Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/39FFC9BE03B811EF983A1B33017001B1.roa
File: 39FFC9BE03B811EF983A1B33017001B1.roa (raw, json)
Hash identifier: tS+wVtHhPrpxDmWcesUHT7utAdSi06FtleX+U4Lw7TI=
Subject key identifier: 88:57:2D:DF:94:DB:54:80:B9:68:8C:DC:9A:C9:3D:A2:B3:75:65:85
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01F9
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/39FFC9BE03B811EF983A1B33017001B1.roa
Signing time: Fri 26 Apr 2024 10:32:06 +0000
ROA not before: Fri 26 Apr 2024 10:32:02 +0000
ROA not after: Thu 30 Apr 2043 10:32:02 +0000
asID: 30988
IP address blocks: 41.73.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF
Validity
Not Before: Apr 26 10:32:02 2024 GMT
Not After : Apr 30 10:32:02 2043 GMT
Subject: CN=662b82a5-4f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:ff:8d:64:f0:03:e2:ed:85:ae:62:a6:fe:
2d:3d:5e:35:fb:82:89:ff:45:bd:52:c2:f3:b7:14:
9b:3c:14:d0:2c:b1:79:6b:68:71:4c:69:4b:5c:86:
8a:ac:06:00:e2:72:e9:2f:98:9d:e0:ab:df:1a:a1:
7a:e5:6e:65:ed:13:df:56:02:b7:be:c4:2e:e8:50:
4f:f9:e6:b8:53:b7:d4:52:b2:03:b4:cd:db:b8:e9:
bd:bb:8a:9a:90:b1:55:b9:89:7d:34:1b:9e:34:d8:
d9:33:ae:84:cb:51:41:b5:c0:c9:a7:07:21:1b:83:
7f:e5:52:cc:31:f8:08:ca:d2:a7:06:d0:19:3b:4b:
33:ec:a4:3c:06:5b:31:8d:44:d0:a6:6a:80:77:ea:
60:2c:85:c4:5d:22:75:99:08:5c:f6:d5:9d:0b:f1:
cf:a4:c1:6b:e7:d2:43:fb:b2:e7:fe:03:66:e9:c7:
08:47:8e:bf:f6:cc:87:97:f8:ea:a7:02:80:fe:75:
3b:a7:8e:64:39:da:3f:65:25:5c:f1:3f:13:ae:b0:
93:8a:0d:86:d0:98:5e:9b:d9:d4:c7:d2:fa:c3:82:
89:8e:99:84:27:8c:f1:7e:b3:a1:7f:51:27:b6:e1:
10:5d:54:21:47:3e:ce:ab:da:40:7a:0c:49:79:c8:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:2D:DF:94:DB:54:80:B9:68:8C:DC:9A:C9:3D:A2:B3:75:65:85
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/39FFC9BE03B811EF983A1B33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:41:ac:ab:12:9b:4a:fc:6b:5d:16:0b:d2:6b:3d:e3:5e:ce:
c1:67:78:90:ba:b7:7a:9f:20:ff:d0:49:8f:4e:83:99:4a:32:
ec:a3:38:c0:cb:91:13:f0:0a:4e:66:c4:bb:e5:df:e5:58:7c:
1c:3f:e9:10:86:64:54:c4:19:07:5f:a7:4d:83:b0:8b:b1:62:
58:cc:17:60:62:f9:8f:48:0b:82:31:8b:e6:c0:c6:d1:46:76:
30:6c:03:73:72:33:c2:c5:13:f7:65:b4:40:00:6c:26:29:b6:
f6:b9:1d:e1:0d:7a:a3:91:ab:df:11:a7:e8:c5:13:d8:71:9f:
0e:2d:36:fe:9c:9d:37:73:e6:7c:e2:67:aa:ac:c2:09:a2:d1:
22:d5:91:35:1d:13:44:84:ef:5a:45:bb:e7:4a:e0:d2:d9:fa:
8e:6a:b8:8b:92:34:ac:bf:8b:be:cc:d3:37:5f:d5:a0:98:62:
dd:a5:10:e9:c1:a5:9c:8f:f5:4c:b8:9d:21:95:71:7d:47:d2:
7d:63:aa:21:d8:df:1a:98:42:64:f9:58:ab:77:45:18:79:81:
48:06:7a:8b:cc:f3:1a:f4:b0:05:62:80:d5:0b:7d:56:9b:93:
7e:ec:95:1f:f9:84:00:76:17:30:c5:3b:b7:a5:3c:7a:ee:22:
c2:5d:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:12 2025 by rpki-client