Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/BF3F3B0E216911EFAB4FB3097DDC24C2.roa
File: BF3F3B0E216911EFAB4FB3097DDC24C2.roa (raw, json)
Hash identifier: XcpHVmzBKOmbyKD8fxSft+zKQ7P+pByDMjIrDjuzNus=
Subject key identifier: AF:E6:FC:A7:C7:1F:F3:1E:50:85:84:AF:A2:10:6F:F7:00:62:DC:A3
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 0196
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/BF3F3B0E216911EFAB4FB3097DDC24C2.roa
Signing time: Mon 03 Jun 2024 05:25:54 +0000
ROA not before: Mon 03 Jun 2024 05:25:50 +0000
ROA not after: Tue 01 Jan 2030 05:25:50 +0000
asID: 37684
IP address blocks: 41.242.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Validity
Not Before: Jun 3 05:25:50 2024 GMT
Not After : Jan 1 05:25:50 2030 GMT
Subject: CN=665d53e1-620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:b1:90:29:cc:5c:a9:c1:c0:00:cd:62:bf:
4a:7d:51:6f:ed:b8:fa:d8:86:eb:d3:d0:e2:d6:81:
a8:81:bc:a7:60:a3:da:ce:7d:b6:cf:a6:72:fd:ac:
ca:33:37:ee:77:4b:f6:7c:e4:5e:7d:a7:d5:19:33:
99:55:3b:88:e2:af:f2:bc:74:82:14:e4:2b:37:99:
d6:fc:56:a6:87:1e:98:d9:49:9b:5e:c1:2f:89:dc:
dd:ed:9c:48:6f:6c:ff:67:c5:e5:2f:bc:aa:f0:af:
b9:c9:33:c1:20:b8:14:f5:f7:9c:73:d9:84:52:62:
b5:24:8d:19:9d:41:9a:2a:ad:16:40:98:9f:3e:ea:
d1:e4:0f:d7:03:7d:1c:79:1d:9c:15:1e:cf:1f:6f:
34:02:bd:56:e8:df:c0:70:54:e0:af:90:25:35:df:
c7:c7:0c:c3:ab:ce:b9:c3:0a:1a:6c:5e:ca:66:0b:
a3:16:c2:5e:74:98:2d:28:dd:e4:da:d6:dd:6d:1c:
79:cc:e6:04:6a:48:b8:cc:5a:34:07:37:23:14:cf:
68:52:90:70:f9:19:50:ea:2f:4d:8f:7a:04:e7:92:
fe:4e:c0:75:13:0e:72:da:ac:77:7f:fe:b4:53:6a:
4a:c9:5f:94:ea:09:e3:1c:33:3d:ee:4f:24:4e:d1:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:FC:A7:C7:1F:F3:1E:50:85:84:AF:A2:10:6F:F7:00:62:DC:A3
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/BF3F3B0E216911EFAB4FB3097DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d2:12:89:e6:55:5c:68:96:05:64:42:f8:ab:41:70:47:7e:
ef:b5:69:1b:97:fe:be:09:52:95:cd:21:52:33:fb:73:79:cb:
74:01:f1:6c:79:7f:e9:db:61:78:2c:da:f6:e7:0f:7a:bb:cf:
e2:3a:ac:61:00:3b:ac:be:c7:32:e4:b2:fd:cf:91:35:e8:65:
b9:79:cd:e0:74:ed:df:12:0a:a5:3d:68:1a:85:1e:16:b1:9c:
ef:d1:9f:ec:b7:17:6b:74:b2:74:1b:0b:e0:fa:0c:b6:fc:14:
9b:93:6d:f7:a0:8c:61:a0:ee:8c:a4:4b:3e:c8:21:e8:83:90:
8d:1c:31:0c:00:d0:4e:f8:14:8b:4c:21:9a:74:2e:85:cf:ab:
60:86:79:eb:97:d2:cb:7f:de:3f:cf:da:51:08:6a:4a:5b:09:
93:c6:94:5c:07:c9:16:12:30:d8:fb:6d:6e:c4:6e:8e:38:7f:
f3:06:98:c4:2c:16:77:b7:2b:17:01:1e:08:97:7b:0d:b3:91:
dd:3e:fc:fe:55:92:1e:67:15:ac:29:93:ae:23:47:29:da:4e:
06:1d:38:5a:e5:72:8a:5f:7e:b4:ba:f9:c6:db:59:76:3a:77:
ee:0b:6c:de:7e:8e:69:33:ec:f6:47:e9:70:d0:72:af:63:d2:
7b:df:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:20 2024 by rpki-client on console-fra.rpki-client.org