Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/1768F7423D1E11EEAB2C192F4AD9E6FC.roa
File: 1768F7423D1E11EEAB2C192F4AD9E6FC.roa (raw, json)
Hash identifier: sC/MfNvr8KzIZlS/+VHt7iPBefz2MvG32wPQ5xTqRwg=
Subject key identifier: 7E:52:D9:28:B8:38:47:6D:CC:D8:B0:DE:35:E6:69:7A:F4:2E:1E:C4
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 02D7
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/1768F7423D1E11EEAB2C192F4AD9E6FC.roa
Signing time: Thu 17 Aug 2023 16:49:55 +0000
ROA not before: Thu 17 Aug 2023 16:49:51 +0000
ROA not after: Sat 17 Aug 2024 16:49:51 +0000
asID: 19905
IP address blocks: 41.208.64.0/24 maxlen: 24
41.208.65.0/24 maxlen: 24
41.208.66.0/24 maxlen: 24
41.208.67.0/24 maxlen: 24
41.208.69.0/24 maxlen: 24
41.208.78.0/24 maxlen: 24
41.208.81.0/24 maxlen: 24
41.208.83.0/24 maxlen: 24
41.208.84.0/24 maxlen: 24
41.208.85.0/24 maxlen: 24
41.208.88.0/24 maxlen: 24
41.208.89.0/24 maxlen: 24
41.208.90.0/24 maxlen: 24
41.208.91.0/24 maxlen: 24
41.208.92.0/24 maxlen: 24
41.208.93.0/24 maxlen: 24
41.208.94.0/24 maxlen: 24
41.208.95.0/24 maxlen: 24
41.208.96.0/24 maxlen: 24
41.208.97.0/24 maxlen: 24
41.208.98.0/24 maxlen: 24
41.208.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: Aug 17 16:49:51 2023 GMT
Not After : Aug 17 16:49:51 2024 GMT
Subject: CN=64de4fb2-dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:c2:e4:29:73:d7:a1:6c:69:36:4a:cd:47:
3e:bb:40:b3:52:3a:6c:dd:02:ec:14:61:45:3f:eb:
c6:49:47:72:51:13:d4:51:8f:24:a8:b2:2d:1b:00:
fe:4e:7f:6b:6c:7f:21:96:c4:72:a4:82:03:f2:8b:
89:31:d9:74:97:b1:5e:74:3c:0d:c1:f8:b4:24:07:
bd:f1:1f:a7:3a:68:67:14:dc:ba:c0:bf:6c:f1:68:
19:38:30:9e:e6:f9:9d:26:e0:ad:48:b8:e6:f5:cd:
e9:df:37:cc:ee:43:b8:aa:45:b8:e8:68:70:0f:70:
74:47:56:07:7a:54:20:47:08:07:1e:e7:b1:c4:53:
9b:46:41:22:94:b5:aa:9f:8d:65:9b:61:24:ba:42:
7f:6d:99:38:62:7c:cf:72:a8:f5:82:98:f9:a2:86:
c9:a1:af:2b:d2:a5:d8:c1:99:27:fc:dc:19:fa:d1:
ad:ce:59:1b:23:8b:ad:09:0b:f5:ee:96:47:71:3e:
70:61:68:5c:7a:ab:95:5a:d1:81:b2:fa:37:fe:29:
8d:87:eb:64:d3:68:03:88:12:aa:28:2d:7d:ff:ae:
49:e0:57:be:d1:b5:65:57:67:1d:97:47:fe:03:87:
05:59:c0:da:19:88:2e:82:73:ab:af:f5:f1:cc:bb:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:D9:28:B8:38:47:6D:CC:D8:B0:DE:35:E6:69:7A:F4:2E:1E:C4
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/1768F7423D1E11EEAB2C192F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.208.64.0/22
41.208.69.0/24
41.208.78.0/24
41.208.81.0/24
41.208.83.0-41.208.85.255
41.208.88.0-41.208.99.255
Signature Algorithm: sha256WithRSAEncryption
93:b3:0d:e6:74:70:3d:78:80:fe:a4:a8:d9:6e:77:53:69:84:
94:74:d3:c0:cd:ca:e7:a9:33:83:6d:6b:81:91:30:f9:ae:aa:
a1:ec:8f:7e:8d:9d:a2:10:07:61:b3:71:af:1a:96:f7:3e:bd:
dc:f3:9f:d2:79:38:b6:87:49:5c:77:f0:a1:af:4d:21:2f:41:
22:19:3a:66:3f:c9:be:e5:90:ee:b8:3e:82:56:33:76:15:ab:
ea:5d:0f:eb:07:86:14:97:e6:05:eb:3a:e6:00:8d:94:0e:9e:
8e:89:fc:22:40:9a:12:91:2a:b9:22:db:bd:95:4f:a1:2b:4a:
0c:6b:90:e6:c8:af:89:4d:03:66:66:24:82:ec:8c:d9:fc:05:
69:f8:7f:5e:af:b8:ed:7c:14:b8:5b:34:de:d3:c6:03:0e:9b:
90:78:46:1b:c6:5e:f1:f0:8f:cf:a8:fd:f2:ec:bd:1b:f2:44:
27:ec:ab:51:2c:be:1e:f4:1b:f5:e0:9d:57:73:1a:fe:3a:ba:
87:02:bd:a3:e7:37:08:13:c0:67:c9:5e:2a:a5:bf:d0:fe:d1:
cb:4e:a0:0a:e8:3e:80:5c:f9:8b:72:05:00:bd:4e:4c:b1:76:
77:72:2a:53:9e:66:81:4b:11:ac:5c:90:39:a0:39:66:f4:cc:
40:1a:01:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:53 2024 by rpki-client on console-ams.rpki-client.org