Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/7F90265C003411EC9AEFCB7BD8A014CE.roa
File: 7F90265C003411EC9AEFCB7BD8A014CE.roa (raw, json)
Hash identifier: Us9bdbPalZ+yx1ibe5L/RTGvBCGXXo3x0b9dZX+Z/FM=
Subject key identifier: F3:E0:10:AC:4B:C1:74:D1:7F:17:F1:44:B5:16:FB:1F:05:18:06:07
Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial: 02FA
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/7F90265C003411EC9AEFCB7BD8A014CE.roa
Signing time: Wed 18 Aug 2021 14:57:33 +0000
ROA not before: Wed 18 Aug 2021 14:57:29 +0000
ROA not after: Sun 31 Aug 2031 14:57:29 +0000
asID: 36969
IP address blocks: 41.87.16.0/23 maxlen: 23
41.87.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Validity
Not Before: Aug 18 14:57:29 2021 GMT
Not After : Aug 31 14:57:29 2031 GMT
Subject: CN=611d1fdd-445e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:b2:03:2d:42:40:af:78:bf:3b:a5:36:d0:
71:a7:9d:ae:6c:ce:f8:96:66:01:8e:38:5b:1c:39:
f4:73:73:61:10:77:83:cf:04:eb:96:ea:3b:2e:2e:
09:02:c1:de:99:d1:2c:1a:31:00:ad:53:0c:e4:d3:
66:8b:bf:89:2d:01:a8:12:77:70:1f:58:2d:8c:33:
ad:84:9f:d5:33:8b:2c:58:55:38:7b:b0:e0:fc:3d:
b8:9c:a1:e1:5d:a5:3a:74:5e:3b:36:e0:45:4a:94:
e8:a0:af:43:61:ea:b8:d1:22:23:d6:2c:cf:2d:8b:
e3:ef:de:b3:87:0c:52:ac:3d:cb:d6:af:90:87:15:
68:10:73:16:d9:de:e8:44:16:99:31:8a:d6:29:d4:
37:b7:9d:fa:25:b8:70:80:2e:06:50:fb:52:bd:e6:
da:66:da:a9:74:2f:d2:a7:08:04:b9:24:08:04:ac:
90:12:30:cd:df:13:1f:17:37:5d:9d:30:ff:3c:17:
27:8a:e3:98:7d:6d:2d:b8:05:48:3b:8f:0b:7b:c0:
38:71:2e:8e:4c:a0:db:22:fe:6e:78:50:5a:98:9c:
02:9d:1f:16:d3:4d:11:83:9b:51:53:5e:e4:3d:70:
a8:ca:f0:a1:38:4e:36:ab:42:35:35:06:63:41:1f:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E0:10:AC:4B:C1:74:D1:7F:17:F1:44:B5:16:FB:1F:05:18:06:07
X509v3 Authority Key Identifier:
keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/7F90265C003411EC9AEFCB7BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.87.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:e7:d4:37:f7:1e:3c:63:7b:2a:4c:43:1c:62:69:02:61:c8:
a0:b8:c2:0e:8e:41:de:53:00:de:f3:22:fc:f9:b9:41:98:26:
d5:76:95:a8:e9:44:d6:e2:21:87:72:fd:d3:86:cc:50:56:10:
bb:6a:32:d9:57:c0:07:d9:cd:69:19:0a:2b:61:5e:25:55:5d:
10:f4:f4:cc:ea:d9:5f:fc:40:c3:49:c4:6d:41:21:a1:96:00:
4e:07:46:6e:c1:31:5d:c3:a6:2f:55:61:5d:c9:48:eb:25:10:
13:1c:a1:27:53:f4:f6:75:03:26:ca:58:65:30:c6:18:52:df:
58:9e:12:5c:2a:05:7a:0c:55:30:b7:33:2d:c1:07:4c:b7:a2:
a8:44:27:82:9e:90:dc:33:cf:25:76:2b:fc:df:d1:02:d6:2a:
e6:e8:bd:49:77:1e:15:8e:af:15:7a:dc:bd:6c:20:ef:2c:d4:
17:61:38:69:ae:17:91:8d:67:5c:6c:56:a9:98:c0:a6:36:42:
67:de:ee:45:4c:27:54:13:ed:b1:94:c0:72:a6:84:66:ff:cc:
6f:ca:5a:bb:89:f5:da:ea:a1:54:bb:eb:ce:7d:32:5d:31:f1:
6a:5a:23:f6:32:8a:1a:23:bc:36:62:ba:c9:61:02:64:3f:91:
32:34:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:42:44 2024 by rpki-client on console-ams.rpki-client.org