Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/BC272006C99B11EEB694FE66775412E6.roa
File: BC272006C99B11EEB694FE66775412E6.roa (raw, json)
Hash identifier: NfSJftU35E7esFbejpm9fx8yq+4lHpxvcEhTk6+CBbc=
Subject key identifier: 28:00:30:3E:73:D9:AD:59:A7:76:F3:E2:7F:C1:9D:8D:2E:16:A3:DF
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 0585
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/BC272006C99B11EEB694FE66775412E6.roa
Signing time: Mon 12 Feb 2024 11:42:01 +0000
ROA not before: Mon 12 Feb 2024 11:41:57 +0000
ROA not after: Wed 12 Feb 2048 11:41:57 +0000
asID: 37098
IP address blocks: 41.216.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 11:41:57 2024 GMT
Not After : Feb 12 11:41:57 2048 GMT
Subject: CN=65ca0409-de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:37:56:51:af:60:8b:a3:d8:f3:99:3b:87:
71:5f:49:41:03:92:62:46:e4:86:1c:5c:f0:06:cb:
58:39:70:8c:92:24:bd:a2:33:f2:2f:20:40:56:5f:
25:e1:5c:9e:63:41:c6:bb:72:50:61:b5:ae:de:ca:
5c:7a:c8:b8:58:74:db:22:59:ec:e4:cd:88:23:72:
da:b6:ea:f5:de:65:bf:ee:b3:3b:55:d7:f0:cc:cf:
13:f6:e9:87:bb:2c:0f:a4:08:0d:1d:19:58:48:43:
03:dd:81:e7:5a:e2:80:95:b6:8c:2e:fe:59:ab:e2:
e2:b6:04:06:dc:a9:f4:75:ea:01:3d:72:1f:65:9f:
dc:18:21:e3:1f:eb:02:8b:dc:bf:45:12:22:43:cd:
01:f4:2e:06:f7:97:ec:ea:44:9c:7c:71:6e:63:74:
11:04:09:c7:1a:7d:55:77:bb:af:51:fe:52:21:4d:
ef:d4:a5:91:c9:31:b1:61:05:b8:02:be:98:2d:99:
22:60:b6:a1:d6:a5:9a:c0:b1:0e:8e:71:be:bd:f6:
80:ed:a3:6c:61:13:7f:a6:06:53:a1:87:4c:1b:5a:
87:ab:1c:37:54:82:2a:89:d9:69:3e:25:59:9b:90:
94:9a:ce:25:aa:2b:ae:18:2a:92:85:ae:02:06:41:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:30:3E:73:D9:AD:59:A7:76:F3:E2:7F:C1:9D:8D:2E:16:A3:DF
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/BC272006C99B11EEB694FE66775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.231.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d6:dc:4c:32:06:89:b7:1a:f2:03:11:a7:56:e7:6a:aa:ed:
46:77:62:09:91:23:54:d5:98:84:d0:b9:03:cd:58:8c:cc:04:
32:2d:2e:97:3a:25:6b:04:e5:c6:49:28:db:83:3b:40:c9:95:
27:8b:de:7a:22:fc:5a:0b:fb:e0:b3:ce:ea:d4:98:c8:59:f1:
c4:6c:33:f1:36:e6:dd:6d:ac:10:2f:14:a0:1d:14:a2:9a:d0:
b6:81:f6:ef:23:4e:2f:40:bc:d2:33:91:bf:2f:68:33:fa:3c:
62:61:db:de:e7:28:22:51:77:88:dd:7e:fd:38:ec:a4:d1:2f:
4e:82:60:2a:4e:ae:57:4f:ec:ed:e7:d0:fc:6a:8c:a9:7b:44:
6a:5e:6d:88:e7:97:09:c9:42:06:9a:20:03:84:90:c0:17:26:
4e:8d:4b:71:03:6f:6c:34:cf:2d:82:1d:4d:ac:a7:b4:38:c6:
57:d7:1c:8f:35:a2:97:ba:68:b5:b2:24:74:d2:85:49:0c:1b:
ba:09:7b:14:c6:1a:f8:1d:6f:f9:15:d3:18:e5:eb:20:08:90:
a3:3a:a4:bf:ef:47:8a:50:7e:79:9a:82:f7:7d:c9:99:78:db:
dd:8d:e0:b6:7d:20:3e:a1:90:ba:77:71:67:53:97:54:1f:18:
ba:89:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:39 2024 by rpki-client on console-fra.rpki-client.org