15:bb:b8:e6:62:e0:0f:74:e1:13:c1:09:
92:fc:0c:4a:3c:04:55:f2:4a:cb:16:d0:c8:27:0a:
4b:35:d8:df:1c:c8:b8:08:7f:6a:53:5f:33:39:dc:
c8:cc:5b:a1:a4:62:dc:a9:af:4d:7c:05:4a:a8:7b:
cb:ce:7e:f2:c5:89:3f:e9:10:5f:86:7d:4f:01:3b:
79:2d:0e:bc:90:7e:17:36:94:d0:e3:c3:be:5e:2c:
05:3a:34:f3:4c:5a:db:88:a8:0c:8e:2f:27:f5:d0:
97:a6:76:d1:bb:5b:18:4c:c8:de:55:27:a7:23:25:
1a:15:04:d5:7a:c2:4a:bb:58:0d:48:a8:82:6f:37:
19:f2:8a:45:f6:21:6c:ff:99:d4:44:8a:aa:26:cb:
c4:43:66:db:cf:74:6d:9a:66:32:ab:2d:05:39:81:
29:c9:de:81:0f:95:12:1c:c9:21:35:be:eb:6e:b5:
ec:f8:8e:ff:b1:fc:72:02:8e:ed:6f:7e:46:cd:c9:
78:b1:06:44:35:e3:66:c9:dd:bd:74:2e:50:7e:08:
45:9d:74:a0:0b:d7:e4:a9:36:1c:65:08:a1:1b:aa:
cc:22:46:a8:07:d5:b9:4c:bb:2a:ef:f2:6d:b3:8c:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:45:85:22:41:A2:BE:27:82:75:85:1B:93:27:9B:C3:FE:46:A2
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/A0D24DF67E8611ECBE0EA4755A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.188.0/24
Signature Algorithm: sha256WithRSAEncryption
84:75:e9:4d:fa:0a:38:cd:05:12:eb:f6:f0:d6:2e:26:ed:2e:
22:fe:5f:50:7b:e5:73:b3:ea:e5:5c:c0:c4:11:75:c1:fe:48:
ad:ca:65:76:73:58:fa:2b:5b:a0:e3:7b:39:c5:22:b7:42:6d:
17:db:9c:f7:bd:9a:87:55:c9:09:5f:44:fd:85:46:e2:65:f5:
9b:f0:ab:ce:01:c4:c3:9b:0c:76:eb:da:ea:e1:00:5b:5f:a4:
0f:d5:86:42:cd:46:f8:55:dd:0e:5b:bb:1a:f6:25:26:35:12:
bd:73:d0:b0:e3:19:1f:95:42:38:d7:2a:1b:dc:30:b7:3d:b2:
05:99:a7:6e:75:53:bf:3e:b5:5f:00:c1:e9:a7:1f:5c:7c:a9:
82:32:32:fa:12:f7:d3:75:5e:41:81:3c:f0:fd:80:0c:e5:51:
0c:b6:7e:f5:12:8b:a7:cd:39:0a:69:77:3a:c8:ff:51:ac:82:
1f:cd:ff:d7:51:c4:83:1f:67:63:fc:1a:50:6b:bb:28:4c:53:
72:2d:94:b6:b8:4e:b7:e6:0c:90:34:2c:96:cd:f6:33:43:17:
ce:6d:95:ea:ce:36:bd:91:eb:b2:b9:6b:80:e0:c4:0f:a5:c2:
6c:c0:c3:fc:26:b4:16:09:a2:4f:3b:3b:56:de:cf:53:d1:d4:
0e:a6:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:40 2024 by rpki-client on console-ams.rpki-client.org