Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/AF607CBC871611EFA4B4B85C762E951A.roa
File: AF607CBC871611EFA4B4B85C762E951A.roa (raw, json)
Hash identifier: bzfiv5WUYP+OkMM7fSUuv+PsK419hvu6fLkkiMcm3F4=
Subject key identifier: 09:E3:78:EB:99:5C:C1:4D:EF:04:3C:F5:3B:41:10:E4:8C:88:46:33
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 058B
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/AF607CBC871611EFA4B4B85C762E951A.roa
Signing time: Thu 10 Oct 2024 14:48:17 +0000
ROA not before: Thu 10 Oct 2024 14:48:14 +0000
ROA not after: Tue 10 Oct 2034 14:48:14 +0000
asID: 139989
IP address blocks: 41.216.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Oct 10 14:48:14 2024 GMT
Not After : Oct 10 14:48:14 2034 GMT
Subject: CN=6707e931-2547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:28:dd:20:c4:1e:6d:dd:43:5f:4f:8e:ad:
b5:7c:04:02:e8:c7:49:ae:37:6b:05:67:0e:3a:5c:
c4:51:73:5e:23:11:3f:ac:65:71:41:f6:e5:75:36:
8f:1c:3e:32:9c:5f:b2:68:d8:f1:aa:84:05:7d:83:
74:49:2e:46:14:f7:0a:e4:c9:ec:95:fb:bc:28:de:
2e:67:fc:2a:db:2b:77:ac:4a:c5:30:67:a8:1e:17:
71:13:57:4a:a1:f6:64:b7:6b:d8:05:98:8d:c5:36:
bd:8c:5d:85:99:1f:94:78:d5:27:15:61:77:6d:47:
99:f1:4e:ad:6a:27:41:a9:d8:2c:29:6f:88:cd:0e:
17:44:1a:4d:26:15:ba:e3:28:e8:53:6a:ab:d7:7e:
14:95:dc:68:fe:e9:5b:38:f6:ac:8e:26:74:5e:11:
82:96:4f:5d:0b:c3:ce:87:69:50:9d:37:51:9b:3d:
f4:ff:7c:b4:6a:00:5d:5e:77:3b:ef:c2:a6:36:bc:
97:69:1e:33:4c:5c:8a:0a:dd:c0:c1:35:93:fc:cc:
ec:a0:c2:d9:18:1a:8e:18:01:a3:90:6c:a7:c5:90:
ce:cb:88:07:e9:fd:85:cb:1c:01:63:ca:6d:06:c4:
7a:35:7e:40:94:48:c4:02:3f:b9:ad:ee:a0:ad:bb:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:78:EB:99:5C:C1:4D:EF:04:3C:F5:3B:41:10:E4:8C:88:46:33
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/AF607CBC871611EFA4B4B85C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.185.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c5:b2:1d:89:50:83:ea:b7:36:b3:67:1f:59:12:af:93:cb:
e8:68:2a:34:f1:99:58:51:b0:bd:58:19:ed:88:c0:91:da:68:
86:6f:3f:52:f5:7c:b4:f7:8c:b8:e0:78:54:17:b1:8a:3a:05:
de:ce:c6:32:0b:04:f4:57:97:ee:ef:01:50:eb:88:3c:54:e8:
84:86:b1:63:b2:e5:5e:02:48:05:06:a7:41:65:96:96:ae:23:
ef:f8:d4:ec:90:dc:cc:62:33:77:ff:2d:e8:f9:df:e4:7a:5e:
3c:48:c5:b1:b6:65:24:fc:53:7f:1b:55:91:ad:f1:f8:a9:ee:
27:9a:c0:1f:c8:e0:39:64:44:12:ca:93:90:e2:cd:5a:90:d7:
00:3b:99:2b:83:cf:7f:25:ce:f3:8f:e3:20:18:8c:b6:75:08:
80:14:36:50:05:56:5e:4f:9e:cd:ac:27:f1:46:e8:10:af:97:
7a:ae:3d:a5:7f:53:bf:57:61:96:f5:fe:2f:9c:c5:d0:33:4a:
ec:ad:4a:7b:85:64:c5:92:27:f5:7a:a6:68:43:e6:52:2e:e6:
fc:15:9f:1a:bd:92:c5:45:8a:a6:ee:28:51:3c:84:ab:84:b5:
05:a9:ff:0c:18:6f:c8:a4:11:c3:f7:9a:83:2a:64:f2:38:30:
8b:18:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org