Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/E9B17964E76511ECB6B242F6F1222468.roa
File: E9B17964E76511ECB6B242F6F1222468.roa (raw, json)
Hash identifier: QX79+PCfVXxj+OGB6vFI/wIK/0K3qU3aoir40/gZdAI=
Subject key identifier: AA:DA:E3:4B:C0:A8:2E:06:1B:AC:80:FF:AA:D5:BE:8A:3A:33:6B:A7
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 11
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/E9B17964E76511ECB6B242F6F1222468.roa
Signing time: Wed 08 Jun 2022 20:02:24 +0000
ROA not before: Wed 08 Jun 2022 20:02:19 +0000
ROA not after: Tue 08 Jun 2032 20:02:19 +0000
asID: 59895
IP address blocks: 41.77.142.0/24 maxlen: 24
41.77.143.0/24 maxlen: 24
41.215.243.0/24 maxlen: 24
41.223.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Validity
Not Before: Jun 8 20:02:19 2022 GMT
Not After : Jun 8 20:02:19 2032 GMT
Subject: CN=62a10050-7d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:c9:9f:37:8d:a8:b5:34:1f:90:e7:35:dd:
b9:ed:3a:dd:aa:fe:46:22:ab:2b:40:2a:cf:d1:51:
e4:03:ad:8d:ce:d1:20:43:90:8f:2b:e9:db:5a:19:
ad:af:47:54:a6:af:8b:18:f0:e4:d0:fc:8c:0c:eb:
dd:52:92:0e:47:e3:3a:84:5e:ed:58:c6:75:15:27:
e7:d4:5e:3f:76:aa:4e:72:82:7e:65:7b:31:d5:ce:
7f:87:1c:34:5e:57:c4:4c:2e:97:d5:29:30:59:c1:
9a:9c:83:1d:b7:54:1a:76:8a:63:9d:61:ca:d4:9c:
30:b8:4c:27:29:e4:eb:21:4b:7e:70:2b:68:ad:07:
ce:d3:90:de:4a:b1:32:55:4f:e2:4b:c2:9f:a9:81:
95:cb:4b:17:ce:40:bd:c0:d7:f3:5b:05:fe:b5:f3:
57:1a:53:82:e3:ef:5d:1e:2f:c4:4a:db:d9:ad:61:
02:bd:50:ff:50:b3:2b:2c:55:d4:5c:df:e2:bc:1f:
b6:2e:94:e9:30:81:cb:4e:70:cd:26:48:db:e3:d5:
8f:e0:9a:e2:c2:1b:91:31:94:54:bc:c6:4b:3e:2a:
b5:42:f3:57:1f:90:e5:de:9d:4d:30:3a:79:0b:d8:
e6:d3:b2:35:1e:02:7d:1f:6f:cd:83:06:f4:25:28:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:E3:4B:C0:A8:2E:06:1B:AC:80:FF:AA:D5:BE:8A:3A:33:6B:A7
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/E9B17964E76511ECB6B242F6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.142.0/23
41.215.243.0/24
41.223.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f1:5a:a4:56:7c:06:19:02:a9:08:45:47:af:30:ae:04:82:
b3:3b:1c:fd:d4:ac:6a:dc:5f:08:24:ed:e1:8c:7a:e5:ed:04:
66:34:c4:46:ac:81:e7:83:b9:a5:e6:0a:7f:7c:00:c8:78:bb:
14:5f:4c:f6:75:dc:c7:22:ef:61:80:8d:8a:26:39:9f:89:14:
eb:43:78:c8:68:eb:57:c6:ae:fc:66:72:81:d4:7e:1d:d3:01:
3f:ca:fa:f0:5d:27:6d:e2:fc:1c:3f:35:0d:75:c9:48:1e:a4:
38:d4:e7:b5:91:9c:22:1c:40:d9:07:d4:a5:13:05:4e:be:38:
48:ef:53:67:65:26:36:22:80:04:ec:c8:d5:13:9d:32:14:cf:
2e:f6:5f:ae:52:18:03:fa:41:e9:bf:84:c2:7d:8d:07:f4:14:
98:2d:bd:6d:70:33:0a:0f:97:26:d2:38:08:e2:9a:c0:c5:3e:
07:ca:d3:43:55:5e:c2:84:b4:94:ac:6d:97:b0:88:80:a2:1d:
c4:95:54:6d:b0:a2:8e:36:ca:74:d3:a5:62:9b:e8:0c:d7:cf:
ba:d6:ec:5e:9c:b0:51:70:49:8d:1b:33:7f:02:6c:3b:53:bf:
bb:73:79:c6:b8:14:3b:e6:a9:de:ed:06:a4:87:70:33:1d:ce:
db:51:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:12 2024 by rpki-client on console-fra.rpki-client.org