Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/51DD5CFA362311EC86345D40D8A014CE.roa
File: 51DD5CFA362311EC86345D40D8A014CE.roa (raw, json)
Hash identifier: ZOjl1c6p5MEg7MhRsQboW+KWuk6lGFrNRsr8eT5zSuA=
Subject key identifier: 63:91:C1:01:85:15:C7:77:FC:FF:01:86:A8:E6:30:10:00:96:65:4F
Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial: 0347
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/51DD5CFA362311EC86345D40D8A014CE.roa
Signing time: Tue 26 Oct 2021 06:09:47 +0000
ROA not before: Tue 26 Oct 2021 06:09:41 +0000
ROA not after: Fri 31 Oct 2031 06:09:41 +0000
asID: 36969
IP address blocks: 41.87.0.0/20 maxlen: 20
41.87.16.0/21 maxlen: 21
41.87.24.0/22 maxlen: 22
41.87.26.0/23 maxlen: 23
41.87.28.0/22 maxlen: 22
41.87.28.0/23 maxlen: 23
41.221.96.0/22 maxlen: 22
41.221.100.0/22 maxlen: 22
41.221.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 839 (0x347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Validity
Not Before: Oct 26 06:09:41 2021 GMT
Not After : Oct 31 06:09:41 2031 GMT
Subject: CN=61779bab-fa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:9b:14:87:a3:80:5f:4b:bc:94:0e:7c:76:
13:93:13:9f:f2:dc:28:dd:23:98:1c:43:57:e2:cb:
82:ff:f9:15:13:a4:fa:17:0f:c4:18:7a:d7:8a:66:
fa:8a:65:3f:a5:1e:70:72:70:11:d6:c2:50:78:44:
dd:34:59:5b:b9:5e:c1:95:b4:52:7d:80:10:0a:d4:
23:83:24:d6:5b:e3:67:f7:02:d5:ba:27:2c:d4:29:
0c:d2:aa:1a:d0:da:d0:e6:ff:ff:69:ec:0c:78:cd:
fc:f4:c9:01:75:b9:2f:49:fa:26:aa:d6:45:18:9b:
3b:d5:c4:ca:fb:a7:2a:f1:0f:02:d5:e9:bf:95:a7:
ba:5c:a3:e3:65:99:8a:c4:87:03:5c:fc:d3:1d:e1:
17:4e:c7:3c:f5:cc:02:a3:45:e5:62:bb:31:ba:f1:
5f:95:c8:06:f2:40:d5:25:af:05:1c:5f:97:b7:72:
bf:60:4b:4e:bf:ac:9b:9b:33:10:ca:49:c2:3a:f5:
1a:32:78:27:80:16:27:9e:3e:ec:6a:65:08:2e:8a:
95:62:e2:f5:96:64:0c:bc:07:de:21:43:a7:e0:8d:
16:6e:8c:61:be:9f:0b:c9:ac:0f:1a:b0:5c:39:fd:
a2:a9:fb:6e:75:4b:7f:38:c7:10:97:e0:5e:8c:d7:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:C1:01:85:15:C7:77:FC:FF:01:86:A8:E6:30:10:00:96:65:4F
X509v3 Authority Key Identifier:
keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/51DD5CFA362311EC86345D40D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.87.0.0/19
41.221.96.0/20
Signature Algorithm: sha256WithRSAEncryption
05:93:6a:13:84:fb:ee:32:89:c7:83:dc:0c:0e:4e:6f:f4:bd:
65:85:6e:64:75:5a:3a:72:e7:e2:c4:87:10:b2:7c:28:01:e4:
ec:e0:4d:99:54:57:02:23:87:35:61:04:7d:2b:7d:03:dc:4b:
30:18:21:46:e6:12:63:33:af:6f:87:aa:26:56:90:41:a6:c0:
53:8e:72:84:d4:5c:ca:0f:0d:f7:5f:55:bf:3e:25:22:ff:12:
1b:29:c4:af:e5:5d:aa:95:f4:d8:ca:66:6e:89:45:62:a2:db:
1a:7c:dd:c2:1a:f7:5c:a0:49:0b:f6:e9:45:2e:34:c4:7e:37:
07:c8:8f:ee:03:47:fe:11:6a:02:af:df:68:5d:ca:8e:44:8f:
3b:dc:b5:75:1e:e1:f3:df:8d:42:12:9e:99:d7:80:92:76:8e:
98:95:18:5f:f7:4b:df:57:af:87:5a:ef:8c:58:e8:a5:59:9f:
95:bf:1e:44:f9:e6:bb:0e:a6:ee:09:0a:dc:1d:9e:ca:a4:52:
4c:4f:4e:49:9a:84:7b:27:65:36:2a:e7:27:01:3b:fe:c8:5e:
37:51:87:45:54:88:7e:3e:b6:42:ef:56:69:89:91:be:e0:d8:
40:d9:93:48:da:93:0b:ab:ff:86:42:6b:e0:21:2c:98:05:41:
73:5c:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:09 2024 by rpki-client on console-ams.rpki-client.org