Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/B598428C7BD011EF9348E170762E951A.roa
File: B598428C7BD011EF9348E170762E951A.roa (raw, json)
Hash identifier: u8koei9o52T1/oDA6+Vc7alnKCHHr6e9qCPf+FyEca0=
Subject key identifier: DF:23:E0:4F:8C:95:FC:69:EC:27:D9:45:96:7A:89:B2:99:1E:74:C8
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 023F
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/B598428C7BD011EF9348E170762E951A.roa
Signing time: Thu 26 Sep 2024 06:29:40 +0000
ROA not before: Thu 26 Sep 2024 06:29:36 +0000
ROA not after: Tue 26 Sep 2034 06:29:36 +0000
asID: 37105
IP address blocks: 41.56.0.0/18 maxlen: 18
41.56.64.0/18 maxlen: 18
41.56.128.0/18 maxlen: 18
41.56.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Sep 26 06:29:36 2024 GMT
Not After : Sep 26 06:29:36 2034 GMT
Subject: CN=66f4ff54-571b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:be:14:a9:5e:25:37:90:df:44:40:3d:fc:
c0:3e:5a:88:4d:4d:bb:a0:56:fc:18:a7:03:cc:34:
0c:01:74:c7:4d:f3:7f:ed:9e:28:1e:c4:63:b0:8e:
45:c2:64:7f:60:68:38:e2:ec:87:18:8e:cd:b5:16:
a9:00:eb:68:c5:5d:bc:ed:73:b0:19:75:05:7e:b8:
52:d9:65:af:e1:6e:ef:d1:1a:11:79:da:a3:70:16:
a4:ff:16:8e:46:63:47:2c:37:de:dd:b8:c6:ed:06:
cc:2b:8e:e9:dc:5a:70:2b:99:6a:37:ca:37:60:3e:
5a:6d:09:57:53:f8:f1:b9:dd:9f:0c:e6:45:df:ba:
c1:bd:37:2f:11:fc:e9:3b:34:92:33:b0:d9:f9:cc:
81:bb:12:6e:01:83:3e:07:25:02:6c:bd:49:14:e2:
49:32:20:6f:d1:69:7c:74:5d:29:6c:39:d6:e9:bd:
85:82:08:24:6d:92:36:3d:61:11:00:2c:59:45:37:
e3:1a:8d:bc:27:8c:3e:96:ec:70:24:06:fc:a0:5f:
ea:dc:73:37:83:6a:19:ec:8d:2c:00:db:31:66:cc:
60:1d:eb:42:74:58:ef:03:72:94:3c:a9:84:01:bf:
ad:40:ed:f3:ba:06:d8:60:70:29:38:fa:42:29:79:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:E0:4F:8C:95:FC:69:EC:27:D9:45:96:7A:89:B2:99:1E:74:C8
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/B598428C7BD011EF9348E170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.56.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:e7:c3:ed:ea:1a:2b:31:ec:a3:66:9e:c2:e9:77:f3:dd:b0:
08:4f:a9:c4:54:ce:62:09:b3:a3:a1:e6:03:0b:bd:cf:0e:c5:
ae:4c:1f:e3:e7:38:c0:ef:df:0b:e8:f5:8c:46:c7:fd:cc:22:
4c:2a:a1:f0:ea:14:49:e5:f3:a5:cb:b1:00:01:48:bd:5c:14:
08:a3:e2:6f:b0:bc:7d:82:26:59:c2:80:92:14:ab:ac:12:2f:
d1:9b:ce:40:cc:75:c2:a5:cf:59:ac:44:6b:28:8e:2f:f6:41:
c3:0e:13:ac:75:dc:64:5c:db:b7:b3:c7:8b:32:fb:b2:fb:1e:
6d:1a:22:d5:c5:66:c3:f7:99:26:19:08:3c:25:f3:79:ac:83:
39:d9:84:4d:9c:62:a7:1a:f8:0c:31:70:31:00:30:9e:02:d3:
d9:a8:ff:6b:80:5f:c5:79:34:9b:1b:79:2b:d2:f1:4a:c6:ac:
9a:f6:ad:df:1d:29:3d:5a:01:2f:cb:77:4f:7f:12:59:cd:bd:
22:c4:1a:b6:03:12:dc:22:20:64:a1:2b:a1:43:7a:98:28:31:
c8:ff:87:f1:88:44:9e:d7:3b:68:f3:2f:b9:b0:2a:b8:fa:d9:
3c:83:a0:02:92:13:b5:77:95:33:0b:34:21:75:cd:fa:f2:63:
9e:d4:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org