Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/312C885E1C4A11EF9DE586157DDC24C2.roa
File: 312C885E1C4A11EF9DE586157DDC24C2.roa (raw, json)
Hash identifier: GjHEWzUkDA6tsW5/6kpvZ3CU5zKEBXoesmUsNT+Jflo=
Subject key identifier: 04:2B:BC:67:27:F9:26:3C:72:3F:EC:65:E1:38:50:8F:6D:8C:75:EB
Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial: 15
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/312C885E1C4A11EF9DE586157DDC24C2.roa
Signing time: Mon 27 May 2024 16:57:25 +0000
ROA not before: Tue 28 May 2024 16:57:22 +0000
ROA not after: Thu 28 May 2026 16:57:22 +0000
asID: 37517
IP address blocks: 41.215.208.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Sep 2024 00:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Validity
Not Before: May 28 16:57:22 2024 GMT
Not After : May 28 16:57:22 2026 GMT
Subject: CN=6654bb75-8e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:24:3b:2a:4b:d1:a2:be:cd:6e:b7:ec:5f:
fc:df:7c:64:72:7c:f3:ad:a5:21:c6:4a:7d:49:3c:
6b:f1:ab:16:fe:2f:86:d4:c6:4c:81:8a:ac:9e:4a:
02:ef:a3:aa:5e:df:80:36:59:56:eb:0b:21:50:37:
00:11:77:74:0d:b3:92:98:77:b8:0c:a1:2f:f5:33:
89:80:32:cb:3f:7a:2d:54:5c:a3:a8:69:3e:a2:4c:
12:c2:d8:64:56:05:04:75:98:33:0c:6d:e1:58:2f:
46:a3:06:75:0b:fe:ce:fa:8c:61:f6:98:8a:cb:79:
36:2c:1b:55:98:59:cb:a4:72:bd:6f:84:f5:d2:af:
25:f9:45:e7:49:91:c8:21:08:18:9a:41:bd:cb:52:
93:ef:31:20:43:9e:7f:1c:20:b4:67:d9:67:ca:05:
84:77:07:32:b7:3a:33:53:53:51:e8:6d:eb:02:ea:
94:bb:1f:7a:56:a8:ea:0c:36:19:53:f8:68:31:d3:
d3:97:e1:80:c1:92:ed:65:2a:94:30:c7:53:bd:5d:
66:dc:6a:d0:76:a1:1e:57:f7:31:56:c1:27:7a:73:
4c:12:5e:96:46:0f:6b:02:a1:e0:32:60:4c:fe:bd:
9f:4e:9a:5f:5c:b9:ad:f4:9d:3a:69:65:51:4d:75:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2B:BC:67:27:F9:26:3C:72:3F:EC:65:E1:38:50:8F:6D:8C:75:EB
X509v3 Authority Key Identifier:
keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/312C885E1C4A11EF9DE586157DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.208.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:6e:ba:59:4f:04:18:57:de:a0:0e:d3:fb:94:70:cd:c5:af:
dc:85:1f:21:e8:fe:2e:52:c1:bc:b8:21:a6:60:cf:f4:e5:b9:
f7:96:9b:94:b2:7f:f3:b3:32:b7:02:24:98:26:43:a6:08:3a:
76:09:a6:5e:f1:a2:ce:36:f6:cb:1c:d3:60:5b:cb:e8:6f:9b:
ae:e8:77:33:a7:12:63:f2:94:5b:75:2c:73:2d:4f:d9:a0:1b:
97:de:b6:d0:f1:1f:bb:12:aa:0b:a2:c1:8f:4d:39:51:92:2f:
41:da:89:44:49:b2:a3:c5:96:71:91:bf:df:4e:a7:c7:42:45:
f4:6d:3d:dc:d4:36:65:ca:62:98:29:51:e3:73:2d:56:5f:a2:
69:dc:aa:0c:17:67:fe:f8:27:87:30:ef:c2:f7:f4:93:16:2d:
c4:8c:d4:66:6c:54:0a:30:13:73:e8:a0:90:95:7b:fd:29:47:
d4:b0:f3:dc:d2:bc:87:ed:d5:7b:6a:00:8b:26:6c:28:10:61:
16:8c:2d:92:f9:26:33:15:30:cb:93:2f:b3:ff:2c:17:7c:28:
e8:99:24:2a:44:d3:38:fe:ad:75:ef:8c:88:a4:e1:b8:63:fd:
16:a3:54:69:07:65:ef:50:50:f5:62:cd:73:d3:3a:d6:46:ba:
89:50:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 03:59:26 2024 by rpki-client on console-fra.rpki-client.org