Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/F62DD44ECE2E11ECAA249B87F1222468.roa
File: F62DD44ECE2E11ECAA249B87F1222468.roa (raw, json)
Hash identifier: 8URU9YiLdWtD6vDeoNMB8ooJHctx8YELYz1KqaK1TJI=
Subject key identifier: 3E:AE:81:36:9A:CB:FD:2B:1D:53:84:7C:5D:50:74:47:FA:44:5F:41
Certificate issuer: /CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Certificate serial: 0167
Authority key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/F62DD44ECE2E11ECAA249B87F1222468.roa
Signing time: Sat 07 May 2022 17:56:04 +0000
ROA not before: Tue 31 May 2022 17:56:00 +0000
ROA not after: Mon 31 May 2032 17:56:00 +0000
asID: 37349
IP address blocks: 41.207.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Validity
Not Before: May 31 17:56:00 2022 GMT
Not After : May 31 17:56:00 2032 GMT
Subject: CN=6276b2b4-23a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:d6:08:fb:1f:44:1c:19:56:a1:d0:cd:a2:
fc:d3:09:a8:84:70:87:3d:9b:2b:54:7f:bb:1e:4f:
78:d9:15:7b:e5:36:45:70:78:fc:2a:1b:30:45:4c:
35:a8:af:c7:f5:d8:9c:fd:12:0b:bc:8c:dd:94:46:
00:de:9c:d5:2e:67:1a:60:88:e0:bf:56:d4:09:71:
d9:fd:15:30:b4:04:4a:53:1c:12:c4:73:4e:87:2b:
4a:06:6f:f0:d8:0c:21:07:84:27:26:73:9f:1f:eb:
f5:10:35:9d:81:a8:27:3b:2e:f1:0c:21:69:80:13:
ad:2c:9e:0c:bb:92:8f:d0:88:36:2b:7a:7e:c6:0c:
d3:77:e5:75:ac:c2:98:b8:8b:eb:68:f0:54:2e:99:
7e:cb:bf:1a:d5:b3:3e:e3:ed:79:f0:dc:90:04:08:
b9:b5:23:6b:6d:98:33:13:1d:76:18:ca:66:82:f8:
46:b1:ab:a3:f4:d7:1a:35:9e:8d:6a:ce:16:34:28:
32:99:7d:cb:c7:0a:07:3d:13:73:dd:2a:d0:b0:fa:
a2:58:67:35:51:19:b8:ba:20:d8:ea:4d:0c:8a:4b:
22:78:ed:62:ca:0c:3f:94:b8:b6:f0:3b:5d:c6:55:
50:c5:36:8d:a3:ce:7f:46:68:4d:12:03:dc:f8:09:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AE:81:36:9A:CB:FD:2B:1D:53:84:7C:5D:50:74:47:FA:44:5F:41
X509v3 Authority Key Identifier:
keyid:67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/F62DD44ECE2E11ECAA249B87F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.207.240.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:c1:db:5f:51:ac:98:a3:18:35:52:c2:1d:16:b9:4b:9f:a7:
15:0a:f9:14:a1:af:c9:8e:62:54:0f:9a:26:48:46:f8:a2:9a:
64:31:4e:fe:ae:3d:5a:e4:0c:ec:3e:63:b5:7f:4d:b7:43:f4:
d3:93:df:21:39:83:59:0d:01:ac:cc:4f:f7:71:36:9f:13:19:
21:6e:93:f0:7c:f6:db:d1:97:93:a0:c2:5a:c6:2a:74:23:94:
3b:6e:b5:f0:77:4d:77:e4:e7:01:ba:0b:00:2e:c2:08:63:1d:
c8:5a:76:73:b6:ba:6b:2a:ec:71:16:26:bb:2f:34:4b:f5:4e:
bc:9b:dc:1b:9a:96:21:61:01:44:cd:24:d9:5a:e2:bd:01:14:
71:ff:c3:0e:a3:d3:3d:c8:7e:d8:92:55:b7:e9:62:34:94:0c:
5b:04:fa:fd:a9:99:f3:38:d6:18:00:f4:92:0e:ed:9e:20:f2:
a3:9d:41:b5:22:d7:38:5c:46:60:83:a4:cc:b1:c1:88:9d:52:
15:21:92:e9:78:8a:46:2b:61:20:bb:07:9c:20:45:89:6b:b8:
fe:59:ce:15:ef:c3:1e:11:99:36:fe:26:9a:49:cf:7b:4b:77:
fe:08:88:89:d0:31:ad:1f:3b:5d:61:1d:44:7f:3b:55:49:97:
2b:fc:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:22 2024 by rpki-client on console-fra.rpki-client.org