Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/C2676006C99711EE9BB52C61775412E6.roa
File: C2676006C99711EE9BB52C61775412E6.roa (raw, json)
Hash identifier: NVq8amuk8Yp0DqwnbjhmTB3EkjNU4QSAXBzS9xgY4jM=
Subject key identifier: 1C:45:6D:4C:77:0F:D0:CC:65:F7:54:11:FD:DD:B4:E0:5A:92:47:70
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 0577
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/C2676006C99711EE9BB52C61775412E6.roa
Signing time: Mon 12 Feb 2024 11:13:33 +0000
ROA not before: Mon 12 Feb 2024 11:13:30 +0000
ROA not after: Wed 12 Feb 2048 11:13:30 +0000
asID: 37098
IP address blocks: 41.77.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 20 Jun 2024 00:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1399 (0x577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 11:13:30 2024 GMT
Not After : Feb 12 11:13:30 2048 GMT
Subject: CN=65c9fd5d-b115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:4d:32:f8:3a:c9:ed:52:ba:08:79:4d:2d:
e9:b2:67:b6:63:84:cf:2e:3e:09:fe:42:cc:58:d1:
bd:cf:a8:83:3b:e8:2f:38:33:c3:68:01:5a:45:5a:
32:7b:f6:25:af:67:df:51:27:90:20:19:a8:00:66:
26:6d:b1:5c:4b:b8:62:e4:f5:79:e9:13:fe:66:bc:
95:b7:ed:63:03:53:92:23:a2:66:f5:36:34:be:76:
10:a3:18:30:31:c9:5f:c6:1d:16:6c:fb:60:d6:50:
4e:97:56:6e:82:88:95:34:f6:e6:71:6d:8f:4e:b4:
6a:ec:9e:76:a2:e8:d7:a1:86:76:79:9f:81:b3:44:
2f:47:82:a4:c1:50:98:53:12:74:cd:c0:8e:a0:7d:
84:25:56:7a:20:f6:3d:3e:33:fe:a6:73:4c:b7:35:
15:aa:e8:76:63:f6:d1:a0:ae:40:03:9e:5a:38:3a:
a3:b7:9c:98:ec:34:eb:af:e7:cc:6d:84:5e:e5:98:
e2:7a:54:11:28:4e:a6:8c:be:26:a1:06:d1:30:82:
e9:9a:fa:ab:48:78:ff:ae:65:4b:ae:5c:1a:7b:6d:
df:d3:80:ad:6a:15:f6:8d:41:02:0c:b3:03:06:81:
79:64:cf:bd:0d:07:3d:7f:3f:2e:8e:4a:11:dc:95:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:6D:4C:77:0F:D0:CC:65:F7:54:11:FD:DD:B4:E0:5A:92:47:70
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/C2676006C99711EE9BB52C61775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.13.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7c:a3:24:f4:75:40:4a:56:96:38:74:14:d4:2f:97:af:e0:
f6:2d:31:f4:bf:23:2f:9c:22:dc:8f:99:cf:d1:49:56:9c:55:
36:ae:e0:1c:fa:3c:f8:b0:37:9a:e5:aa:f4:44:93:3a:81:6e:
1f:47:92:3f:fa:49:6f:24:37:29:0a:f5:5f:e3:b8:e6:4f:4d:
c0:4b:8f:27:37:bc:b0:9f:c1:8f:57:f3:2b:f1:90:5e:73:26:
95:27:4f:12:52:9e:01:99:fb:55:e2:7e:9d:b0:16:67:db:ef:
75:24:01:ea:91:13:cd:da:c1:8c:bc:ce:26:59:fe:f0:03:79:
64:e7:c1:38:df:55:30:a0:d9:6e:66:c6:de:ec:5f:95:54:2d:
05:68:4e:3b:89:49:f5:44:c0:1c:00:f3:61:ea:0b:fd:c3:d6:
71:9b:73:8e:bf:a6:7a:dd:52:8b:cc:eb:b5:79:83:4b:c9:78:
78:18:24:9d:c9:62:49:c1:54:e7:e7:82:88:b0:ba:34:df:77:
30:13:a7:c3:2b:67:28:1e:f3:97:76:34:2a:43:30:84:89:f5:
16:c8:5d:c6:b5:de:b4:64:f0:4a:8b:d5:e1:0b:94:25:1a:4e:
fd:2a:9a:07:51:b4:8a:eb:60:56:f5:6d:8b:b5:04:b3:00:f2:
46:48:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 01:55:20 2024 by rpki-client on console-fra.rpki-client.org