Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/75479C3CBE5711EEA57807B1775412E6.roa
File: 75479C3CBE5711EEA57807B1775412E6.roa (raw, json)
Hash identifier: KJ78VQh/EaM4VrWU0qtdFJzJqdOESws+8hhBj0+/JkQ=
Subject key identifier: 47:3E:39:DC:34:D2:62:4D:E5:C6:2D:C8:E6:75:5C:1A:38:F4:EE:D6
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: 51
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/75479C3CBE5711EEA57807B1775412E6.roa
Signing time: Mon 29 Jan 2024 03:35:33 +0000
ROA not before: Mon 29 Jan 2024 03:35:30 +0000
ROA not after: Thu 29 Jan 2026 03:35:30 +0000
asID: 36912
IP address blocks: 41.202.192.0/24 maxlen: 24
41.202.193.0/24 maxlen: 24
41.202.194.0/24 maxlen: 24
41.202.195.0/24 maxlen: 24
41.202.196.0/24 maxlen: 24
41.202.197.0/24 maxlen: 24
41.202.198.0/24 maxlen: 24
41.202.199.0/24 maxlen: 24
41.202.200.0/24 maxlen: 24
41.202.201.0/24 maxlen: 24
41.202.202.0/24 maxlen: 24
41.202.203.0/24 maxlen: 24
41.202.204.0/24 maxlen: 24
41.202.205.0/24 maxlen: 24
41.202.206.0/24 maxlen: 24
41.202.207.0/24 maxlen: 24
41.202.210.0/24 maxlen: 24
41.202.211.0/24 maxlen: 24
41.202.214.0/24 maxlen: 24
41.202.215.0/24 maxlen: 24
41.202.216.0/24 maxlen: 24
41.202.217.0/24 maxlen: 24
41.202.219.0/24 maxlen: 24
41.202.220.0/24 maxlen: 24
41.202.221.0/24 maxlen: 24
41.202.222.0/24 maxlen: 24
41.202.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: Jan 29 03:35:30 2024 GMT
Not After : Jan 29 03:35:30 2026 GMT
Subject: CN=65b71d05-54cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:e0:56:c2:db:4d:c6:8d:ef:4a:46:de:c9:
6a:70:15:7e:e0:8e:79:ba:45:e0:6f:38:0a:2c:e9:
a7:74:a3:20:5f:2c:90:4f:00:8f:e7:14:63:cc:8a:
0a:48:b3:79:e5:e9:2f:d6:1d:db:7e:75:92:96:ee:
0d:95:d1:a6:f3:88:0b:ce:f7:17:76:c3:03:ba:cc:
87:32:d6:23:f6:d3:f4:1f:08:b6:4d:2c:07:c9:b5:
7e:e2:3f:a4:f7:a8:9f:fa:dc:ab:c7:43:42:d9:3d:
ab:c8:f9:4b:89:7f:31:15:9b:8b:ba:a6:c7:59:78:
a5:11:41:df:4e:c3:30:02:a8:27:1e:14:74:b3:37:
38:0f:ed:a6:95:d2:ea:15:97:ca:99:66:b0:2c:02:
e1:f0:d4:b8:ef:8b:93:74:58:57:cf:8d:45:6b:ba:
b5:65:d7:13:4d:e7:df:f4:26:2c:ae:42:59:a7:98:
5c:4a:a2:a8:19:12:69:db:f7:ec:b3:19:67:ca:64:
88:4a:db:c1:e0:aa:1b:44:c9:1f:bc:11:bf:38:6e:
b1:c3:05:9f:3b:c9:f5:85:2f:d8:6e:6e:91:21:c3:
13:10:eb:bc:ab:f2:e0:a8:e3:12:de:9a:29:d7:14:
ee:d5:dd:1a:88:20:15:da:8f:de:a3:15:cb:c5:d3:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:39:DC:34:D2:62:4D:E5:C6:2D:C8:E6:75:5C:1A:38:F4:EE:D6
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/75479C3CBE5711EEA57807B1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.202.192.0/20
41.202.210.0/23
41.202.214.0-41.202.217.255
41.202.219.0-41.202.223.255
Signature Algorithm: sha256WithRSAEncryption
4b:b5:80:98:eb:09:0a:c2:8b:ab:00:85:ac:61:ed:c0:d9:c7:
21:59:be:76:44:bb:a9:4f:0a:3a:7c:6c:76:d4:03:df:d0:9f:
27:da:d5:32:ac:01:49:0c:d1:26:6a:63:95:b8:2b:af:76:bb:
81:b8:1a:6f:94:11:70:4f:b7:dd:af:68:50:a9:ff:5c:07:5f:
15:e9:d5:4e:93:a7:57:a2:91:5c:48:10:03:26:b0:1e:2f:ba:
3e:56:8d:2f:a7:b1:17:bd:04:4f:c4:a9:69:51:1f:58:cd:16:
28:3e:d4:4f:19:5b:33:24:3a:fa:bd:92:63:85:85:69:40:98:
02:41:a5:42:ae:11:97:37:33:8e:0d:cd:a0:4c:1e:18:56:2e:
d0:3e:e7:11:8a:68:a2:eb:d3:96:27:28:84:c6:b0:2a:c1:2f:
54:be:a0:e2:71:a8:a7:6b:94:2e:ac:92:e4:7d:10:1b:f0:0a:
e8:59:81:36:ad:64:a4:d0:c6:49:c0:1b:ac:b7:06:46:dd:e1:
4a:46:3b:1d:94:aa:83:4e:dc:5e:ad:f3:9b:79:97:a4:05:8d:
88:ad:0d:12:4b:d6:ff:09:db:20:b5:10:e2:37:ce:dc:68:e1:
c1:f8:f3:d6:9e:44:5f:6b:90:78:df:39:47:a7:66:22:f6:3d:
a4:40:48:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:44 2024 by rpki-client on console-ams.rpki-client.org