Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/6C2E6480C04811EEA25C9BAE775412E6.roa
File: 6C2E6480C04811EEA25C9BAE775412E6.roa (raw, json)
Hash identifier: mvv+xhyBTyB7fHpGqCe3gsM/SW9QZ+tcmhxVFOTd3TE=
Subject key identifier: 33:76:D3:B3:A5:35:6E:88:76:3B:CE:62:F7:E9:5D:DE:5E:F1:AA:6C
Certificate issuer: /CN=F36F9BF2AF/serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Certificate serial: 030E
Authority key identifier: 90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/6C2E6480C04811EEA25C9BAE775412E6.roa
Signing time: Wed 31 Jan 2024 14:52:58 +0000
ROA not before: Wed 31 Jan 2024 14:52:55 +0000
ROA not after: Tue 31 Dec 2024 14:52:55 +0000
asID: 37154
IP address blocks: 41.72.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F9BF2AF/serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Validity
Not Before: Jan 31 14:52:55 2024 GMT
Not After : Dec 31 14:52:55 2024 GMT
Subject: CN=65ba5eca-8cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:8b:7f:8f:e7:d3:3c:bf:9f:81:ba:d5:7d:
a1:51:d8:f2:fe:c9:86:3e:88:e2:41:c2:cc:98:5d:
be:02:60:5b:50:61:82:1a:63:87:92:81:93:f4:b4:
63:d2:dd:76:7b:7a:0b:b3:b7:82:c1:30:03:08:40:
9c:9e:cc:41:b5:36:03:42:77:08:91:65:b8:18:9b:
43:c8:cb:c1:d1:cb:b2:31:d0:7a:48:f5:05:c3:f3:
25:b0:b7:3b:a9:71:56:23:c1:53:9c:87:6f:4d:47:
8a:76:fc:a1:f0:1c:95:fd:30:d2:19:02:32:41:cb:
d8:b9:53:89:70:c1:54:b5:07:e5:c3:96:96:41:bd:
d2:ce:61:b7:aa:c4:d9:a9:15:e4:4e:3c:91:38:c0:
f8:eb:38:fa:97:5c:b5:c5:37:f5:4e:3e:60:0f:62:
3b:52:58:a9:c2:63:5a:8b:54:a8:85:bc:71:7b:a7:
ca:ad:67:e2:f3:c5:6e:b3:0a:ce:ed:1b:b2:6d:17:
6a:7c:c3:90:f2:d7:10:81:7a:ac:b3:87:63:85:f1:
24:26:2a:29:85:91:8d:0f:c9:d2:be:60:a1:28:8b:
77:3d:42:a4:ec:1b:10:f7:30:96:89:ba:7d:51:60:
8d:b3:7b:49:ec:79:6b:5f:bb:4d:53:87:70:94:88:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:D3:B3:A5:35:6E:88:76:3B:CE:62:F7:E9:5D:DE:5E:F1:AA:6C
X509v3 Authority Key Identifier:
keyid:90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/6C2E6480C04811EEA25C9BAE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.72.96.0/19
Signature Algorithm: sha256WithRSAEncryption
40:c5:6d:bd:5b:b8:41:8d:02:ea:8d:88:c1:4e:4f:66:7a:03:
1a:43:db:f8:aa:20:8c:b6:21:14:7d:9d:c6:bc:b2:6b:c3:20:
11:5e:8b:1c:e7:e3:06:e0:53:46:f8:3d:92:e6:c9:54:16:8e:
59:a2:96:ef:5f:de:b7:ac:4d:6c:8b:12:28:89:41:51:91:20:
89:ae:c9:14:50:10:61:9f:d9:af:2b:7e:a2:ad:6a:73:33:0a:
68:2a:67:89:44:cf:9b:65:08:71:8a:bb:42:4a:ad:96:e4:8e:
44:9a:bc:bc:19:fe:10:75:bb:f6:0d:2d:8d:c5:f0:9c:a5:c2:
50:c1:30:97:4f:3e:76:3e:5b:04:02:a3:d8:cc:ac:32:ce:8f:
2f:70:5c:c9:65:83:70:95:67:6d:a2:9c:2d:f0:51:41:bd:48:
af:a4:62:a2:37:19:6c:e8:2c:87:01:40:d0:15:c2:55:1a:dd:
89:e4:b9:e5:08:37:22:ac:56:89:65:77:6d:d7:db:83:94:16:
41:16:b0:6e:00:ae:65:ed:b8:2b:e6:b2:37:ed:6c:20:16:02:
41:9a:d0:62:03:93:45:93:15:07:f1:7c:4c:e5:51:0e:81:94:
c7:f8:39:41:18:f4:8b:ab:27:2e:c3:3f:e9:23:75:30:18:68:
40:03:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:34 2024 by rpki-client on console-fra.rpki-client.org