Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/5332D8466BB811EF83EA32BF762E951A.roa
File: 5332D8466BB811EF83EA32BF762E951A.roa (raw, json)
Hash identifier: jdYZ8eJRwn/ctfymhhHK/WcszGR953ues1rTTiUSUv8=
Subject key identifier: 30:13:64:06:6F:1C:1D:52:92:55:A7:80:E6:70:FE:60:C4:61:C8:C5
Certificate issuer: /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial: 0216
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/5332D8466BB811EF83EA32BF762E951A.roa
Signing time: Thu 05 Sep 2024 18:54:49 +0000
ROA not before: Thu 05 Sep 2024 18:54:45 +0000
ROA not after: Fri 05 Sep 2025 18:54:45 +0000
asID: 37276
IP address blocks: 41.78.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Validity
Not Before: Sep 5 18:54:45 2024 GMT
Not After : Sep 5 18:54:45 2025 GMT
Subject: CN=66d9fe79-6849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:40:67:56:ac:8f:3c:73:1b:b5:17:d4:07:
04:da:05:81:46:d3:73:8d:ae:84:ad:b6:e8:19:57:
75:a5:7b:2d:04:a9:57:a7:f3:f2:a9:90:4e:f4:cf:
d6:eb:73:e7:bc:fb:6f:9d:93:7f:55:ad:e5:6e:36:
5b:e6:ca:c0:77:44:4a:94:bf:43:44:4b:43:da:13:
fb:08:54:61:cd:05:42:39:61:9e:1c:84:03:01:76:
8f:48:7c:45:05:10:25:fc:7f:1c:f4:b7:06:34:73:
f9:55:ee:e5:dc:52:7f:ac:e7:75:f8:5a:5c:56:e2:
27:de:2c:db:be:7a:06:d4:48:56:ad:b1:6c:da:3d:
2a:78:64:a9:1c:30:8c:cc:59:67:50:b9:5e:df:6f:
dc:c3:40:41:d8:6b:ad:ba:f0:dd:76:54:8e:99:cf:
15:af:5c:7c:ce:e5:db:09:67:a9:04:6a:68:0c:a3:
3c:8c:60:7a:fa:3b:71:78:25:b4:a1:46:fb:13:bd:
d2:f6:4d:01:4c:78:73:32:a1:44:31:91:04:7f:10:
35:bb:db:b5:39:71:53:79:0c:93:3e:b6:1f:44:72:
82:90:24:01:f6:1c:94:d4:11:17:85:28:76:5d:93:
4c:df:36:91:9a:0c:ef:88:a0:0e:ca:19:6d:e8:c1:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:64:06:6F:1C:1D:52:92:55:A7:80:E6:70:FE:60:C4:61:C8:C5
X509v3 Authority Key Identifier:
keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/5332D8466BB811EF83EA32BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.200.0/22
Signature Algorithm: sha256WithRSAEncryption
23:38:95:08:46:8a:6b:7c:74:cc:24:6a:27:68:5b:9b:be:53:
cf:89:d6:13:87:fa:36:58:0c:54:d5:3f:21:7a:c3:56:fe:63:
76:c8:8b:b8:1f:be:d8:e9:10:27:4a:8e:1c:9c:30:b5:6d:10:
02:05:5d:2c:77:04:f3:65:df:1e:e6:2b:62:35:88:71:e3:2c:
08:4c:e5:ae:b7:a2:6c:b3:d0:04:74:d7:ce:fb:84:39:99:6a:
fb:b2:4f:84:42:f7:a4:5d:a2:4d:9e:3c:e2:29:bd:ef:af:7a:
f8:d3:f7:86:15:5f:32:f5:01:81:52:f5:1e:f7:e6:59:db:9f:
a2:8d:01:c2:23:cb:2b:97:a4:44:2d:f4:6d:a9:e5:19:ba:7d:
67:19:4d:cf:48:1c:71:6c:07:69:91:d5:ae:3f:25:25:09:2f:
08:66:37:78:98:5b:87:a7:65:37:2e:7f:03:d9:42:13:e5:13:
17:14:4e:e8:a6:05:56:11:3d:ac:e7:4e:6a:1a:fc:c6:d9:a7:
b4:c6:45:60:d2:2e:93:81:fa:d0:c2:4f:28:ab:13:78:ec:bb:
72:35:be:b4:81:44:62:85:6d:ba:07:39:34:f5:bc:7f:24:a3:
db:c4:11:da:f0:fc:1b:6f:f3:ca:8b:2a:5f:c4:18:dc:66:ea:
74:3a:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:28 2024 by rpki-client on console-ams.rpki-client.org