Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/F3595C487D9E11EBB0CF4425F8AEA228.roa
File: F3595C487D9E11EBB0CF4425F8AEA228.roa (raw, json)
Hash identifier: 13YoJMcN+dmv+b0H3AQ2M8ild3BcGQ6ON48XMKrEX5o=
Subject key identifier: C1:C2:87:45:30:A5:77:EC:B2:01:E0:F1:AF:55:56:9B:9A:1E:9B:91
Certificate issuer: /CN=F36FBB68AF/serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
Certificate serial: 22
Authority key identifier: 0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/F3595C487D9E11EBB0CF4425F8AEA228.roa
Signing time: Fri 05 Mar 2021 10:38:41 +0000
ROA not before: Fri 05 Mar 2021 10:38:33 +0000
ROA not after: Mon 31 Mar 2031 10:38:33 +0000
asID: 37575
IP address blocks: 41.79.124.0/22 maxlen: 23
102.222.140.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FBB68AF/serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
Validity
Not Before: Mar 5 10:38:33 2021 GMT
Not After : Mar 31 10:38:33 2031 GMT
Subject: CN=60420a31-5c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:28:bc:17:15:e7:f7:12:93:28:b1:b2:fd:
90:7b:87:18:1a:27:4e:f3:d2:0d:88:91:77:d7:f4:
84:4e:d4:71:9f:00:59:02:ae:6a:fc:01:51:89:24:
f3:69:f0:ff:4b:90:27:39:3a:75:ba:6c:0e:0f:16:
d1:00:f2:65:9f:c6:c9:51:0d:9c:9d:29:12:c4:c0:
18:2e:91:af:83:7a:75:72:e2:ab:65:50:4b:ae:f4:
81:25:31:9e:dd:fb:b4:0e:a7:fc:ea:f5:07:e5:49:
22:a5:ef:17:b9:a2:2c:66:2f:f2:f3:91:86:3c:e9:
7f:56:b6:5a:30:d3:0d:0b:12:37:3c:4f:c8:41:30:
e5:4c:6c:f2:3a:f5:ce:ee:3e:53:e2:e9:ae:6c:ab:
b2:b2:70:3c:bd:ca:79:a3:ff:c1:ad:da:76:07:65:
4c:86:fd:68:42:a3:90:41:8a:5a:47:d4:67:bd:fd:
5a:0e:00:36:0c:7f:6b:71:c4:f5:80:e6:33:a1:39:
2d:43:46:a8:9a:cc:a2:1d:09:9d:11:0d:8c:3a:87:
38:87:9f:eb:49:ee:80:f1:74:58:2a:b8:bc:47:45:
d9:74:aa:17:83:91:14:cb:10:14:92:02:4b:d8:61:
ee:0b:fd:26:0a:62:ac:09:82:f1:da:9e:93:8b:43:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:87:45:30:A5:77:EC:B2:01:E0:F1:AF:55:56:9B:9A:1E:9B:91
X509v3 Authority Key Identifier:
keyid:0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/F3595C487D9E11EBB0CF4425F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.124.0/22
102.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
47:73:fd:0c:8a:97:57:0e:f5:51:ff:48:a3:5f:03:51:53:7f:
65:52:f1:1a:ae:8d:8c:7c:06:1a:e0:49:9f:72:36:b1:e9:72:
72:cc:c8:1c:1c:3c:e3:f9:f3:9b:88:9a:78:9b:5e:ae:09:8a:
12:fc:92:f4:27:c3:3b:dc:8f:41:b3:ad:c1:06:e5:aa:38:9a:
09:0d:62:fd:50:44:7a:b7:c0:fd:ab:b0:32:1b:4b:f1:63:cd:
7b:b7:09:0e:4c:e5:77:4e:ae:ed:e4:9a:ba:76:b2:4a:f7:dc:
57:cc:77:b6:64:fe:8b:f1:4f:8c:f8:49:93:95:2c:dd:b8:6c:
1a:a2:ef:09:45:3a:13:96:90:2a:cb:6e:00:58:5c:f6:f6:f5:
22:f3:7f:b3:f4:b2:4a:af:64:b6:a3:c7:48:1e:a7:b5:15:79:
a7:95:d7:b0:16:17:92:c2:89:d0:50:6f:5d:8a:5f:cf:16:cc:
7d:33:3a:fa:ed:97:85:09:88:b7:c7:ef:66:49:ea:e6:5b:ab:
1b:46:52:78:e1:0e:f0:04:81:30:f4:8d:0f:43:12:a2:57:10:
f5:b5:2f:0f:da:16:07:b0:d9:c6:b6:6d:98:16:48:52:bb:f6:
6b:e3:97:c2:a7:0b:1c:7b:c7:39:09:44:0d:47:10:7e:24:cc:
a3:14:22:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:20 2024 by rpki-client on console-fra.rpki-client.org