Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/93BEB9727B6F11EF81325783762E951A.roa
File: 93BEB9727B6F11EF81325783762E951A.roa (raw, json)
Hash identifier: XGjuCE7tXlwix5GuCmklZ88dhoOPc6iO4b/dd0dOcD8=
Subject key identifier: AF:3B:7A:1B:48:8D:FF:17:AD:6E:6F:F1:D1:26:DC:43:CC:4D:E9:F4
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 023C
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/93BEB9727B6F11EF81325783762E951A.roa
Signing time: Wed 25 Sep 2024 18:54:22 +0000
ROA not before: Wed 25 Sep 2024 18:54:18 +0000
ROA not after: Mon 25 Sep 2034 18:54:18 +0000
asID: 37105
IP address blocks: 41.216.192.0/23 maxlen: 23
41.216.194.0/23 maxlen: 23
41.216.196.0/23 maxlen: 23
41.216.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Sep 25 18:54:18 2024 GMT
Not After : Sep 25 18:54:18 2034 GMT
Subject: CN=66f45c5e-b485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:0a:70:bc:db:b8:b0:e2:93:f3:16:28:fb:
94:b9:35:b1:00:99:83:c1:91:a2:cd:89:1d:ee:05:
40:62:cc:d0:e2:34:9a:24:81:6e:c3:60:25:6b:6b:
04:2f:65:f9:46:34:6a:fb:7b:3f:7c:97:c5:d4:d6:
53:8f:00:ed:28:c2:14:54:64:72:52:b8:fa:ad:86:
1e:82:5e:98:73:cf:a1:16:73:13:53:78:8c:cc:98:
94:8f:9c:83:05:03:a7:69:1b:b1:56:91:69:3a:dd:
8f:72:f9:21:2e:2a:9e:0f:8b:55:8c:8b:2d:69:d9:
db:92:85:8e:64:64:28:d0:0f:09:82:cc:83:de:89:
aa:e9:3d:23:56:a7:3b:aa:dd:f9:29:ff:2c:9c:9a:
c5:85:f6:fd:ce:db:f4:a1:bd:d0:e9:bf:a9:f1:a4:
70:83:8c:b6:0b:b3:03:44:a1:91:12:79:22:0b:7a:
11:b8:cf:24:ef:48:01:84:aa:56:ea:6a:c5:cf:7e:
3c:58:ea:1a:25:a8:a7:47:02:70:fc:60:c7:3b:ae:
72:b9:6c:0b:05:9b:e5:e5:35:da:1d:6b:a0:a6:4a:
ab:72:32:e8:1f:bf:9b:fd:27:40:3a:ec:59:30:d1:
f6:e8:c5:ba:bc:42:62:47:57:dc:26:b1:6c:a2:03:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:7A:1B:48:8D:FF:17:AD:6E:6F:F1:D1:26:DC:43:CC:4D:E9:F4
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/93BEB9727B6F11EF81325783762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.192.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:ec:66:1d:09:70:ed:b4:d9:6e:f6:65:3c:d3:61:7f:7e:a6:
3b:0f:f6:79:b8:33:96:a7:c7:bc:b0:b2:ea:e7:21:70:b4:b2:
0f:f7:11:13:b8:8e:cd:0e:af:c6:77:a8:68:78:25:68:5c:9b:
d0:0e:00:89:ab:db:c1:06:c0:0d:7a:52:29:c1:77:be:50:24:
4e:4e:89:11:81:5a:72:9a:e5:0d:dc:fa:ec:a8:8c:0f:f2:29:
53:eb:a0:a6:47:82:bc:ad:d9:63:4c:6b:cf:cb:45:43:ca:68:
37:13:f3:5d:c7:3a:ba:b6:08:ed:bd:ba:e2:cd:9a:27:0f:93:
50:72:93:60:b3:38:bc:4b:59:63:de:73:35:ff:06:72:19:15:
2a:10:05:ea:bf:4c:09:e3:fc:1d:9f:10:51:d5:7f:d2:f8:5f:
68:11:a6:e9:90:bd:f6:f9:6f:70:11:c0:7a:af:22:a3:8f:8c:
71:7c:b2:64:7f:70:cb:66:d2:8e:c2:0a:9c:89:6d:00:0c:74:
89:97:15:9c:b8:69:99:ec:a5:f6:bc:10:08:f7:47:88:09:08:
b4:7b:e2:2e:04:43:5c:7b:7d:f9:b4:dc:4b:47:1c:35:ed:a6:
06:0b:34:c1:23:fa:c7:ce:f7:ec:d7:54:18:6b:75:75:d0:5d:
6f:ee:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org