Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/1BDC6514E81211ECA55E7C9DF1222468.roa
File: 1BDC6514E81211ECA55E7C9DF1222468.roa (raw, json)
Hash identifier: 8v7982h4mhKWZ1h9kKGCJh4xwRvPezQSCRPSbhDEJ0c=
Subject key identifier: 48:EF:BD:7E:66:3C:88:8B:60:C4:74:86:7D:08:2E:69:78:EC:A8:7B
Certificate issuer: /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial: 0E
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/1BDC6514E81211ECA55E7C9DF1222468.roa
Signing time: Thu 09 Jun 2022 16:35:02 +0000
ROA not before: Thu 09 Jun 2022 16:34:58 +0000
ROA not after: Wed 09 Jun 2032 16:34:58 +0000
asID: 37280
IP address blocks: 41.76.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Validity
Not Before: Jun 9 16:34:58 2022 GMT
Not After : Jun 9 16:34:58 2032 GMT
Subject: CN=62a22136-efcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:c9:54:b3:86:f8:20:1b:83:e0:78:99:7f:
a3:08:97:0d:de:5f:c6:d4:04:7f:9b:ae:89:d5:a8:
96:e6:95:9f:db:5f:d6:90:02:ee:63:cf:a6:fd:29:
24:80:78:22:a9:3a:de:44:2a:61:c8:59:5e:88:7c:
b3:2a:b9:89:27:47:e6:c5:f0:b9:c1:72:87:21:c4:
c1:0f:84:88:4b:56:9a:b6:70:bf:29:43:a1:ff:c1:
4a:80:83:fd:ad:66:68:47:8c:c1:b6:91:b7:3d:4d:
bb:d9:69:99:cd:5c:1b:69:a2:dd:af:1d:48:68:98:
86:ce:71:f4:55:8c:81:f2:50:3b:81:0c:b3:0b:7c:
9a:4c:5e:2b:fc:61:ff:52:1c:fc:7c:63:5b:9f:5e:
20:49:43:12:37:4f:f8:52:7f:a9:db:36:30:f3:71:
f9:cf:82:89:6e:53:a4:2d:43:54:da:68:60:61:a2:
9b:f7:cf:57:51:fb:49:9d:a0:dc:4a:0f:a7:f7:5e:
7d:7d:c1:dc:db:dc:34:d6:92:1c:27:cb:47:18:75:
f1:e9:85:fe:f1:9d:2c:f4:44:89:37:ad:32:47:c5:
54:ff:3a:5c:fa:d3:8e:4f:cf:c6:b5:0c:90:98:7b:
b4:69:c9:48:50:84:20:d6:cb:88:fa:72:24:79:2a:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EF:BD:7E:66:3C:88:8B:60:C4:74:86:7D:08:2E:69:78:EC:A8:7B
X509v3 Authority Key Identifier:
keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/1BDC6514E81211ECA55E7C9DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:72:3b:31:c8:b2:02:e0:4c:53:63:f1:d0:bb:b9:28:a2:61:
db:ef:f2:96:e2:a3:e6:d1:3e:cb:a2:4d:97:77:61:f8:27:4f:
54:86:cd:78:76:6d:d4:8e:8d:11:96:86:fc:83:d3:54:65:04:
c0:60:a1:e0:75:ef:27:af:ee:88:01:92:50:f8:0a:ae:82:c2:
58:2e:7d:c2:ef:04:3f:7a:bb:6c:a3:91:52:ae:cd:6a:d9:f6:
0c:59:02:9f:c6:06:1b:e9:d2:7e:69:5b:b0:4c:56:81:a2:45:
11:15:cb:e2:f4:1e:4f:78:25:04:13:08:33:b2:5c:79:51:fd:
84:68:27:09:26:57:15:77:34:cb:2c:f0:9f:1b:04:31:b6:42:
6e:1f:78:a0:7d:ad:61:45:a0:f4:84:06:98:00:c5:65:ad:3c:
01:ad:fe:2d:10:13:01:60:39:00:8b:19:2e:77:7f:52:9a:79:
42:44:33:79:2b:1f:b3:69:ae:12:84:d7:5f:9c:f6:a3:72:90:
f6:45:62:ac:87:18:8c:91:b4:ec:7a:59:8c:fe:49:a8:34:f4:
ca:71:2c:f2:10:5e:59:4f:d3:0d:41:09:0a:f3:4b:60:e6:4d:
6a:1f:c3:36:f6:c0:3e:2e:75:5b:d4:c9:44:b7:44:81:1e:1a:
92:b1:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org