Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/1A427EB8216911EF830131057DDC24C2.roa
File: 1A427EB8216911EF830131057DDC24C2.roa (raw, json)
Hash identifier: /FE9YVa8jHhpZkpXQnpV9/OOWPfHFAhwKy6l7Mkx+ME=
Subject key identifier: DE:E8:CF:07:DD:42:D2:1C:13:CA:F0:9A:BD:7D:E2:49:96:70:BE:4C
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 0190
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/1A427EB8216911EF830131057DDC24C2.roa
Signing time: Mon 03 Jun 2024 05:21:17 +0000
ROA not before: Mon 03 Jun 2024 05:21:13 +0000
ROA not after: Tue 01 Jan 2030 05:21:13 +0000
asID: 37684
IP address blocks: 41.242.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Validity
Not Before: Jun 3 05:21:13 2024 GMT
Not After : Jan 1 05:21:13 2030 GMT
Subject: CN=665d52cd-1fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:3d:63:2b:d4:72:dc:b4:8d:dd:06:8b:cd:
1e:fb:50:97:43:7f:5b:de:a4:24:30:b9:1e:3a:d0:
d4:4a:e2:67:1c:5e:69:72:36:bc:13:4b:06:91:fb:
77:0b:9e:aa:cd:21:62:84:1f:6d:6f:3d:af:59:1e:
8f:1b:5e:a2:d7:b7:30:13:c3:10:12:6d:7b:93:cb:
f9:62:aa:0d:0b:1d:fc:ab:96:7b:17:13:69:10:88:
19:54:64:3c:e7:f9:19:bd:7e:3d:18:d9:55:21:7f:
c6:d3:8f:34:14:5e:4c:86:f7:ad:c1:a6:5f:ba:6a:
af:0d:be:47:12:a0:1b:e3:60:13:3e:55:b3:18:b7:
b5:72:0f:0d:af:86:5c:fa:3c:2a:8f:b1:d5:37:e6:
1e:9b:bc:74:13:6e:8d:61:79:96:3e:0b:9c:c1:a1:
9a:03:1a:8b:48:5e:68:2c:75:de:f5:5a:0f:d6:78:
28:6e:22:9b:db:47:8f:4f:fc:71:08:79:50:d8:4d:
f3:1a:ee:69:1f:d0:7a:d2:e8:9a:99:a3:fd:f6:b1:
e1:fb:7c:0d:db:b5:83:c9:8d:1e:1e:68:8d:c9:f7:
b9:84:65:2c:ab:b9:bc:0a:30:29:ce:25:a8:e1:43:
88:61:94:63:3b:63:41:25:bd:d8:26:a8:1a:f4:27:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E8:CF:07:DD:42:D2:1C:13:CA:F0:9A:BD:7D:E2:49:96:70:BE:4C
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/1A427EB8216911EF830131057DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.0.0/24
Signature Algorithm: sha256WithRSAEncryption
24:76:2d:c5:78:ab:b4:80:f9:08:46:2e:bf:43:07:64:28:6e:
c3:9f:60:65:b5:cc:37:da:37:09:4d:d6:cf:5b:1f:3a:8b:6e:
6f:2c:33:cb:7b:2b:20:ad:a4:aa:c1:13:94:b5:9f:bc:d5:8a:
13:d6:ef:57:a6:eb:9a:af:bc:a0:49:9c:4d:84:03:d9:fe:f1:
f8:e2:c9:70:35:c9:b3:a3:3c:9d:4f:d6:7c:61:b2:84:23:fb:
f3:01:79:aa:76:c4:83:26:b4:3a:fc:ee:95:63:80:c8:6a:1e:
08:74:a0:48:94:89:9a:3f:e9:e9:7e:73:f6:c4:9a:33:15:a5:
26:f5:9b:4b:8f:6b:29:ed:c9:91:c9:6f:82:a5:54:38:4d:34:
30:0d:9c:99:7f:4e:15:69:c7:56:f4:92:dd:5d:ef:49:ad:0f:
42:1d:44:3d:e6:3b:e0:bc:cd:b0:ef:65:45:89:bf:07:8c:89:
56:95:90:01:7c:43:72:46:3d:1e:13:cd:a5:ae:f9:96:9c:4d:
fa:19:33:7a:21:43:80:48:68:b0:69:7c:d2:a6:14:a4:ef:2c:
69:cd:71:28:7e:44:bf:bb:02:b9:d0:08:71:66:39:de:ca:c2:
7d:98:a3:c9:ce:3a:41:e4:f0:60:58:62:a3:09:2e:83:c5:64:
3a:8c:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:20 2024 by rpki-client on console-fra.rpki-client.org