Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/FA0A71ACBF7D11EEAF08CABF775412E6.roa
File: FA0A71ACBF7D11EEAF08CABF775412E6.roa (raw, json)
Hash identifier: PfO9Y+c33Exyp9yfR1CWVhKzDN+Qro1W+mHbGnhyeOg=
Subject key identifier: BB:77:7E:A5:1E:9D:60:73:77:DC:D6:10:3F:5D:94:56:61:BA:FE:3C
Certificate issuer: /CN=F36B0C44AF/serialNumber=49BAE67DFEDE9D9509BB03A7C732DC566166B75A
Certificate serial: 0A
Authority key identifier: 49:BA:E6:7D:FE:DE:9D:95:09:BB:03:A7:C7:32:DC:56:61:66:B7:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/FA0A71ACBF7D11EEAF08CABF775412E6.roa
Signing time: Tue 30 Jan 2024 14:43:48 +0000
ROA not before: Tue 30 Jan 2024 14:43:45 +0000
ROA not after: Thu 25 Feb 2044 14:43:45 +0000
asID: 37480
IP address blocks: 41.86.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B0C44AF/serialNumber=49BAE67DFEDE9D9509BB03A7C732DC566166B75A
Validity
Not Before: Jan 30 14:43:45 2024 GMT
Not After : Feb 25 14:43:45 2044 GMT
Subject: CN=65b90b24-59d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:26:b0:45:b2:86:27:a0:92:36:05:c0:54:
5c:c4:5a:a2:b7:d9:fb:de:63:54:1c:64:fc:c5:35:
27:ec:c1:ea:70:d7:30:1e:89:05:24:64:45:e7:52:
70:4e:a5:f2:bc:9f:26:b2:2a:40:20:1a:d4:06:8c:
64:9f:3b:2c:91:b8:5b:88:1e:a6:31:f6:d7:b9:c3:
d9:7f:ce:ca:a4:18:1f:d6:ca:9c:dd:d8:47:ec:79:
19:a0:f4:1e:fc:c1:ba:87:c1:21:de:71:c2:2e:ef:
b2:5c:9e:77:e2:2f:00:cc:5d:b1:d5:39:7c:e3:bd:
5b:dd:31:0e:d5:a5:33:0b:6d:bd:c8:22:0e:7e:65:
28:1f:27:91:0b:bb:a5:a2:47:ce:04:30:c8:d3:4b:
52:06:fc:98:13:82:a1:a6:14:09:a1:23:aa:2e:1a:
72:59:fc:6c:4f:e4:83:64:d3:0e:43:80:80:2b:51:
b2:c9:e5:72:d0:6b:ad:97:bc:d2:31:80:79:f2:0d:
13:11:c3:67:92:28:03:99:cf:f9:e9:15:5d:22:92:
a9:12:f2:0a:22:ed:8e:91:7e:95:f3:2e:a8:6e:55:
89:1c:66:30:6f:0e:c0:62:9b:5e:0a:f4:5f:d9:a2:
cd:d8:f4:0b:1b:2f:75:02:c6:60:74:69:0a:75:44:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:7E:A5:1E:9D:60:73:77:DC:D6:10:3F:5D:94:56:61:BA:FE:3C
X509v3 Authority Key Identifier:
keyid:49:BA:E6:7D:FE:DE:9D:95:09:BB:03:A7:C7:32:DC:56:61:66:B7:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/FA0A71ACBF7D11EEAF08CABF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.86.128.0/19
Signature Algorithm: sha256WithRSAEncryption
13:de:3a:54:85:6b:79:f8:df:00:2e:fc:07:14:4b:3a:50:92:
1f:0a:19:4b:0f:95:a7:ff:61:2b:53:cb:cb:80:02:85:b3:30:
59:53:67:12:8a:4e:b6:2c:0a:64:ee:41:7e:2a:ed:5e:11:6e:
1e:6a:29:12:38:7e:17:4d:62:93:2c:ed:ff:78:c8:c2:15:07:
c8:27:8b:e0:c9:08:b6:34:c9:24:28:57:ae:6f:78:ed:e6:e3:
0d:68:78:57:4d:c9:ac:a8:35:c0:62:e1:4a:0b:44:52:07:cd:
51:3a:b8:ac:86:70:1d:5e:b8:ab:02:4e:ee:08:58:eb:90:f9:
6c:6d:de:5c:b2:ef:cc:83:dd:42:f1:e3:2b:f9:31:35:17:65:
47:a1:46:7f:b4:b1:ef:02:5e:25:92:c8:eb:56:de:e2:fc:cf:
de:e3:ab:b4:d8:69:85:f0:16:f9:de:bd:e9:60:b1:01:b2:cd:
34:3e:f0:da:02:c5:c3:ee:8d:c5:c3:d3:c8:92:e6:5e:80:71:
71:3d:8a:7b:62:dc:42:97:35:df:dd:11:2a:5c:8e:8e:a3:82:
93:33:f4:da:ee:8c:23:8d:f8:8d:c5:3d:80:f7:7f:49:09:77:
3f:d8:91:6f:ce:20:27:a2:e8:fe:fc:e6:22:57:f8:9b:e0:4f:
a4:70:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:40:49 2024 by rpki-client on console-ams.rpki-client.org