Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/C3901276715911ED86E3B2A2F1222468.roa
File: C3901276715911ED86E3B2A2F1222468.roa (raw, json)
Hash identifier: /1QncCIt4DwRPT0RviTiVG2yHJp83IqI/nSF9YxhoaM=
Subject key identifier: B7:21:6D:D6:33:AC:39:C7:46:87:D6:DD:00:D2:2C:4B:33:AF:60:4D
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 06
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/C3901276715911ED86E3B2A2F1222468.roa
Signing time: Thu 01 Dec 2022 09:23:07 +0000
ROA not before: Thu 01 Dec 2022 09:23:03 +0000
ROA not after: Wed 01 Dec 2032 09:23:03 +0000
asID: 37009
IP address blocks: 41.63.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Dec 1 09:23:03 2022 GMT
Not After : Dec 1 09:23:03 2032 GMT
Subject: CN=6388727a-56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:ba:54:29:b8:d5:9a:a6:5e:d8:d9:5d:e3:
04:bb:f7:4f:8f:19:fb:77:0a:83:01:38:06:ca:9b:
f6:16:40:9c:e1:ee:55:b4:3f:41:5e:ca:d2:16:5e:
03:cd:75:c5:19:21:b3:9e:55:35:63:15:a3:13:d8:
d0:02:0a:41:a9:0e:01:97:ba:9c:b2:71:b2:b3:f2:
de:f0:4f:07:58:26:0e:b0:c7:2d:9d:26:75:00:21:
67:46:6d:29:2e:42:20:1e:34:76:1d:c4:f9:66:67:
cd:c0:eb:00:93:e3:27:e4:75:9d:14:1f:ae:85:9e:
4e:af:29:28:a9:57:26:a7:fa:93:3b:0d:64:e9:f7:
36:34:fb:bc:cd:72:e5:76:78:63:73:7b:86:30:d6:
14:22:cc:c7:be:23:8f:e8:a8:77:39:1a:c8:fc:88:
de:af:04:0b:34:41:79:19:1e:71:f6:50:0b:d8:a5:
80:62:bd:ee:85:75:0d:bc:a8:ff:33:94:d9:03:41:
3c:c6:d9:8f:1d:7c:c0:b6:45:02:8f:4f:99:b5:45:
7f:b8:18:b0:de:c9:d6:9b:d8:56:30:1c:57:c0:47:
35:e0:84:ef:97:bc:78:ff:bf:c2:ae:d4:c2:b7:0f:
21:38:c0:22:d1:97:53:3e:82:35:67:cd:21:10:a8:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:6D:D6:33:AC:39:C7:46:87:D6:DD:00:D2:2C:4B:33:AF:60:4D
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/C3901276715911ED86E3B2A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.63.192.0/18
Signature Algorithm: sha256WithRSAEncryption
18:03:75:79:00:dc:25:c1:81:b5:11:eb:32:3b:b3:bd:4f:4a:
d3:24:c8:4d:e1:2e:8e:52:f1:76:da:a4:5d:64:f9:4d:64:b0:
91:c3:72:e4:dd:8c:94:ba:48:a3:d0:cb:d7:4f:4c:e2:16:84:
e3:d5:fd:79:48:43:4d:2c:5f:7d:08:83:46:1d:12:59:2c:f3:
3a:e2:60:c7:d2:31:1f:95:ee:fe:0d:78:7f:a4:d7:26:aa:39:
92:a3:d0:b4:cd:40:19:3d:ed:9e:63:3d:83:8e:4c:97:30:1d:
98:55:cf:f1:a9:49:79:8f:5f:49:44:4e:b4:04:7a:fa:34:69:
90:e8:d9:5a:f6:69:a2:3c:31:0a:13:dd:20:5f:d3:e8:0c:ce:
d9:83:88:2b:47:b4:e5:ff:45:fe:e3:60:d3:8f:a4:46:13:de:
d7:64:35:d0:dc:75:bc:3e:6c:40:78:38:eb:b4:09:29:6e:33:
b7:8b:d2:d7:9e:34:74:2e:48:65:04:ca:e8:c8:49:6a:34:56:
61:b4:84:17:22:34:df:10:c5:c5:60:63:fd:e4:bd:e1:29:a8:
7d:57:04:5d:9b:c0:a9:24:ca:bc:72:ce:70:87:2f:de:ee:ca:
85:d2:42:58:44:16:ee:da:73:d1:98:59:dc:eb:6c:43:5b:65:
f8:2b:03:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org