Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/5E0FF05A1C8811EC996FCB76D8A014CE.roa
File: 5E0FF05A1C8811EC996FCB76D8A014CE.roa (raw, json)
Hash identifier: Vk5ASQFgQjjsZEjyJ+X43+pLR30VafAKoJRgMFTM8vk=
Subject key identifier: 65:92:BD:3E:B3:9F:FF:78:63:96:CF:1C:66:80:0B:9E:F7:62:22:9C
Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial: 0322
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/5E0FF05A1C8811EC996FCB76D8A014CE.roa
Signing time: Thu 23 Sep 2021 16:07:36 +0000
ROA not before: Thu 23 Sep 2021 16:07:31 +0000
ROA not after: Tue 30 Sep 2031 16:07:31 +0000
asID: 36969
IP address blocks: 41.87.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 802 (0x322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Validity
Not Before: Sep 23 16:07:31 2021 GMT
Not After : Sep 30 16:07:31 2031 GMT
Subject: CN=614ca648-d10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:94:b8:e8:bd:7c:27:d6:5a:07:ec:11:b9:
e8:6e:ce:49:71:61:14:5d:ec:c9:f8:75:97:45:b9:
10:cc:36:6a:4d:d5:ee:54:d8:ec:98:a5:8d:d2:b7:
da:34:88:90:fe:8d:87:d1:d3:63:dc:d1:52:32:b5:
a8:13:87:56:14:ef:10:8e:53:e2:05:a5:35:4a:71:
1f:38:1b:97:97:b6:20:cb:ef:2d:cf:b7:66:99:78:
99:65:86:76:a7:cc:d8:55:d9:1d:27:ac:de:5d:85:
5a:7b:f0:62:21:e7:07:52:5f:a8:87:d2:d0:27:a6:
77:e9:6d:32:70:95:bc:bf:74:a9:11:77:94:ca:80:
4a:82:f5:6e:0e:7c:bb:30:64:26:42:5a:aa:cd:7b:
89:00:5c:cb:05:7d:8a:67:7e:4e:e9:51:45:61:69:
a2:77:77:ae:5d:03:9d:a1:bb:76:b0:89:59:a9:e3:
f7:c9:84:cc:04:dc:ce:db:49:01:a3:f8:89:38:5a:
70:a9:fe:6c:2a:4a:19:3b:d8:e6:e4:f4:0d:87:1f:
a7:46:61:ba:a5:ed:1f:1f:00:1b:ec:e6:9f:ff:3c:
65:b8:3e:7c:1f:02:72:5c:37:80:be:96:59:b5:b8:
56:fc:9b:f7:77:e1:8c:f8:e7:c7:5e:03:4e:64:d2:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:BD:3E:B3:9F:FF:78:63:96:CF:1C:66:80:0B:9E:F7:62:22:9C
X509v3 Authority Key Identifier:
keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/5E0FF05A1C8811EC996FCB76D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.87.6.0/24
Signature Algorithm: sha256WithRSAEncryption
55:14:10:ec:88:72:2e:18:87:a1:dd:fa:60:da:d3:39:81:1c:
45:b8:60:2b:1b:31:db:50:2c:46:97:50:0a:b6:30:5a:a7:3d:
73:69:0a:10:25:a2:6c:dc:c0:bf:83:7b:e8:f3:c4:e1:04:d3:
a5:c1:ed:5a:0a:e3:fb:f6:ad:58:e4:69:e5:a6:bf:fa:34:0a:
cd:3b:1b:13:9e:76:32:95:75:be:ce:dc:4d:0f:50:1e:82:f7:
23:6b:07:56:09:f7:ed:f9:ae:88:07:be:92:5d:68:92:93:e2:
ad:f8:40:90:53:d4:ba:18:20:04:54:46:65:f6:50:46:2f:ea:
33:45:25:8d:1b:da:56:38:be:25:43:bc:43:8c:97:26:dd:68:
f6:07:69:a7:66:32:04:c1:43:2b:3a:8d:b6:95:37:76:e9:51:
2b:46:62:2a:ef:94:bc:4b:cd:62:a5:7f:0b:3c:6f:5e:3e:db:
ca:03:75:08:9e:6b:16:96:23:ff:72:d0:26:fd:3c:2d:2a:ad:
5e:0f:ee:78:8e:ab:5f:5c:b4:c1:ab:b1:43:ff:68:ad:eb:d6:
64:5d:57:76:7e:32:0f:2f:0c:05:aa:81:95:e0:84:e1:c1:e3:
fe:69:2f:e8:47:17:bf:25:58:77:4f:2b:6e:32:fd:e9:e4:35:
95:64:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:42:44 2024 by rpki-client on console-ams.rpki-client.org