Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/6B55653AE80F11EC8B6A3995F1222468.roa
File: 6B55653AE80F11EC8B6A3995F1222468.roa (raw, json)
Hash identifier: NlJS8RDhWkQ85WacuJo9Q2avhBcGn7qk2XvLLQATu+g=
Subject key identifier: 97:29:5D:A6:36:55:B2:5D:87:8F:37:E7:4B:9F:AB:5C:A8:47:C5:20
Certificate issuer: /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial: 04
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/6B55653AE80F11EC8B6A3995F1222468.roa
Signing time: Thu 09 Jun 2022 16:15:47 +0000
ROA not before: Thu 09 Jun 2022 16:15:42 +0000
ROA not after: Wed 09 Jun 2032 16:15:42 +0000
asID: 37280
IP address blocks: 41.76.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Validity
Not Before: Jun 9 16:15:42 2022 GMT
Not After : Jun 9 16:15:42 2032 GMT
Subject: CN=62a21cb2-60e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:15:23:a9:6d:97:51:6c:15:58:bf:72:9b:
cd:1d:d5:e9:db:ee:66:ce:fb:3b:c6:21:8e:d2:7e:
32:41:8d:40:ce:91:e1:48:2d:4a:c5:73:7a:18:b7:
6d:d9:6b:89:fa:1a:f8:ea:ef:a2:8b:77:f2:2e:55:
25:47:9a:29:f7:00:79:bf:03:c5:3a:1e:9f:3c:e7:
62:0a:fc:5a:04:bf:d8:be:a2:e8:76:54:e4:dc:aa:
e5:9a:b9:8a:0f:7f:41:b0:48:cc:70:44:60:07:50:
16:f9:0a:a9:91:53:18:6d:d0:d9:4f:bb:6f:2d:dd:
96:50:2c:a0:b8:69:5a:47:b0:0a:f9:ca:c9:6c:2c:
8e:bb:8c:a4:89:e1:a4:14:45:18:d8:82:85:d2:60:
12:cf:1b:51:3d:34:a0:44:90:ca:7f:8b:80:59:5f:
61:b7:4b:04:87:c3:66:9c:3e:aa:89:65:c8:04:da:
cb:4e:a3:a7:fa:33:f6:9e:38:18:9f:4a:d5:96:b6:
5c:50:04:cc:3f:f5:a8:5a:5b:95:a5:f8:a1:bb:f9:
fe:5a:ee:91:5c:eb:78:52:26:f5:89:06:0e:40:97:
27:72:b5:78:ca:78:0a:db:ed:76:27:17:9d:f5:20:
54:2e:24:06:5d:be:40:e8:bf:2d:0c:56:5c:44:1a:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:29:5D:A6:36:55:B2:5D:87:8F:37:E7:4B:9F:AB:5C:A8:47:C5:20
X509v3 Authority Key Identifier:
keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/6B55653AE80F11EC8B6A3995F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.193.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fc:3a:77:75:57:b9:c6:07:9e:57:b0:05:5f:e0:6d:c6:98:
40:91:b9:6d:78:20:f7:7d:0c:59:65:81:67:b5:5e:93:86:43:
31:fd:2f:8b:65:f4:8f:a4:19:89:b8:48:04:ee:c4:4a:05:27:
44:b6:3a:ce:d8:ae:71:fe:a6:05:9e:a6:66:aa:a1:13:8b:a6:
0c:76:44:a1:a9:38:8d:b6:c9:11:2b:14:2a:3b:b5:3a:b2:99:
78:a9:55:22:69:7c:f9:88:6b:8c:15:09:f0:ed:0f:38:29:76:
b5:0d:3f:23:8d:cf:d9:a1:af:57:31:2c:e4:63:e5:00:f6:12:
db:f4:3a:35:a5:51:1d:79:e6:31:06:51:0c:69:47:30:41:48:
e3:c2:fa:c8:e5:18:4b:d0:94:83:97:64:10:a3:30:ba:53:20:
67:25:fb:ff:df:ce:db:bd:c2:ee:1d:ee:e8:7a:6e:5e:ca:3b:
8d:82:b4:e2:fd:18:44:51:7c:1d:81:9b:af:9c:4e:a2:65:21:
39:ba:5d:e9:4e:a0:01:5f:92:6b:dd:53:7d:17:b0:13:bf:ca:
db:f4:98:9e:88:45:c9:5b:59:0e:17:65:4a:a9:2e:fb:27:94:
fb:ce:2e:f4:ee:56:7a:2e:74:bd:ef:9f:a7:ab:fb:a6:d9:4b:
fe:52:42:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org