Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/46D379D6D60111E9987BDB3CF8AEA228.roa
File: 46D379D6D60111E9987BDB3CF8AEA228.roa (raw, json)
Hash identifier: EaeuaXxaVgEs1mraKDTXr0ePr4MAWypJ9w34+wVaZVA=
Subject key identifier: 7B:A2:5D:0F:81:F1:50:57:94:98:0B:C8:6A:49:AC:38:4F:B0:E1:97
Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial: 04
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/46D379D6D60111E9987BDB3CF8AEA228.roa
Signing time: Fri 13 Sep 2019 08:34:19 +0000
ROA not before: Fri 13 Sep 2019 08:34:14 +0000
ROA not after: Fri 13 Sep 2024 08:34:14 +0000
asID: 36969
IP address blocks: 41.87.0.0/19 maxlen: 19
41.87.0.0/21 maxlen: 21
41.87.8.0/21 maxlen: 21
41.87.16.0/22 maxlen: 22
41.87.24.0/23 maxlen: 23
41.87.26.0/24 maxlen: 24
41.87.29.0/24 maxlen: 24
41.87.30.0/24 maxlen: 24
41.87.31.0/24 maxlen: 24
41.221.96.0/20 maxlen: 20
41.221.96.0/23 maxlen: 23
41.221.96.0/24 maxlen: 24
41.221.100.0/23 maxlen: 23
41.221.102.0/23 maxlen: 23
41.221.104.0/24 maxlen: 24
41.221.105.0/24 maxlen: 24
41.221.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Validity
Not Before: Sep 13 08:34:14 2019 GMT
Not After : Sep 13 08:34:14 2024 GMT
Subject: CN=5d7b548a-d365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:58:41:67:f1:d8:36:25:59:ee:13:3f:29:
a8:8b:94:84:6e:3a:ed:34:be:30:29:79:a9:8b:e8:
0f:7f:de:a7:d7:6a:96:8c:f4:a8:93:99:69:1b:54:
68:df:a6:7a:f9:46:67:4a:36:7b:49:df:76:1a:4b:
01:a5:74:df:05:0c:78:c0:a1:76:7e:30:82:cb:ec:
63:59:98:98:97:89:6f:74:25:0c:86:7b:26:a0:65:
ab:a4:64:6b:36:f4:8d:c1:bb:a7:10:85:a5:6e:cb:
b1:61:ca:c0:41:41:ca:c1:ca:b3:22:d2:d6:61:79:
ef:66:92:96:a3:d7:15:7b:76:2c:05:e0:92:97:d0:
a3:a2:6f:35:06:65:68:4a:8f:b0:1a:cb:e4:e9:0a:
4d:5a:a1:3e:5c:9d:6d:e6:fb:18:54:9d:fa:d1:d2:
d2:7c:a5:5d:b3:b5:25:54:dc:0d:05:4c:eb:05:e9:
51:d4:80:e8:df:13:8d:60:33:7d:24:a5:6e:3e:28:
b2:4c:26:f6:75:cd:13:b4:e9:43:a9:fe:f7:0d:dd:
85:d3:53:96:6d:da:2f:53:44:b5:05:c0:06:dd:11:
d8:d9:a5:57:7f:59:99:e9:76:38:21:95:a1:74:f9:
c8:2f:28:ce:73:8d:6a:e0:65:6c:60:35:f1:76:33:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:5D:0F:81:F1:50:57:94:98:0B:C8:6A:49:AC:38:4F:B0:E1:97
X509v3 Authority Key Identifier:
keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/46D379D6D60111E9987BDB3CF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.87.0.0/19
41.221.96.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:3b:ce:d9:51:71:ef:38:5a:e5:dd:dc:13:cf:b5:0c:eb:e1:
97:77:e1:71:e9:20:19:80:78:13:b1:8e:f5:32:27:ad:2a:87:
4a:17:23:92:8f:da:85:fb:81:6b:3f:68:c2:32:f0:41:f9:be:
00:af:05:d6:04:22:7d:16:0b:b8:ad:82:a5:6d:f0:84:84:a2:
df:56:91:30:31:b9:2e:88:ad:20:db:4a:a4:93:f7:12:ab:5d:
a9:d0:8c:f4:3c:79:e7:d9:69:7c:c6:d9:20:05:ac:9b:9b:f6:
a0:cf:cc:40:45:11:a0:64:3b:13:48:47:ac:86:ce:3d:56:a6:
9b:a1:6e:cf:c6:d4:d1:82:f6:fd:c2:47:99:f2:bc:f7:a4:0e:
1e:73:6b:ae:2f:91:52:61:32:4a:de:98:b4:ce:1a:7a:43:e8:
72:2d:65:c3:07:58:c9:ff:c2:c8:a7:35:80:dd:c0:7f:b0:bd:
fb:2b:b8:2c:aa:d8:00:31:16:d8:c2:8f:6b:43:39:a0:0d:3f:
0f:c2:ae:0c:20:39:98:97:5f:56:35:5f:6c:af:61:8d:5c:cf:
db:c1:02:2d:52:b4:7a:50:de:84:99:ad:9a:0a:58:ea:85:5b:
4c:48:32:f8:47:5f:6a:89:63:61:19:56:32:95:fe:37:c2:45:
03:1b:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:09 2024 by rpki-client on console-ams.rpki-client.org