Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/C226B7D40AA411EEAEA4A5484AD9E6FC.roa
File: C226B7D40AA411EEAEA4A5484AD9E6FC.roa (raw, json)
Hash identifier: Qm72goTpyMAJ3Op/uLoxMku/eqrMrQ5Gy2DoW/t8FVs=
Subject key identifier: BE:16:BF:8C:01:DB:89:39:5A:95:54:DF:5F:68:FA:79:4B:EA:F2:89
Certificate issuer: /CN=F36EED3EAF/serialNumber=F59284D76678851F7AA743B13F6C067479550074
Certificate serial: 02
Authority key identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/C226B7D40AA411EEAEA4A5484AD9E6FC.roa
Signing time: Wed 14 Jun 2023 11:15:24 +0000
ROA not before: Wed 14 Jun 2023 11:15:21 +0000
ROA not after: Tue 14 Jun 2033 11:15:21 +0000
asID: 327688
IP address blocks: 41.57.4.0/23 maxlen: 23
41.57.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EED3EAF/serialNumber=F59284D76678851F7AA743B13F6C067479550074
Validity
Not Before: Jun 14 11:15:21 2023 GMT
Not After : Jun 14 11:15:21 2033 GMT
Subject: CN=6489a14c-552c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:d4:e9:1f:6d:04:bd:0f:c0:c2:65:7d:49:
78:12:9a:35:64:54:4a:05:34:b8:df:05:93:02:e8:
f8:fc:08:23:47:37:37:8b:42:61:db:cf:6a:b6:46:
cb:6d:76:55:89:98:8e:6d:41:f4:59:16:13:42:94:
37:da:4c:22:18:d0:5e:06:7f:fb:77:3b:9c:10:6a:
dd:51:4c:b7:a6:80:be:02:c5:3e:e6:4b:50:e0:e2:
52:5c:dd:3a:23:11:c0:a7:16:2e:2b:fb:8d:e4:6f:
63:2c:33:46:27:0f:e9:39:53:29:8f:5e:7d:86:0a:
e5:6e:80:5d:0a:8d:f3:b9:03:ad:30:d4:3f:e0:25:
ea:ad:e3:09:e2:03:01:d9:f7:98:6f:ea:c4:8f:a2:
d8:43:31:37:17:b7:a4:4a:cb:2b:aa:1a:19:07:42:
e0:07:ba:2c:d8:a6:f9:19:bf:a5:4c:df:0a:ec:d0:
27:c4:7a:8a:dd:31:de:ac:0b:f1:5f:63:42:bd:50:
97:dd:2e:87:1c:cc:63:2c:ae:5e:aa:df:dd:0d:b0:
b5:5f:32:c7:31:60:a9:0c:68:49:38:be:f1:9e:85:
35:b9:af:08:bf:1d:e2:a1:76:22:28:c2:48:09:be:
6d:0d:37:7c:7d:fa:00:0c:78:1b:cc:e6:d8:77:a1:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:BF:8C:01:DB:89:39:5A:95:54:DF:5F:68:FA:79:4B:EA:F2:89
X509v3 Authority Key Identifier:
keyid:F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/C226B7D40AA411EEAEA4A5484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.57.4.0/22
Signature Algorithm: sha256WithRSAEncryption
82:a6:9b:66:8e:b2:ee:62:ba:06:fa:d3:c1:aa:cb:66:90:87:
47:8f:e3:0e:bb:a3:a0:a9:17:ac:a3:af:0c:dd:c6:f1:c8:e6:
f1:9b:f3:d6:d6:6f:15:a0:b6:ea:41:f6:d7:7b:08:a6:29:91:
6e:ee:1a:42:f3:2a:12:1a:39:a0:b5:60:62:62:c4:79:fe:a4:
82:ec:6d:d9:73:f2:f3:0c:2a:c4:48:02:77:09:bc:91:1e:e4:
eb:45:7d:e5:4a:0d:47:2b:6f:52:21:5f:ae:84:f0:4d:62:46:
65:25:49:62:86:52:8e:da:f2:0f:48:87:f6:1b:1c:8c:f5:ec:
95:a0:7b:9a:78:65:dc:69:a0:9b:49:2b:83:e5:8e:98:03:d1:
a3:1a:16:10:a4:28:b1:26:39:10:81:c4:92:5f:63:bd:5e:f0:
cd:0b:85:b5:cd:98:46:98:03:ba:10:4e:ae:32:cf:e6:b7:ef:
cb:fa:50:3a:72:9a:40:03:48:da:b0:36:1d:a9:a3:5b:7d:31:
05:6d:86:b5:26:14:c9:90:bb:bf:9c:57:e9:5e:f8:d9:09:f3:
70:e9:1b:18:91:8a:a5:c6:c4:a8:92:28:d9:f2:cc:29:ba:e6:
d4:97:02:17:6d:70:6a:9c:2f:2b:31:b0:72:ce:7c:23:0f:96:
fa:3d:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:31 2024 by rpki-client on console-ams.rpki-client.org