Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/983705B2C99611EEBF88425F775412E6.roa
File: 983705B2C99611EEBF88425F775412E6.roa (raw, json)
Hash identifier: XJqJ7gN3jDfsB7Pjiht6+uqJPoJvzMlDF3QiUIEoqEI=
Subject key identifier: 02:35:F5:6A:30:37:10:4C:72:81:F1:69:F0:4B:94:DE:0E:5C:1A:CE
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 056F
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/983705B2C99611EEBF88425F775412E6.roa
Signing time: Mon 12 Feb 2024 11:05:13 +0000
ROA not before: Mon 12 Feb 2024 11:05:10 +0000
ROA not after: Wed 12 Feb 2048 11:05:10 +0000
asID: 37098
IP address blocks: 41.77.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1391 (0x56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 11:05:10 2024 GMT
Not After : Feb 12 11:05:10 2048 GMT
Subject: CN=65c9fb69-dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:fe:6d:2b:c8:37:3b:74:24:9b:28:51:53:
93:44:89:6b:1c:06:fd:df:14:a9:67:44:fc:5d:64:
34:57:fe:7b:27:38:a1:76:6a:78:1a:c9:f4:f6:03:
7f:1f:91:9d:6f:93:85:0c:22:ff:1c:79:b4:68:bc:
4c:41:09:db:7d:58:ea:99:4c:01:a0:38:02:b1:c2:
15:d0:20:f4:1a:22:fd:bd:22:1b:64:4f:23:6e:73:
b1:5c:2a:20:ca:e1:df:f9:90:d0:12:3d:7d:52:32:
4d:91:86:fb:5f:c1:01:1c:1b:24:f4:de:1f:05:b4:
87:80:13:13:70:c8:bf:8f:d6:44:59:9e:5b:57:39:
b6:87:62:72:a7:20:5a:25:5b:87:1c:d2:67:11:fc:
8e:e6:75:9f:ac:5a:72:57:f4:c7:98:0d:23:fa:1a:
c4:81:bf:34:04:d8:00:cd:77:25:ff:f7:17:69:fb:
11:cb:cf:52:49:c8:5a:5f:50:2f:03:d4:77:d4:31:
11:f5:62:79:c6:48:d6:42:30:49:eb:3f:8d:ae:8b:
43:bf:c6:9f:0b:26:09:8a:a6:8e:98:c5:3c:2d:38:
dd:f2:2c:8b:3f:20:36:55:ab:b3:24:eb:d5:dd:e9:
b5:90:48:70:a8:e5:a6:24:83:0e:f4:3c:6e:45:9e:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:F5:6A:30:37:10:4C:72:81:F1:69:F0:4B:94:DE:0E:5C:1A:CE
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/983705B2C99611EEBF88425F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:85:e9:90:37:5f:75:c2:56:e3:84:58:6a:06:22:c8:dc:af:
35:e1:74:71:1c:60:05:d0:a9:37:22:57:1b:3b:fb:c9:55:9f:
59:d9:f4:74:54:70:99:af:d6:95:cf:ce:24:04:86:05:db:23:
6d:3b:cf:af:c5:1b:15:67:8a:e2:90:6d:e3:7e:1a:2e:3e:27:
ca:6b:ac:03:29:6b:d3:ad:da:a0:a0:98:cd:d5:f1:29:92:7a:
b3:9f:97:1f:d0:e3:54:8d:16:58:9f:50:07:43:0e:da:72:7a:
7f:22:49:5a:79:e2:9e:f7:65:ae:ff:74:38:54:f6:a5:08:83:
a1:72:89:75:29:12:c2:dc:89:df:31:f9:15:33:51:1a:82:ed:
fe:41:d2:7c:87:9f:8c:59:79:00:76:cf:39:33:54:7d:48:b2:
d5:5f:ff:38:38:d2:14:67:68:6d:50:8f:4a:8f:ad:74:78:89:
fe:dd:1d:d4:b2:5f:1f:57:59:51:3d:82:1b:5a:33:e6:6c:97:
f2:30:f4:fd:f0:19:4c:f7:a9:09:44:9d:35:af:45:34:d1:d8:
55:d6:11:a6:12:d6:b6:6b:ce:38:0d:07:44:2d:65:bb:f8:a6:
8d:97:64:dc:04:5c:2d:c9:86:1f:3c:a2:db:d6:8c:21:ac:62:
81:7c:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:17:36 2024 by rpki-client on console-fra.rpki-client.org