Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/C38920E4E80E11ECBFA14693F1222468.roa
File: C38920E4E80E11ECBFA14693F1222468.roa (raw, json)
Hash identifier: mku9ojQvosh1iWYry4vyjEZBlI0DjNK/5693Zr3LfRk=
Subject key identifier: D5:E0:58:E4:85:F0:E7:0E:87:E8:20:A7:2A:AA:F5:BC:F5:4B:60:BC
Certificate issuer: /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial: 02
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/C38920E4E80E11ECBFA14693F1222468.roa
Signing time: Thu 09 Jun 2022 16:11:05 +0000
ROA not before: Thu 09 Jun 2022 16:11:01 +0000
ROA not after: Wed 09 Jun 2032 16:11:01 +0000
asID: 37280
IP address blocks: 41.76.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Validity
Not Before: Jun 9 16:11:01 2022 GMT
Not After : Jun 9 16:11:01 2032 GMT
Subject: CN=62a21b99-eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:af:76:8e:d3:17:22:20:17:7b:8c:6d:5f:
1a:ac:f4:ac:31:fb:4d:27:ab:1f:1a:c9:49:ed:2e:
ed:29:37:75:9c:b6:83:b8:bb:b4:2f:65:4d:95:28:
65:ea:53:ca:ec:ba:00:d2:cc:74:84:fa:06:d6:2e:
3f:a0:9a:1a:37:5b:e9:3c:49:54:1d:f7:02:2c:2a:
e2:8c:80:12:b5:2c:ec:ac:e3:b4:b2:2c:92:d4:a3:
49:44:9e:77:fe:0b:d5:fb:2e:1b:43:e5:5c:7d:ed:
74:72:79:92:dd:42:e7:ec:69:89:4b:43:65:23:27:
a1:b5:29:e1:75:94:c7:8b:3d:db:18:04:3b:dc:44:
d5:aa:8d:6d:78:eb:6d:b5:52:b0:ec:6f:72:b7:a6:
fb:a6:81:71:a5:23:e2:ce:81:a1:27:c6:3c:d1:f4:
ca:1a:19:a9:8e:b7:8a:e6:1e:0a:6f:23:e3:c7:44:
a8:88:81:1f:f3:55:2e:6e:29:51:03:81:07:11:c7:
96:c5:bb:11:fe:2b:c7:0c:60:b8:11:15:ef:2c:0d:
99:fc:e0:bb:46:59:e0:e0:33:69:a5:26:2c:37:8a:
f6:68:5b:ec:be:50:73:70:7e:31:39:0c:98:8a:f4:
db:5a:ee:dc:b4:4b:92:3e:e3:78:f5:09:ca:49:ec:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:58:E4:85:F0:E7:0E:87:E8:20:A7:2A:AA:F5:BC:F5:4B:60:BC
X509v3 Authority Key Identifier:
keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/C38920E4E80E11ECBFA14693F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.192.0/24
Signature Algorithm: sha256WithRSAEncryption
52:12:6f:a9:17:06:11:d4:20:26:b3:81:d5:ca:2b:70:31:b6:
e3:a4:65:9e:e3:3e:7f:09:d2:76:40:63:16:20:8f:f8:b8:ba:
0b:a0:74:78:28:81:f8:d3:2f:bd:9a:a3:44:be:8c:90:c3:3d:
f0:f4:47:0f:ee:44:14:c8:24:01:96:a8:63:63:49:a0:9c:94:
41:13:ba:85:06:ed:36:b6:36:f7:84:c5:43:28:d0:57:bb:c3:
b5:09:c9:9a:b3:08:25:92:80:94:19:da:04:6d:0b:cb:9a:c2:
40:bd:fc:a7:e7:ee:87:dd:d8:33:d2:86:31:4d:e6:a4:0b:1c:
15:56:18:10:db:81:a7:6f:23:7e:4b:bc:73:1c:92:14:3a:c7:
43:70:35:40:b1:7f:cd:b1:3d:d0:45:b7:e2:d2:d1:41:4f:08:
0c:c6:ff:6d:c0:23:10:4d:56:5c:a9:af:6b:3a:6e:9d:aa:be:
8e:67:ff:2c:7d:42:bb:4a:04:8c:db:3d:b8:81:b6:b2:2d:9d:
40:26:f2:e0:20:14:d3:0b:98:f3:78:13:7a:41:91:5b:b1:25:
65:ab:83:cd:8a:dd:25:a8:c6:fd:a4:70:8e:0d:d0:32:e5:ef:
67:39:ef:61:b4:33:09:f9:57:0e:5f:78:6d:e6:ab:32:62:63:
95:ab:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:27 2024 by rpki-client on console-ams.rpki-client.org