Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/6BD078B441AA11EA87DA1E2BF8AEA228.roa
File: 6BD078B441AA11EA87DA1E2BF8AEA228.roa (raw, json)
Hash identifier: oG+4BfvpkXFr/OlqKfziPCwgTxfJ5wq2bdOpHvfSr4k=
Subject key identifier: CB:D8:E7:A3:BF:E2:10:8F:CD:0E:6D:7C:CE:54:20:1D:9C:27:C2:F3
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 08
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/6BD078B441AA11EA87DA1E2BF8AEA228.roa
Signing time: Tue 28 Jan 2020 08:44:40 +0000
ROA not before: Tue 28 Jan 2020 08:44:34 +0000
ROA not after: Thu 31 Jan 2030 08:44:34 +0000
asID: 3491
IP address blocks: 41.79.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Jan 28 08:44:34 2020 GMT
Not After : Jan 31 08:44:34 2030 GMT
Subject: CN=5e2ff478-eea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:cb:a9:ad:d4:44:9e:ac:6b:18:2f:84:83:
28:7b:00:d3:8d:6a:f9:25:53:56:ea:df:97:de:db:
3b:db:81:2b:a2:ad:59:43:97:0e:02:62:dc:e6:e7:
ea:10:f1:62:3e:d3:b5:af:99:cd:ae:d2:6e:b4:e4:
c9:e4:94:65:52:05:57:c6:23:84:d1:e2:92:cb:55:
29:1c:e0:19:ee:1d:80:36:c5:fd:76:17:94:c9:38:
03:6e:e9:20:25:21:cc:22:f6:ab:c9:55:6c:98:32:
f6:34:4d:16:5f:18:5a:d2:db:03:ad:8f:f7:32:bc:
e1:ab:5c:c4:29:25:f4:41:57:f1:a6:34:6e:11:42:
ed:6c:72:bf:32:e4:4d:c1:a3:8e:76:52:f0:39:f3:
40:b0:b2:fb:67:17:a9:7a:be:3c:77:67:55:b6:12:
72:31:35:5d:a9:be:6f:0c:94:73:dd:89:43:4f:7b:
e7:85:a2:7b:54:c1:d6:cf:9a:c6:5c:b8:f4:a7:4f:
f5:96:f8:8f:f8:b1:a6:89:41:5c:f5:2b:69:2a:d4:
f0:16:01:8a:b9:49:26:6b:1e:ab:ef:2e:33:8e:57:
d9:a5:e3:09:5c:58:61:05:ff:c5:60:b1:7b:ad:88:
43:de:8f:42:b9:5b:b5:73:a0:1f:08:93:d0:ce:dc:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:E7:A3:BF:E2:10:8F:CD:0E:6D:7C:CE:54:20:1D:9C:27:C2:F3
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/6BD078B441AA11EA87DA1E2BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.79.249.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:7b:38:f3:47:73:6c:99:83:a4:c5:ae:d3:93:bd:9b:25:60:
30:1a:e8:dc:bb:82:5e:f7:55:a9:d8:22:b0:ba:a6:e2:42:cb:
3d:2d:57:b0:59:8f:b0:32:63:9c:fd:7b:39:57:d2:f1:67:05:
40:d1:d2:e4:49:2a:f6:8c:ad:00:03:bc:73:21:22:1f:60:62:
aa:a4:7c:be:cd:4f:38:72:7f:e6:87:23:c0:1e:73:18:38:4d:
1e:0f:e3:c1:d6:88:8e:26:7b:80:95:d9:54:c5:28:2d:d0:5a:
1f:03:ba:e6:87:4a:46:1b:aa:42:c8:ff:21:77:48:67:31:b4:
b0:eb:92:09:3f:e7:f5:db:6f:8d:2c:76:14:f1:1e:9b:a4:d6:
86:25:1f:2d:05:1f:22:4b:28:c6:fe:11:bb:b2:b7:07:d0:33:
1d:dd:7b:4b:da:c6:43:b8:a9:5f:ac:b0:2f:c0:aa:25:39:03:
81:fc:19:a3:68:49:15:9a:79:48:a1:f0:1d:d8:89:c0:bf:6e:
2d:43:6d:15:68:f3:3c:06:86:7d:f5:14:9d:38:82:8a:04:d1:
9d:f6:c3:f0:43:17:0b:d1:bb:55:69:ef:e7:68:ee:6d:b3:b0:
95:33:6b:58:ed:28:df:5d:e9:cc:5a:40:ad:91:ed:d3:ab:d5:
a4:de:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org