Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/E0657DEC73F411EF8A821C7A762E951A.roa
File: E0657DEC73F411EF8A821C7A762E951A.roa (raw, json)
Hash identifier: N21MoWcROs7ufQGekwsiGnUVwD+p9mSwZWAPbhoKswc=
Subject key identifier: 2B:5A:F7:CD:CD:E5:D1:93:04:C0:7E:01:28:4F:F8:A5:92:C7:85:E6
Certificate issuer: /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial: 02
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/E0657DEC73F411EF8A821C7A762E951A.roa
Signing time: Mon 16 Sep 2024 06:28:25 +0000
ROA not before: Mon 16 Sep 2024 06:28:21 +0000
ROA not after: Sun 17 Nov 2030 06:28:21 +0000
asID: 37395
IP address blocks: 41.79.136.0/22 maxlen: 22
2c0f:fac8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Validity
Not Before: Sep 16 06:28:21 2024 GMT
Not After : Nov 17 06:28:21 2030 GMT
Subject: CN=66e7d008-d10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:4a:1c:ea:74:01:6f:9d:db:0a:77:1a:fa:
79:8e:b3:a5:eb:30:26:f4:28:b5:df:2b:b0:ac:a1:
63:56:4e:e9:b6:10:69:64:bb:aa:94:c2:00:04:fa:
c9:00:b0:a9:69:cc:c0:34:6c:63:ca:ed:96:77:c2:
cf:09:bc:b6:d3:6e:ee:74:e5:a7:7a:93:b3:a4:a5:
52:4f:3c:dd:97:2e:36:3a:bb:72:06:32:7b:ea:7d:
60:0f:93:0c:8e:30:c2:1e:f8:ab:f1:8c:1c:fc:43:
26:a5:22:05:e2:76:55:e6:7a:ee:6a:12:87:1c:d6:
ea:5b:f6:ff:28:c5:8c:40:94:3f:f8:e4:28:8a:6b:
7c:84:52:21:18:1b:fc:0b:f0:30:c0:e2:dd:36:71:
0d:41:11:f8:eb:9d:30:3a:bf:21:7d:55:5a:54:e1:
f1:b8:16:37:06:ce:bb:64:9b:12:40:4c:5b:e1:11:
79:57:0a:61:f9:c4:05:5c:46:cd:46:de:20:fb:a9:
a9:d9:5e:6b:d3:85:0a:36:17:16:af:07:e1:95:06:
7d:91:77:5e:f4:d5:e9:a4:23:4d:41:6f:7e:b3:dc:
42:d2:95:6d:9d:9c:ba:92:47:e3:f4:50:14:a0:ea:
45:66:e3:e7:13:98:55:a9:55:d1:2a:15:02:5d:cd:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5A:F7:CD:CD:E5:D1:93:04:C0:7E:01:28:4F:F8:A5:92:C7:85:E6
X509v3 Authority Key Identifier:
keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/E0657DEC73F411EF8A821C7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.136.0/22
IPv6:
2c0f:fac8::/32
Signature Algorithm: sha256WithRSAEncryption
e5:38:de:e9:27:25:1a:98:9e:7c:ee:2a:97:98:a5:05:bd:e4:
74:20:3e:f5:9f:db:33:6c:81:89:79:a7:90:73:6b:59:02:3a:
c3:44:0a:93:a5:ad:28:d7:e0:44:b4:6d:9e:ca:fa:88:1c:72:
05:59:7e:df:88:8f:98:10:87:8d:2e:b4:ce:98:40:fd:ab:8c:
ef:5e:7b:98:b9:c2:9a:d9:09:9d:bb:63:54:83:28:ea:38:38:
99:dc:96:cb:7e:17:1d:fd:ab:dc:44:01:07:50:80:97:ac:2b:
58:4e:88:a9:ba:78:48:8c:c0:ba:d4:28:13:c8:dd:66:a7:14:
52:cb:10:24:71:0e:4f:15:1b:26:19:45:3d:f9:02:4c:7b:f0:
f2:85:0e:37:cb:a8:80:99:e8:9f:75:fe:46:67:92:1e:d7:36:
79:8a:7e:6c:cd:37:0e:59:29:37:df:a3:12:07:be:09:68:8c:
a3:08:f2:ce:ec:07:85:0a:8d:07:a2:bd:7d:b0:00:18:91:35:
a9:28:7d:a9:8b:02:01:66:41:ec:42:56:4c:db:c1:f0:89:34:
b9:0f:7e:06:c6:a6:fc:fe:25:57:9a:20:3e:33:17:f3:d3:99:
39:ef:3b:32:10:2f:8f:ce:70:cb:95:3d:6e:1f:b7:51:16:6f:
af:73:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:50 2024 by rpki-client on console-fra.rpki-client.org