Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/099CAAA26FAC11EF9F68F695762E951A.roa
File: 099CAAA26FAC11EF9F68F695762E951A.roa (raw, json)
Hash identifier: zHFgniH7TocXhiVpBcZaQImwKvniIQ9de2Qqx9HFC+c=
Subject key identifier: 47:18:AD:E2:12:89:D6:1A:A5:69:A0:8D:AD:AB:66:8D:D7:99:16:AA
Certificate issuer: /CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Certificate serial: 08
Authority key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/099CAAA26FAC11EF9F68F695762E951A.roa
Signing time: Tue 10 Sep 2024 19:36:56 +0000
ROA not before: Tue 10 Sep 2024 19:36:52 +0000
ROA not after: Fri 10 Sep 2027 19:36:52 +0000
asID: 37317
IP address blocks: 41.79.16.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Validity
Not Before: Sep 10 19:36:52 2024 GMT
Not After : Sep 10 19:36:52 2027 GMT
Subject: CN=66e09fd8-b571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:b7:f3:72:91:37:cf:de:9d:df:15:10:fa:
6f:93:df:97:c4:43:37:f6:33:2d:a0:bb:d7:1e:c3:
dd:8c:81:ec:a1:58:8b:96:aa:e3:0a:54:53:d4:e3:
44:e2:2e:96:41:2c:96:7d:5f:d3:1f:3b:53:f9:02:
65:91:55:ce:5b:b6:ac:29:f2:6c:b5:9a:6d:4a:65:
bf:8d:a8:f5:9d:19:b6:02:8c:bd:d2:85:3f:8c:92:
ff:7c:07:c0:a3:fb:53:9c:f8:0f:70:8e:e4:1f:4a:
22:af:0e:e3:d7:c6:fa:ad:71:40:28:df:9d:98:13:
ed:43:a5:39:81:ae:c8:be:c2:50:b0:b5:3f:39:d0:
cb:2f:e4:44:ef:e7:b2:87:13:1f:7b:23:5f:6d:d3:
a1:7e:13:1c:e8:c5:67:61:de:fe:93:80:2e:f0:1a:
c3:38:07:4b:d1:99:91:40:62:b3:3e:fc:11:9b:1b:
b9:7e:3e:03:df:03:ce:2b:aa:84:09:b6:1e:0d:a4:
f9:ff:89:36:76:22:c8:05:fa:87:00:b5:f7:48:1c:
cb:42:bd:b5:d9:0f:cb:40:82:21:c8:2f:a1:cb:66:
02:20:75:2c:5d:ae:bb:f0:2a:2c:b6:25:f8:6b:65:
ec:bb:e7:41:9d:d8:03:13:0b:f4:93:bf:c3:cd:59:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:18:AD:E2:12:89:D6:1A:A5:69:A0:8D:AD:AB:66:8D:D7:99:16:AA
X509v3 Authority Key Identifier:
keyid:31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/099CAAA26FAC11EF9F68F695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.16.0/22
Signature Algorithm: sha256WithRSAEncryption
71:cc:ca:55:c5:86:a9:2a:55:fb:13:6e:83:69:3a:10:16:15:
11:a6:b7:a4:2e:19:aa:47:04:53:8d:d2:1d:bf:51:e5:0c:0e:
9b:76:7c:71:e6:8d:53:ba:f2:c2:7a:74:69:81:5b:d0:ee:02:
31:e5:d5:50:a0:d6:3a:f5:52:bc:d3:3b:ad:ce:36:fe:aa:75:
a5:b0:f5:b5:aa:f2:25:25:45:a0:00:46:6f:c1:73:e7:36:e4:
c0:dd:eb:e7:35:1a:d8:5e:52:62:6f:c6:19:b3:47:ea:61:20:
f8:0a:b9:d6:af:cd:86:a7:38:d8:cd:69:f0:53:0a:c3:47:1b:
7c:dc:7f:eb:59:06:0e:02:1f:c3:2b:f8:c8:d4:5e:36:c8:de:
f0:f1:a0:59:2f:47:9f:2f:e8:d4:19:d6:57:30:af:1d:c9:52:
cc:ab:a9:2d:c4:00:f9:cc:b9:59:a7:85:9b:92:2e:cb:28:5d:
d5:8a:3d:36:a7:d1:f6:e8:ed:69:ae:83:ea:98:e8:17:2e:a0:
be:55:f9:d5:04:8c:6d:fb:e5:5b:95:f0:3c:9d:83:58:58:14:
df:8c:8e:60:40:6b:d8:3b:ff:5b:cc:a9:f4:76:08:9f:39:df:
94:ef:46:65:3c:d0:08:de:9c:05:f2:a5:72:f0:f6:15:3d:f4:
10:62:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:51 2024 by rpki-client on console-fra.rpki-client.org