Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/556D1DA01CD111EF9997F1117DDC24C2.roa
File: 556D1DA01CD111EF9997F1117DDC24C2.roa (raw, json)
Hash identifier: TUGWF0iT2TWYNHrRW0ntCFeOp6mPEZVXlZ0YLlE22V0=
Subject key identifier: 28:A9:E4:59:1A:37:03:87:5E:08:91:F7:5D:E1:A7:84:C3:13:38:7E
Certificate issuer: /CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Certificate serial: 03B1
Authority key identifier: BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/556D1DA01CD111EF9997F1117DDC24C2.roa
Signing time: Tue 28 May 2024 09:04:48 +0000
ROA not before: Tue 28 May 2024 09:04:44 +0000
ROA not after: Sat 31 Dec 2044 09:04:44 +0000
asID: 29286
IP address blocks: 41.79.206.0/24 maxlen: 30
41.79.207.0/24 maxlen: 30
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 Nov 2024 00:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Validity
Not Before: May 28 09:04:44 2024 GMT
Not After : Dec 31 09:04:44 2044 GMT
Subject: CN=66559e30-8e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:82:d6:f9:ad:72:10:b7:27:d0:2e:66:ab:5f:
92:8a:44:d8:32:1e:f7:bc:ef:63:f4:95:1e:34:7d:
d5:ca:2b:42:26:5b:24:cd:a5:84:6c:c9:78:40:bf:
57:82:fe:b0:11:a0:a9:c2:73:d4:04:c0:af:49:b9:
59:06:3d:a2:f9:35:b6:e7:dc:3f:a8:1a:63:72:c8:
fd:73:d6:31:3c:34:32:23:3a:e3:fd:31:07:46:29:
5d:09:68:a0:1a:fd:e3:3f:43:c6:5b:09:5d:15:39:
e7:f8:cb:a7:16:f7:b8:47:c2:7a:19:06:70:41:84:
b3:7a:70:43:54:9c:e5:8a:f6:09:f6:1b:2d:29:0a:
72:d8:9c:af:3c:cd:ec:d3:c1:80:74:8b:80:f2:d5:
4b:60:31:6a:25:8a:c6:70:98:5a:aa:d8:fb:96:9c:
f4:8c:bf:8a:51:51:95:73:18:75:6d:29:98:f3:5b:
d3:12:16:ac:23:8e:1d:19:7c:de:be:6b:14:c9:60:
1f:b9:26:eb:b5:b8:76:f6:8c:32:7f:78:91:6e:fe:
3a:bf:a5:7e:68:34:3a:97:f7:db:9c:19:87:7d:55:
17:d8:62:0f:d5:52:7a:b0:b3:b7:9c:0e:c4:e5:00:
12:f9:d4:34:98:f4:1e:d4:50:54:f8:d5:f3:c2:6f:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:E4:59:1A:37:03:87:5E:08:91:F7:5D:E1:A7:84:C3:13:38:7E
X509v3 Authority Key Identifier:
keyid:BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/556D1DA01CD111EF9997F1117DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.206.0/23
Signature Algorithm: sha256WithRSAEncryption
79:0a:a0:bc:a7:4c:42:5e:a6:3c:b6:a0:56:49:22:f6:cc:7f:
9c:d7:67:67:d0:87:dd:f5:71:8f:5d:e2:c1:e2:37:58:4b:12:
9c:16:26:d9:6b:6f:a1:ef:19:91:c7:22:b8:cb:97:9e:d6:6b:
e1:a4:63:b5:12:9a:fc:ca:86:70:2a:09:cd:97:96:34:cb:50:
8e:bc:fb:11:33:7c:71:ae:1e:a1:5f:39:43:51:a6:da:37:9a:
7a:cc:ee:61:7b:f0:40:73:91:5f:ad:85:fc:af:33:82:9a:44:
46:79:85:b3:19:25:27:66:47:ac:2e:6e:78:1e:85:53:0c:99:
b4:0b:f5:44:19:e1:31:e9:6b:bf:8e:ff:11:9f:86:8f:79:5a:
33:a3:39:62:a8:a9:24:6c:35:cc:32:80:c6:bc:27:ea:50:9d:
44:38:ee:a6:54:1f:c0:59:57:aa:ca:72:6d:34:14:cd:22:a3:
b3:20:71:96:ea:e6:7d:79:d4:e5:7c:49:4b:2c:e8:45:c6:52:
58:60:3d:4f:20:56:49:cd:66:e1:42:83:55:94:d5:a6:b7:40:
42:a0:1c:f4:16:c9:e0:e0:09:0c:0f:3e:05:09:ff:14:0d:2d:
17:d7:98:f5:5a:cd:6e:05:a8:5e:dc:49:fc:0a:ed:06:62:fb:
df:91:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:39:00 2024 by rpki-client on console-fra.rpki-client.org