Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/1A0BC3C08B1A11EBA3BE1F71F8AEA228.roa
File: 1A0BC3C08B1A11EBA3BE1F71F8AEA228.roa (raw, json)
Hash identifier: CDicO0MqFxvbqD7XBDkV7o1kgQGQHL9fYvIZb+N7K30=
Subject key identifier: B3:D2:F4:6A:DF:56:D1:D4:C3:F6:69:BA:98:AE:C7:ED:1B:06:0D:5B
Certificate issuer: /CN=F36FBB68AF/serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
Certificate serial: 3A
Authority key identifier: 0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/1A0BC3C08B1A11EBA3BE1F71F8AEA228.roa
Signing time: Mon 22 Mar 2021 14:22:59 +0000
ROA not before: Mon 22 Mar 2021 14:22:54 +0000
ROA not after: Mon 31 Mar 2031 14:22:54 +0000
asID: 37575
IP address blocks: 41.79.124.0/22 maxlen: 23
102.222.140.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FBB68AF/serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
Validity
Not Before: Mar 22 14:22:54 2021 GMT
Not After : Mar 31 14:22:54 2031 GMT
Subject: CN=6058a843-7fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:ca:dc:cd:8b:dc:06:84:66:f4:b6:e9:fb:
18:0e:ae:5f:39:a2:21:f7:8f:6f:57:3e:29:41:70:
32:f4:ce:9a:b1:6b:28:c9:74:1b:90:f7:16:10:12:
63:45:c3:13:3c:fb:97:5f:e5:f3:f0:1b:a6:2c:3f:
e2:13:7f:0b:3a:73:e4:40:e3:cc:c6:0d:84:af:08:
3c:5c:d9:fb:fa:e0:8f:95:1d:05:88:4c:95:6a:44:
14:45:06:51:53:1a:59:8f:1d:e1:94:b9:a8:d6:6e:
c4:d3:dc:6e:e6:ec:21:b9:d3:7a:0b:81:1b:2c:f2:
84:2f:67:eb:37:cf:a4:b4:c0:07:91:56:52:5c:a8:
54:58:29:de:87:61:09:be:de:7f:f5:87:58:12:a9:
dd:54:e7:67:e8:77:78:4e:19:fe:58:5c:02:4d:a5:
a5:03:93:db:7d:78:87:21:6c:03:f9:e5:34:b2:40:
5f:b5:4c:0d:3e:d6:25:d1:e3:a5:6d:29:a4:00:73:
fd:47:cf:72:21:18:8d:63:bf:76:1d:a5:73:9d:ab:
3a:bf:ce:f4:b7:38:ef:66:60:18:bc:6b:94:ab:1e:
aa:90:10:20:93:8a:2f:5a:11:3f:f5:fd:8c:a9:7a:
29:6c:0e:12:e9:51:b8:e8:d9:0b:ff:80:70:79:1e:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:F4:6A:DF:56:D1:D4:C3:F6:69:BA:98:AE:C7:ED:1B:06:0D:5B
X509v3 Authority Key Identifier:
keyid:0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/1A0BC3C08B1A11EBA3BE1F71F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.124.0/22
102.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ab:59:2e:11:81:03:51:7c:b1:ff:7e:1f:fe:f3:d1:29:4c:
f3:a8:29:d9:6d:50:24:96:01:3c:f7:ec:ab:8c:02:6b:a1:a0:
b3:fb:3a:86:3b:b0:c4:a4:c1:69:ac:e5:9a:de:96:19:23:c3:
73:34:64:21:df:bd:b8:3d:a8:b3:68:9f:9c:04:fa:4e:52:f4:
6c:01:2a:fe:2a:12:ea:59:3c:c1:31:4d:60:3f:9b:72:17:e8:
e5:e4:6f:61:ba:3c:74:a0:c3:4c:bc:d7:26:5f:92:28:26:bb:
d8:dc:7e:37:97:6f:85:9f:3e:86:ed:79:43:ee:4e:f6:07:44:
f3:12:56:7e:1e:58:23:0e:56:e8:3d:c0:37:f0:11:b4:8b:a6:
36:8a:f9:c7:61:dd:4e:52:ff:eb:fc:57:4b:d7:6e:ce:1c:5e:
1b:77:dd:08:04:6f:8e:42:76:96:13:71:51:bd:ae:8a:a6:07:
49:4e:c2:1c:28:4c:3f:cd:da:14:a7:46:9d:fa:cd:d5:cd:43:
67:df:e1:65:13:62:a1:fc:56:d5:78:6a:47:ee:3d:00:02:a7:
94:8c:b5:5d:7d:6f:6d:43:92:bf:cd:2e:17:93:a9:2a:2e:74:
27:bd:cb:28:19:86:8c:6d:cc:92:65:06:98:61:b5:98:01:43:
b8:ec:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:33 2024 by rpki-client on console-ams.rpki-client.org