Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/1B1E241E451711EFAD0B499A762E951A.roa
File: 1B1E241E451711EFAD0B499A762E951A.roa (raw, json)
Hash identifier: Ep7yM470eEGXeNpv8ARuzKPKLgsxxmudxnGocbswnGw=
Subject key identifier: A9:04:37:36:01:C6:9D:D3:A4:8C:CD:53:C1:84:11:B0:91:80:98:19
Certificate issuer: /CN=F36B87F4AF/serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3
Certificate serial: 02
Authority key identifier: 4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/1B1E241E451711EFAD0B499A762E951A.roa
Signing time: Thu 18 Jul 2024 15:05:01 +0000
ROA not before: Thu 18 Jul 2024 15:04:58 +0000
ROA not after: Fri 31 Dec 2049 15:04:58 +0000
asID: 37622
IP address blocks: 41.222.96.0/21 maxlen: 24
41.223.76.0/22 maxlen: 24
102.131.48.0/21 maxlen: 24
154.65.8.0/22 maxlen: 24
2c0f:f550::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B87F4AF/serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3
Validity
Not Before: Jul 18 15:04:58 2024 GMT
Not After : Dec 31 15:04:58 2049 GMT
Subject: CN=66992f1d-9249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:14:a3:f6:6d:87:43:0a:b6:9b:66:f0:94:5f:
fd:24:0b:94:4c:e9:f3:87:5f:57:9b:4d:16:74:16:
de:b6:97:19:dd:3c:b6:19:fe:34:08:4a:c8:dd:00:
ae:f1:a4:db:bb:d6:38:d8:a4:15:bb:f8:3f:56:ac:
3d:31:a2:0b:6d:96:80:d7:c2:c8:42:ae:d2:ee:39:
ac:15:29:5a:07:fa:88:cc:b8:03:61:c0:6c:23:1e:
89:c0:2b:f6:b5:34:0c:d0:59:fc:9c:50:f9:2c:50:
eb:f2:9e:37:fc:38:c6:c7:93:8c:96:cc:a0:01:f0:
1f:e7:36:dc:d9:3a:c0:53:b6:f1:78:e3:50:f8:c3:
65:22:56:84:e2:04:4f:2e:29:0a:81:d0:25:d8:f4:
14:3b:b7:c4:7a:d3:b4:e6:98:ef:93:77:96:b5:44:
54:39:f3:4e:1e:de:fe:7d:58:d6:67:12:53:ec:fc:
37:58:17:3b:3d:44:cb:58:be:4a:32:ed:31:41:25:
b7:e5:d8:50:02:0a:90:47:c9:32:b6:d0:84:df:75:
77:ff:42:00:da:c8:26:7a:cb:f2:01:98:94:0d:a6:
f6:da:db:c4:cd:c2:36:cd:34:f2:2f:72:b0:3f:99:
1b:8a:a7:04:d9:d1:8f:7a:a5:51:f3:10:73:2c:44:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:37:36:01:C6:9D:D3:A4:8C:CD:53:C1:84:11:B0:91:80:98:19
X509v3 Authority Key Identifier:
keyid:4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/1B1E241E451711EFAD0B499A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.96.0/21
41.223.76.0/22
102.131.48.0/21
154.65.8.0/22
IPv6:
2c0f:f550::/32
Signature Algorithm: sha256WithRSAEncryption
35:8d:5e:4c:aa:be:6d:c4:4f:5c:cd:b2:0d:37:97:42:90:38:
ab:4e:48:49:4e:bc:a5:3e:ed:2e:ce:4b:c4:44:25:d4:d5:ec:
b4:9d:4e:11:81:38:6c:6b:d5:c8:84:12:1d:0d:33:5d:f3:7d:
1a:00:b2:da:50:8b:18:44:74:80:fb:8c:c1:9a:4f:3f:dd:2b:
55:7b:23:6f:ba:be:85:48:94:59:99:8b:81:17:a6:69:be:91:
4f:aa:f9:66:86:a8:57:05:ba:5b:83:a6:b3:df:4d:0d:7e:52:
f8:a7:ed:cd:4a:9b:ad:fe:b4:f2:16:38:42:52:50:d0:0c:98:
9b:67:39:0c:9f:f5:5e:1b:bd:c6:b2:73:31:0f:2e:bb:dd:0c:
58:d8:d7:00:87:45:6e:0b:d2:86:b4:22:9f:6c:e0:85:34:54:
64:7b:10:ef:e2:78:fe:0f:6d:52:28:a7:97:06:66:81:d7:e0:
c5:ce:dc:2c:87:77:59:22:13:a1:43:be:d0:37:e7:5e:50:4a:
a5:08:c2:52:90:8f:a3:37:99:80:47:a3:6d:79:d6:4d:04:9c:
86:c5:c6:a4:10:25:ba:52:f2:33:66:e9:e7:4e:4f:06:53:31:
aa:48:c7:6b:f9:b2:23:bf:c5:42:55:9b:0b:5b:29:1a:5c:f2:
4b:c0:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:50 2024 by rpki-client on console-fra.rpki-client.org