Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/DFF4540A0AAA11EE89915D5A4AD9E6FC.roa
File: DFF4540A0AAA11EE89915D5A4AD9E6FC.roa (raw, json)
Hash identifier: cP9R2Qrl9S1ixebQNGm1g6k1ly30xv1Wd7bXVEu0duY=
Subject key identifier: 94:1E:B6:0F:88:EC:A8:9D:39:13:82:31:BD:6F:F9:66:F9:21:1F:75
Certificate issuer: /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial: 09
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/DFF4540A0AAA11EE89915D5A4AD9E6FC.roa
Signing time: Wed 14 Jun 2023 11:59:11 +0000
ROA not before: Wed 14 Jun 2023 11:59:07 +0000
ROA not after: Fri 13 Jun 2025 11:59:07 +0000
asID: 36959
IP address blocks: 41.215.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Validity
Not Before: Jun 14 11:59:07 2023 GMT
Not After : Jun 13 11:59:07 2025 GMT
Subject: CN=6489ab8f-5216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:9b:0b:2c:2c:c9:4b:25:18:94:7a:a3:56:
99:f3:07:eb:e8:c4:3c:e4:ad:f5:1e:12:f4:79:6a:
0e:07:cf:b9:37:2f:c9:3d:a9:ee:b5:fa:fe:a2:b6:
92:58:bd:dd:af:ac:29:4b:f6:41:26:3f:8d:1c:e0:
67:6b:0e:98:bc:0b:c5:1f:39:a3:6a:a9:51:01:9e:
53:d0:5f:ce:21:3d:7b:01:70:41:1b:7b:1b:82:6c:
c1:3f:db:e5:11:29:70:67:08:1c:08:2c:a5:d6:3d:
87:62:5c:42:33:80:61:56:ad:d5:f6:d7:c2:fc:c1:
de:56:04:aa:71:e8:e2:f0:20:6b:53:93:d3:01:40:
0d:f5:2f:38:cb:94:1f:52:53:d6:5c:7b:a0:8d:0c:
14:25:06:fe:38:4d:af:c2:e2:fd:fc:61:11:27:7f:
d7:a4:11:63:06:76:d3:dc:3d:00:95:c0:22:36:0f:
c0:66:db:d8:99:9b:3c:b8:6c:8a:4e:c6:b5:ff:58:
09:8c:46:02:d7:fc:54:65:38:2b:55:7a:02:44:c7:
b3:bc:84:ab:7f:d9:07:10:e7:09:8a:12:1a:d8:1c:
30:d4:aa:b3:1b:05:5c:4a:e1:2b:c2:b9:8a:24:dd:
4e:fe:76:83:ea:00:ba:b2:9d:44:ed:42:89:08:dc:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:B6:0F:88:EC:A8:9D:39:13:82:31:BD:6F:F9:66:F9:21:1F:75
X509v3 Authority Key Identifier:
keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/DFF4540A0AAA11EE89915D5A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.176.0/20
Signature Algorithm: sha256WithRSAEncryption
07:d7:e0:71:f0:b8:8e:f3:5a:08:96:9d:ea:4c:5c:be:30:5b:
42:35:c0:0a:ce:1e:0d:38:4b:82:17:80:f7:ab:72:37:86:2f:
3b:e7:80:08:44:fc:0c:2d:c9:57:6c:6a:e3:cd:89:9b:11:6b:
89:39:6f:c0:e2:fc:c4:10:fb:bf:87:20:82:c2:de:92:10:20:
ff:b2:b3:a0:f1:0c:5f:6e:4e:a6:2f:88:84:d8:7e:38:3e:dd:
a4:7f:8b:b1:1b:31:db:14:65:fb:bb:1a:c7:c8:c0:58:e8:35:
2a:ac:fb:a3:ca:49:a6:26:c6:11:bf:c7:cb:d9:d6:b3:19:25:
26:30:ac:68:51:00:94:d3:e0:f0:ef:b8:94:bc:9e:0f:5b:b6:
36:0c:8a:21:aa:44:0c:27:95:08:ea:08:48:dd:94:74:e3:fa:
37:44:03:20:a5:58:40:35:ef:48:5e:d7:d1:b7:50:18:1f:76:
c5:9a:2e:04:4e:92:09:6e:81:1c:5d:36:8d:6a:86:07:69:60:
33:7e:41:dd:22:c2:5d:7d:77:1a:ef:b8:85:9d:62:16:d5:94:
77:35:98:41:e3:93:7f:4b:56:36:8c:4f:e3:83:64:76:50:be:
de:4e:c1:58:ba:51:c7:c4:21:f1:e0:8a:f1:56:c0:95:8e:35:
d5:40:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:35 2024 by rpki-client on console-fra.rpki-client.org