Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/77F17762ACB511EAB011A45EF8AEA228.roa
File: 77F17762ACB511EAB011A45EF8AEA228.roa (raw, json)
Hash identifier: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=
Subject key identifier: BD:ED:A8:47:D6:F2:49:34:1C:EB:62:AC:9D:B2:29:39:00:BC:5E:59
Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial: 0134
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/77F17762ACB511EAB011A45EF8AEA228.roa
Signing time: Fri 12 Jun 2020 14:03:20 +0000
ROA not before: Fri 12 Jun 2020 14:03:15 +0000
ROA not after: Sun 30 Jun 2030 14:03:15 +0000
asID: 36969
IP address blocks: 41.87.8.0/22 maxlen: 22
41.87.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Validity
Not Before: Jun 12 14:03:15 2020 GMT
Not After : Jun 30 14:03:15 2030 GMT
Subject: CN=5ee38b27-9b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:34:6c:6f:1a:fa:a7:87:6b:86:4b:79:72:
bc:9b:a7:36:2c:57:94:97:56:82:89:10:9a:bf:26:
57:26:35:6e:b1:ea:d3:94:75:55:75:0e:ca:f5:6e:
07:3e:53:b5:8e:9b:86:8b:e5:63:ec:ea:e4:1c:da:
90:42:d1:9a:2c:56:20:f8:4f:ca:dd:e2:1b:6b:05:
e2:8a:b5:4a:e6:6e:11:a6:ab:c8:5f:a7:3a:66:0d:
cf:a6:83:00:3f:aa:94:50:c1:ab:3e:e5:e8:87:22:
0e:32:ed:80:33:af:9c:93:4b:b6:34:1a:71:61:7c:
e3:04:2a:82:1d:87:45:d3:84:b4:1f:bd:fd:aa:1c:
5a:31:bf:62:e6:95:63:2b:ce:ad:c5:ed:da:a2:a2:
76:ea:cd:13:f6:60:2f:e3:a1:72:47:f5:e4:69:4d:
54:dd:02:79:44:6c:df:58:1b:60:c8:da:07:9d:da:
4f:f6:5a:c4:bc:a3:8c:38:55:3e:0b:4a:23:3e:d4:
03:d4:96:c7:6e:9f:71:b8:84:be:5e:9a:e1:b7:46:
ad:5b:93:a3:82:bc:6e:8e:c8:f1:af:79:a4:22:af:
d0:d4:4e:a1:7d:44:9a:ec:05:13:22:e1:a5:3a:d0:
4b:42:1a:2a:72:23:d4:06:dc:fc:01:b4:ff:96:c4:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:A8:47:D6:F2:49:34:1C:EB:62:AC:9D:B2:29:39:00:BC:5E:59
X509v3 Authority Key Identifier:
keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/77F17762ACB511EAB011A45EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.87.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:49:4e:41:39:bf:dc:3c:c8:3c:ab:49:b9:bb:d1:cb:61:ff:
c1:ed:ba:43:4b:f4:e5:df:1c:46:bf:31:3c:b3:62:98:4c:ae:
7c:83:4c:16:05:33:24:58:17:db:5e:34:10:08:7f:ba:42:85:
47:be:d8:09:5e:1f:1b:e6:eb:a6:07:81:d0:92:fb:cc:10:7d:
35:42:05:9b:5c:6f:14:bf:2b:e1:35:49:c0:dd:1e:36:20:18:
c3:dc:74:f8:1d:74:a1:71:65:67:14:e9:2e:0b:df:bf:2c:fb:
94:33:7b:72:4f:b3:64:8d:50:d8:66:47:08:59:f1:fc:59:f8:
60:ff:8e:91:11:4d:02:0e:4d:72:b0:1c:44:0e:de:b2:99:ae:
14:d2:92:98:8d:a0:22:dd:93:36:2c:e4:8b:88:19:23:e7:ed:
e8:0c:5a:7a:fd:14:e4:e5:de:2f:79:f1:87:31:bf:e2:aa:b4:
0e:2c:62:ef:f5:8b:6f:11:d8:bc:ef:45:72:55:67:36:a3:36:
51:1b:38:65:cb:3f:56:48:dc:3f:81:13:fa:bd:3b:5c:3d:44:
eb:49:f3:0b:ee:89:a2:67:c4:de:66:3b:51:d5:ef:33:cf:a7:
fa:b7:80:aa:78:4f:5f:25:aa:90:46:14:9e:6c:7f:e2:f8:cd:
be:a2:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:42 2024 by rpki-client on console-fra.rpki-client.org