Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/7E3B3DC8D0A211EE9C1C0C61775412E6.roa
File: 7E3B3DC8D0A211EE9C1C0C61775412E6.roa (raw, json)
Hash identifier: BmRCYuiQPjmiqgCkPMHoi7HMNfeBckz/l/PWc6bOGFU=
Subject key identifier: 0A:94:81:37:F0:87:1F:73:10:B5:C7:5E:F3:85:0D:87:91:7A:19:E9
Certificate issuer: /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial: 0833
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/7E3B3DC8D0A211EE9C1C0C61775412E6.roa
Signing time: Wed 21 Feb 2024 10:18:02 +0000
ROA not before: Wed 21 Feb 2024 10:17:58 +0000
ROA not after: Fri 21 Feb 2031 10:17:58 +0000
asID: 36924
IP address blocks: 41.75.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2099 (0x833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Validity
Not Before: Feb 21 10:17:58 2024 GMT
Not After : Feb 21 10:17:58 2031 GMT
Subject: CN=65d5cdda-51ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:d4:a4:70:e3:3a:51:9c:7d:56:49:49:40:
4a:d2:34:81:de:21:a0:cc:b6:bd:ff:ee:ca:69:a6:
c6:6e:2b:44:0b:5f:5d:db:f4:d4:4a:23:94:98:aa:
46:45:45:6f:47:dd:67:50:34:09:88:d1:38:d0:3d:
52:04:bd:42:f6:40:a1:60:96:02:dc:f8:a9:85:f1:
6e:e6:c4:f4:9e:4c:86:4c:85:7a:ff:ae:50:28:df:
87:9d:63:31:62:3b:08:1a:26:3a:a1:57:38:01:78:
0f:40:89:25:fd:37:b6:51:19:2d:a9:b6:1f:4f:9c:
02:de:a5:89:c9:9a:00:f6:e1:d7:e4:22:51:f6:48:
26:ec:3b:24:5e:01:60:01:39:23:ed:ad:f6:79:1a:
eb:fe:e1:47:54:48:83:95:97:d7:cb:35:83:35:bb:
29:f4:7b:46:df:27:25:37:08:0a:5f:73:4b:9e:29:
97:fb:7b:8a:db:a9:2a:2c:ae:f5:45:29:a9:10:1d:
d8:9e:82:31:42:2b:23:ce:48:33:0d:61:63:5f:2e:
54:47:29:29:d3:ec:b9:69:3a:a7:55:1b:b3:09:a9:
4e:f0:62:f1:36:dc:31:2b:dc:5c:e4:90:81:10:51:
1e:2f:f9:2f:8b:4d:72:41:b3:47:2a:70:9e:1e:e4:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:81:37:F0:87:1F:73:10:B5:C7:5E:F3:85:0D:87:91:7A:19:E9
X509v3 Authority Key Identifier:
keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/7E3B3DC8D0A211EE9C1C0C61775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.75.64.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:b9:6c:81:33:bd:17:c9:ee:ba:b2:36:d3:c7:97:06:72:8e:
27:6f:9d:14:5f:b2:07:37:08:da:15:26:c8:60:a6:fc:db:5b:
66:92:4d:17:9e:37:af:6c:45:21:1f:11:56:57:fd:eb:31:0c:
ad:aa:53:d4:85:a7:91:84:c5:ed:b8:02:43:b7:21:fd:cf:75:
ca:2d:40:4a:48:ef:86:21:2f:56:c3:34:d5:60:43:41:8f:da:
a1:68:17:8f:0f:0d:04:7b:71:a3:4a:0c:45:e4:35:b0:23:1a:
8c:6a:35:e1:ff:c6:9a:a2:fc:f2:a6:83:ba:d4:4c:b5:ff:65:
44:10:09:b4:11:1f:8b:06:e8:c6:56:5a:ce:2b:02:7d:f2:29:
cd:59:cf:89:13:10:7c:04:d8:6f:15:7b:39:91:22:c6:f2:ae:
18:1c:da:4c:d5:3f:28:48:b3:fc:e2:d3:fa:91:d6:04:f2:1e:
e0:44:a5:24:a2:39:ef:67:12:c7:6e:0e:2b:1f:c4:26:ba:3c:
30:7a:60:1d:5f:30:9a:6f:8c:69:3d:5c:62:51:a5:e1:7b:1b:
16:fd:65:30:ab:61:05:02:07:10:2e:81:29:0a:1b:67:63:5d:
44:28:b0:16:60:5b:78:dc:f0:d9:8e:7d:f3:c5:d5:14:c3:57:
e9:3d:0c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:28 2024 by rpki-client on console-ams.rpki-client.org