Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/0F65DA2A0A9B11EEA43F1A2C4AD9E6FC.roa
File: 0F65DA2A0A9B11EEA43F1A2C4AD9E6FC.roa (raw, json)
Hash identifier: WEsrXgrlYSInyHUdkI4NyLWseRlSMuHME2qE3oN331w=
Subject key identifier: 5B:E9:5D:FE:10:58:37:6B:E7:C7:4B:01:45:72:19:BA:04:E6:CE:2B
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 04
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/0F65DA2A0A9B11EEA43F1A2C4AD9E6FC.roa
Signing time: Wed 14 Jun 2023 10:05:59 +0000
ROA not before: Wed 14 Jun 2023 10:05:55 +0000
ROA not after: Fri 14 Jun 2024 10:05:55 +0000
asID: 37613
IP address blocks: 41.242.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 14 Jun 2024 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: Jun 14 10:05:55 2023 GMT
Not After : Jun 14 10:05:55 2024 GMT
Subject: CN=64899107-b12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:de:b5:63:02:d7:79:dc:04:88:fa:0f:ef:
91:c1:f9:98:4a:15:ad:90:70:b4:86:ac:23:af:d7:
7f:cc:7d:53:f6:d6:e2:b9:30:94:2b:59:fa:30:52:
20:2a:83:e6:d6:da:80:9c:48:16:b2:46:0b:89:32:
a3:eb:dc:5c:96:01:5c:d5:3e:ae:a1:39:f9:c0:9a:
10:41:ac:43:8d:4e:65:24:3b:b3:f9:02:8d:d9:43:
2b:73:81:6a:c6:93:a6:63:80:b9:28:85:0c:4c:68:
48:cc:2b:6f:29:7d:1e:5b:b4:e8:40:97:a9:a2:99:
78:59:68:e3:03:36:4e:92:db:2a:c4:02:09:42:b1:
8d:84:62:fa:2f:13:dd:2e:d4:3d:33:e4:36:52:b6:
06:9c:d5:58:e6:86:fb:49:4a:3f:fc:f4:43:e9:11:
08:aa:4c:32:b7:70:d9:af:f5:2f:af:33:bb:0f:06:
df:da:a7:d4:d3:84:2b:b9:11:75:b0:61:60:9b:9c:
38:3c:47:a0:66:f7:5c:39:56:35:9f:90:ef:55:22:
41:6b:74:15:14:57:92:90:58:da:53:07:13:c8:cb:
e8:1b:2c:6b:c7:fe:4d:5d:db:a5:29:9d:7e:19:d1:
1c:5e:8b:a8:81:9b:93:1f:ec:f7:da:b4:57:eb:2b:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E9:5D:FE:10:58:37:6B:E7:C7:4B:01:45:72:19:BA:04:E6:CE:2B
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/0F65DA2A0A9B11EEA43F1A2C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.112.0/24
Signature Algorithm: sha256WithRSAEncryption
71:83:88:d8:b4:80:8e:5f:13:2a:d2:4c:5b:57:a6:b6:4f:b6:
18:0d:b6:98:9a:97:c6:48:5c:6c:b8:f7:62:a8:f7:1a:dd:82:
52:16:47:e0:72:7c:54:72:d0:76:95:fc:3e:fd:5f:f8:0f:f9:
a1:45:08:54:cf:20:13:e6:85:e8:d0:eb:63:60:e1:70:0a:4e:
f1:a1:85:0a:7f:9a:7b:82:27:17:21:0a:00:0d:bd:bf:dc:47:
c2:7e:36:9d:f8:40:5d:43:d3:ed:78:db:fe:96:83:b1:a6:3f:
94:e9:bf:e3:54:8b:fb:82:af:8d:31:c5:04:50:bd:57:0c:c6:
f9:de:65:9b:21:b1:37:42:44:2f:95:f2:88:6a:c0:3e:2a:03:
5f:6a:76:fb:64:f7:da:6e:fe:7b:16:14:67:eb:5d:a8:0d:43:
64:b5:c6:76:0c:d8:0b:fe:fa:b1:81:14:f3:1d:e8:0d:d5:3f:
c3:5a:0c:d5:c6:b9:f6:2c:83:ca:c4:4f:d6:66:24:8c:ed:6e:
7f:ef:a9:da:ec:24:e1:d7:fe:55:bb:e4:5f:57:40:14:86:41:
2d:92:04:74:b3:23:ca:0c:a8:72:c6:9a:3f:7b:cc:01:49:a2:
85:16:ce:3f:b0:c4:9b:5e:82:3e:ec:a5:dc:20:6e:73:0e:85:
74:11:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 05:49:51 2024 by rpki-client on console-ams.rpki-client.org