Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/262E806A2D1D11ED9D41FE8EF1222468.roa
File: 262E806A2D1D11ED9D41FE8EF1222468.roa (raw, json)
Hash identifier: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=
Subject key identifier: F6:87:BB:8D:D3:26:7D:FF:A9:01:A6:C3:84:0F:88:6F:7F:80:15:8A
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 04
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/262E806A2D1D11ED9D41FE8EF1222468.roa
Signing time: Mon 05 Sep 2022 13:17:54 +0000
ROA not before: Mon 05 Sep 2022 13:17:50 +0000
ROA not after: Sun 05 Sep 2032 13:17:50 +0000
asID: 37638
IP address blocks: 41.190.232.0/24 maxlen: 24
41.190.233.0/24 maxlen: 24
41.190.234.0/24 maxlen: 24
41.190.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Sep 5 13:17:50 2022 GMT
Not After : Sep 5 13:17:50 2032 GMT
Subject: CN=6315f702-d9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:00:fc:88:d1:6a:83:d4:32:b9:34:d8:08:
2f:cb:d4:c6:33:4b:a6:1a:57:a7:07:15:ca:a9:6a:
f4:2c:40:34:ba:a7:99:37:06:45:4b:20:74:33:d3:
64:24:24:35:26:22:e0:45:58:af:8e:e9:0a:b6:af:
9c:cf:5a:93:62:2d:40:23:69:67:8d:c0:4b:26:24:
49:8d:52:f7:5a:3f:36:c0:18:1c:5b:61:82:55:2c:
01:ab:6d:cd:96:81:94:2b:b5:c0:75:d9:c9:92:9c:
17:36:b2:17:e7:a4:a7:13:16:20:b7:b1:b4:2f:2b:
8e:e3:68:2b:87:ad:43:cf:19:da:97:b1:28:79:e5:
ed:6f:25:9b:28:b3:3f:af:76:a3:13:cd:57:b0:8c:
89:77:73:af:66:cc:8e:73:30:e1:9f:9b:a2:6e:d7:
1a:74:96:8b:3b:ac:4d:f3:9b:6b:49:cf:6e:b8:29:
ad:55:c5:2a:0e:16:bb:0a:ec:2c:58:1a:69:e9:0d:
bc:bf:02:ee:f1:af:71:e5:64:3c:07:48:80:d0:d6:
55:e4:92:5f:75:95:fb:e5:d9:99:da:86:00:86:00:
7c:cc:e0:ad:3d:64:2a:03:14:c4:af:9f:85:ed:1a:
88:c1:ce:90:ff:04:ca:b8:49:bd:75:26:ed:e2:c0:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:87:BB:8D:D3:26:7D:FF:A9:01:A6:C3:84:0F:88:6F:7F:80:15:8A
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/262E806A2D1D11ED9D41FE8EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.190.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:14:8c:1b:31:40:03:86:7a:90:cf:c2:1f:9b:ff:fd:b8:02:
10:97:12:88:85:9f:b5:e1:11:17:7d:ea:97:2b:42:15:62:a9:
1c:b5:91:6c:32:d7:58:89:e3:56:18:62:bb:c3:24:d4:33:37:
f3:9d:ae:d2:26:f5:9e:07:65:21:3f:97:c0:cd:b5:c5:35:48:
94:a4:92:26:f3:34:7d:6a:80:cb:af:ac:04:0b:2d:ac:1d:b8:
6c:e3:70:b4:fd:b0:66:2b:4b:43:e7:e6:8a:a7:61:da:4f:ca:
ef:4f:15:34:11:fa:a8:2e:15:ae:7f:36:ee:a3:49:20:3c:95:
40:8e:0b:17:50:c6:e4:c8:20:48:e8:e7:06:a8:21:c2:64:0d:
2d:6f:b3:57:f8:dd:83:4c:39:c9:9e:97:f5:55:60:f5:eb:e4:
73:36:12:7e:a4:7b:db:cb:52:26:d1:d4:2a:e3:31:03:f4:4f:
c2:b6:a6:16:29:96:fd:db:a5:cf:55:f3:c0:1e:8f:07:a4:38:
a0:cd:8c:5c:07:ff:15:9e:9f:05:e5:e7:87:b9:70:2d:dc:c5:
8a:f4:bf:a8:e5:95:43:68:e7:68:1e:05:36:33:c1:48:d8:e7:
f0:dd:08:59:38:27:20:c0:30:59:a0:61:a6:bf:1a:9c:1f:19:
7a:1c:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:19 2024 by rpki-client on console-ams.rpki-client.org