Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/27A3DFEEC99811EEBDD0A661775412E6.roa
File: 27A3DFEEC99811EEBDD0A661775412E6.roa (raw, json)
Hash identifier: YUrsV0URWBMfqQ2ScnE6bIXBAZO6NHUCKtS8EDJHuV8=
Subject key identifier: C7:4C:38:46:6D:91:70:3F:31:5E:AC:32:EF:48:B2:E9:1D:B1:42:56
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 057B
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/27A3DFEEC99811EEBDD0A661775412E6.roa
Signing time: Mon 12 Feb 2024 11:16:23 +0000
ROA not before: Mon 12 Feb 2024 11:16:20 +0000
ROA not after: Wed 12 Feb 2048 11:16:20 +0000
asID: 37098
IP address blocks: 41.77.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 11:16:20 2024 GMT
Not After : Feb 12 11:16:20 2048 GMT
Subject: CN=65c9fe07-f941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:81:ef:80:13:6e:3c:fd:43:3f:2b:91:23:
db:7d:2b:66:27:6a:b8:77:cd:45:78:18:33:57:de:
32:e2:55:fa:46:0d:b2:53:6e:e7:71:b7:6b:ea:fb:
df:68:da:58:6f:65:25:46:f4:40:ba:b0:37:ad:f4:
81:9f:91:b9:85:18:5f:3c:3a:43:de:b8:87:9a:ea:
24:48:01:a0:b5:35:a8:c4:d0:19:99:90:8b:6e:64:
3f:a2:a4:c5:11:46:51:94:b1:c4:5f:38:f1:4e:b4:
05:44:f6:58:da:70:6f:20:11:a0:68:83:dc:e4:65:
67:36:0e:ba:bc:2d:0f:2c:da:ea:6e:10:a8:c2:1b:
63:93:5c:40:ac:3e:fe:2c:7d:13:c3:eb:db:55:cc:
72:70:ee:00:dc:0f:a9:84:55:48:c0:8b:f0:66:b1:
e5:a1:0d:8f:87:36:b8:aa:1f:85:f2:9a:d2:a2:62:
c3:44:e7:0c:72:7d:aa:45:ab:92:32:9e:16:99:58:
55:1c:5b:48:aa:c3:33:9d:76:16:a8:bd:9e:01:75:
b2:40:a4:8b:28:39:d6:1a:05:36:9f:8d:fb:6e:d3:
1b:79:2b:c5:2c:d1:f4:c7:0c:38:bc:38:78:af:ca:
6e:b1:58:7f:d0:3d:3f:50:0f:f3:39:51:ad:9e:ee:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4C:38:46:6D:91:70:3F:31:5E:AC:32:EF:48:B2:E9:1D:B1:42:56
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/27A3DFEEC99811EEBDD0A661775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.15.0/24
Signature Algorithm: sha256WithRSAEncryption
51:97:86:3d:1d:28:95:15:ec:ff:8c:9e:62:31:5d:93:b1:3b:
1a:45:aa:56:60:fa:2b:7c:fe:11:e5:15:4e:22:a1:1e:f5:a7:
76:e7:e5:f8:cd:dd:65:da:e5:3b:cf:15:ee:3d:5b:70:66:cd:
91:e3:3b:21:45:36:2a:12:19:05:78:34:65:4f:7e:fb:53:05:
fc:8f:94:5e:96:8a:29:a3:d9:8a:9c:5c:5c:7e:42:97:8b:e5:
3a:9e:48:42:25:6e:9c:0e:b0:c3:c4:8e:5b:be:64:b3:70:73:
03:79:34:e6:06:a3:04:76:47:98:ab:54:3d:f8:1c:d3:c9:28:
f2:19:c2:40:88:14:fe:78:82:cb:e9:5c:7a:d0:25:e4:16:51:
14:cb:00:28:5a:aa:41:38:92:dd:de:f2:b0:39:a5:19:57:28:
06:b4:45:7a:2c:1b:af:21:72:b3:fe:ff:83:0f:cc:ea:3c:76:
37:c8:95:2a:25:44:95:85:4f:b7:65:94:6c:41:f3:7e:92:6c:
e2:13:fa:42:a0:f8:e3:b2:fe:d6:a7:d7:38:14:0d:d6:44:64:
74:e0:6a:60:48:4d:cb:e3:7d:f6:47:91:fd:94:e8:ad:3f:02:
ac:ba:8b:7b:a5:77:99:4d:7c:49:7e:8c:92:66:f8:8f:c6:4c:
c8:17:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:39 2024 by rpki-client on console-fra.rpki-client.org