Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/02DAF914715A11EDBF6260A3F1222468.roa
File: 02DAF914715A11EDBF6260A3F1222468.roa (raw, json)
Hash identifier: kX6Cjuka0V9zOfn2ycOAXFn92wY1H0cyN8uqfGm3q8s=
Subject key identifier: 5F:83:E1:86:4F:F5:DF:18:80:36:00:26:04:CC:B7:F6:D8:C5:96:68
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 08
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/02DAF914715A11EDBF6260A3F1222468.roa
Signing time: Thu 01 Dec 2022 09:24:53 +0000
ROA not before: Thu 01 Dec 2022 09:24:49 +0000
ROA not after: Wed 01 Dec 2032 09:24:49 +0000
asID: 37009
IP address blocks: 41.219.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Dec 1 09:24:49 2022 GMT
Not After : Dec 1 09:24:49 2032 GMT
Subject: CN=638872e5-0482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:44:56:7c:fe:7d:d5:92:f9:71:94:15:66:
e3:fa:d0:db:d2:fd:ba:ee:bc:9d:24:1f:16:52:8c:
68:b1:4e:0b:93:55:e0:14:20:f1:ff:17:74:67:bd:
4b:6c:ae:ea:98:3c:74:70:30:10:f7:18:32:f9:c0:
1f:6a:e2:06:ae:fd:94:96:5c:c5:f9:90:88:35:a4:
7c:3e:5f:7d:40:3f:75:ba:4d:12:e6:cf:d3:c4:9f:
c0:f5:e6:36:0c:e0:e7:1e:e6:01:70:d9:19:a6:63:
1c:16:ce:6e:9e:b8:ed:17:52:67:ba:c8:68:68:bb:
04:8e:9d:c0:3c:e4:e6:06:da:87:b8:67:c1:4b:6d:
51:df:ef:96:b3:41:55:6b:35:45:4d:a8:b2:5a:12:
5e:72:22:bb:ff:1a:16:16:98:59:c8:86:a3:94:d5:
92:27:50:48:a9:49:33:1b:a1:e8:8e:82:fd:95:ca:
59:4f:e2:6f:d6:d1:88:ce:b3:68:9a:7d:d5:8d:96:
0c:10:40:34:6e:be:1b:e1:7d:67:a0:c6:e0:7d:de:
a9:10:07:40:35:aa:e1:99:12:29:1e:2e:fa:f7:01:
69:11:8b:2f:22:ba:9a:49:51:68:f0:d7:c0:aa:53:
a0:20:4b:01:65:1a:88:99:a9:21:c8:49:6c:15:a7:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:83:E1:86:4F:F5:DF:18:80:36:00:26:04:CC:B7:F6:D8:C5:96:68
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/02DAF914715A11EDBF6260A3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.219.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:ff:fb:5e:0b:f3:4c:8c:e5:9e:21:ee:95:fe:86:01:a0:3b:
8d:94:52:d1:a4:6d:d6:3b:4e:e4:79:69:b7:a9:e5:d6:33:f7:
74:92:62:c7:29:7a:97:ca:0e:41:7d:9d:c2:19:e7:3f:34:49:
d7:51:1b:63:28:88:0b:84:e1:7d:7a:c6:88:3d:e3:94:9d:3c:
d2:9e:93:9a:f4:da:ec:69:d9:91:49:66:14:39:b7:6e:c7:bb:
b2:6b:77:eb:cc:4e:b9:10:d0:26:85:c5:69:d3:63:21:06:53:
4e:27:22:1f:9b:85:7a:8a:0d:f6:51:65:ec:b9:9e:8a:ff:76:
e2:56:1b:2d:e5:bd:04:45:fb:63:e0:aa:e4:23:f7:2a:8a:35:
4f:bc:dd:9f:b1:4c:67:52:99:52:3f:ea:97:3a:fa:26:19:24:
a5:e2:79:74:ba:92:ca:06:9f:19:2e:fc:26:7c:c5:78:99:45:
28:eb:e8:83:66:48:68:4a:79:a7:83:c4:0d:b2:b2:01:4e:83:
6a:9e:ed:f3:a3:60:2c:17:fb:6e:c5:00:ae:b1:bf:38:8e:78:
74:c6:53:83:74:a1:d5:56:be:60:6a:97:89:7a:52:a9:8c:0e:
b0:d0:99:1d:32:ca:9a:b0:92:96:d0:a9:b4:90:41:73:a4:c4:
90:ac:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org