Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/ED98BED66FAB11EF9A20B695762E951A.roa
File: ED98BED66FAB11EF9A20B695762E951A.roa (raw, json)
Hash identifier: q5xaFzCvVq0NWEpLqV6QDT0xbz7mypl+IUxKYjoGCf4=
Subject key identifier: 03:F7:27:F1:DA:30:DD:4C:BA:29:16:88:60:4B:20:E7:CF:43:4C:54
Certificate issuer: /CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Certificate serial: 06
Authority key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/ED98BED66FAB11EF9A20B695762E951A.roa
Signing time: Tue 10 Sep 2024 19:36:09 +0000
ROA not before: Tue 10 Sep 2024 19:36:06 +0000
ROA not after: Fri 10 Sep 2027 19:36:06 +0000
asID: 37317
IP address blocks: 41.78.220.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Validity
Not Before: Sep 10 19:36:06 2024 GMT
Not After : Sep 10 19:36:06 2027 GMT
Subject: CN=66e09fa9-0e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:d0:c1:50:fd:65:7b:b0:70:89:4b:f7:27:
fb:55:4f:f3:27:db:3e:48:2e:e0:19:06:06:72:6a:
4e:c4:2a:55:db:d9:7c:5c:a1:08:70:4e:ad:cd:da:
44:c8:42:59:71:61:79:ca:17:09:93:d6:d0:0b:a8:
41:23:0c:63:e5:9a:2a:95:e5:1f:a7:c0:7f:d2:ff:
29:64:9b:58:09:62:47:1b:ac:3d:27:1b:4e:85:bb:
d8:8a:bf:d3:7d:b6:90:78:f0:b8:39:fa:b5:79:fb:
c4:f6:b4:71:7a:94:be:fe:f6:3c:da:33:e0:8b:a8:
0d:0a:ff:a1:19:0f:cf:38:40:39:71:bb:c2:e0:15:
5b:88:cc:d6:20:0e:c5:2b:42:2f:ef:7b:71:5b:ba:
d7:ea:c8:b3:90:fa:e1:67:c3:3b:3b:ec:fc:06:33:
59:31:df:b4:85:9a:f1:a6:7f:77:ae:78:c0:bb:03:
96:a4:fd:55:81:e5:a4:0d:8c:23:2d:93:0a:a1:0e:
ab:9f:70:77:dc:52:fe:89:dd:96:a2:a3:49:9a:9c:
f7:f5:ae:05:c9:db:65:ef:a9:f9:e4:4c:94:d7:b0:
a6:5b:2c:11:cc:4c:d2:ee:96:66:8f:3c:9d:cc:da:
3a:79:98:b5:ac:9a:56:84:42:82:99:63:c0:64:58:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:27:F1:DA:30:DD:4C:BA:29:16:88:60:4B:20:E7:CF:43:4C:54
X509v3 Authority Key Identifier:
keyid:31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/ED98BED66FAB11EF9A20B695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.220.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9c:bc:23:b4:e5:7a:e6:14:69:b8:1b:24:7d:33:0a:75:4a:
d4:54:d4:02:a9:41:c4:72:e7:a7:de:a0:7b:e6:f6:d1:de:74:
f9:4c:1d:f5:50:26:17:2d:e4:91:76:1a:8d:65:85:dd:9e:6f:
61:3f:43:6a:be:a7:8b:d9:be:3d:71:23:42:4e:64:a3:9e:85:
cb:81:38:d2:a4:8b:a1:ce:56:ef:67:ef:58:65:65:90:3b:cb:
da:3e:fc:93:0f:55:86:64:ed:40:2e:c5:1d:2d:0d:2d:5a:f0:
03:4a:a2:0f:34:aa:b0:e0:f6:7c:9a:8e:10:1f:3e:ce:0d:8f:
2a:d6:90:58:62:03:d1:98:59:d3:2f:87:6c:da:7e:6f:af:f0:
1b:ef:9a:a4:5f:e5:79:eb:84:24:64:7d:26:65:5f:da:22:9e:
83:a9:1a:52:67:79:9b:d2:88:71:b2:f7:6b:23:d6:08:a5:f6:
1d:7c:11:4e:7f:df:54:9d:95:08:73:66:55:23:ca:dd:1f:5a:
cc:5f:a3:f3:d0:57:ac:c9:51:44:1f:bc:4c:51:0c:d9:6a:c2:
7c:88:47:46:9b:ed:3b:2c:7d:45:86:c2:4c:14:2f:80:55:5a:
75:f9:01:7a:71:eb:cb:9c:f8:26:95:3b:92:cc:33:8a:35:ca:
cf:54:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:31 2024 by rpki-client on console-ams.rpki-client.org