Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/5F1AE2F2E31111EC86A3FABCF1222468.roa
File: 5F1AE2F2E31111EC86A3FABCF1222468.roa (raw, json)
Hash identifier: DVLDK7Bq3vzttwETTSKuQ/18Eyh3SizNAsg7pvEdgZ0=
Subject key identifier: C1:CC:A2:FD:02:48:70:6A:1A:AE:44:91:65:90:56:4F:8F:77:54:F2
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 09
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/5F1AE2F2E31111EC86A3FABCF1222468.roa
Signing time: Fri 03 Jun 2022 07:47:09 +0000
ROA not before: Fri 03 Jun 2022 07:46:58 +0000
ROA not after: Thu 03 Jun 2032 07:46:58 +0000
asID: 37294
IP address blocks: 41.222.184.0/21 maxlen: 24
196.216.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jun 3 07:46:58 2022 GMT
Not After : Jun 3 07:46:58 2032 GMT
Subject: CN=6299bc7d-1490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:ae:2b:8b:7c:14:6a:f3:b0:0f:9d:b4:fc:
07:02:9e:0b:d7:76:4a:55:b0:f5:9b:d9:3e:22:04:
22:fd:a9:85:a7:6f:e4:07:85:72:f6:9c:df:cf:d1:
ae:3c:8f:43:e7:89:d9:41:dc:3e:36:2b:e8:ee:c9:
06:fa:4b:43:00:17:0c:45:7d:87:82:5f:6f:7f:86:
26:60:46:da:75:f7:e4:fa:bd:44:74:4e:2d:ec:00:
2e:be:c9:dd:a4:9b:eb:35:01:71:56:17:d9:d5:ab:
89:9e:39:9d:21:f2:c1:cc:bb:6f:00:dd:a8:2e:77:
f3:81:e8:19:91:4e:f9:1d:e3:7b:ba:4e:10:be:c3:
e5:e1:4e:ea:ce:8b:0a:34:4a:8f:77:71:7e:c4:eb:
96:f9:2f:11:84:3d:94:b2:37:e5:af:58:f0:8a:03:
13:50:d8:81:fe:cd:87:c2:da:a0:2f:31:b9:51:de:
b9:c2:a5:28:b5:3a:87:61:c6:b8:62:f2:53:8f:1e:
85:48:c4:21:d4:32:f3:f1:49:fd:68:37:e5:b6:09:
a0:4d:1e:f2:1e:b8:f3:d2:cd:43:27:f6:57:84:f4:
81:a1:f4:64:f1:6f:51:94:c9:f9:d6:03:39:fa:9e:
69:43:42:19:d6:62:7f:af:d4:8d:19:b1:03:23:69:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:A2:FD:02:48:70:6A:1A:AE:44:91:65:90:56:4F:8F:77:54:F2
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/5F1AE2F2E31111EC86A3FABCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.184.0/21
196.216.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:f4:72:0e:e3:87:25:a4:94:1f:cc:f5:71:76:1b:91:51:72:
51:18:32:3d:66:4e:fe:72:48:36:23:73:d8:04:2a:dd:2f:d6:
cf:4e:f6:7e:b0:e6:2b:9e:b9:cb:41:bc:84:68:7f:c2:52:9d:
30:c6:fd:e9:b2:cc:76:b0:4c:72:c5:cf:a9:52:3a:b7:29:c1:
62:e0:35:6d:1e:d1:eb:21:10:97:9c:de:48:ac:00:06:a0:ac:
3e:86:3a:71:c4:b8:1a:a6:bb:43:95:61:74:4d:9a:2e:a1:67:
48:55:a1:cc:32:11:87:dd:cd:bc:01:48:ae:8e:1f:12:94:2a:
1e:ca:12:39:36:af:52:a0:de:31:61:fa:e4:f2:d6:e5:4e:b8:
05:c6:b1:61:6d:a4:94:c1:24:cd:ca:28:5d:89:1c:a2:55:f8:
18:5d:5f:cc:9d:93:a3:8f:2e:ea:da:8d:3f:dc:02:bc:24:05:
92:c3:7e:63:bd:78:e8:a8:8a:ed:20:6b:24:25:63:5e:13:98:
8f:be:8b:3e:2a:c1:8f:a8:b7:2f:6b:91:14:d0:b7:1d:ad:e8:
19:d8:25:72:12:ab:5e:2b:1e:3a:d9:41:53:bc:70:17:7c:78:
5e:23:6d:eb:4b:29:61:b6:e6:b4:d5:60:97:e8:90:1f:a5:f6:
6b:a7:a8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:33 2024 by rpki-client on console-fra.rpki-client.org