Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/8E90E6161CD111EFAD3E6F387DDC24C2.roa
File: 8E90E6161CD111EFAD3E6F387DDC24C2.roa (raw, json)
Hash identifier: Acxu0DX0x7zOnZo/d29ZFhmVVZhtQ4DjKj+Qddi4oY8=
Subject key identifier: C4:2C:D6:B2:6B:CC:47:D1:1F:86:58:84:55:4C:9F:AE:13:E2:E7:6C
Certificate issuer: /CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Certificate serial: 03B3
Authority key identifier: BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/8E90E6161CD111EFAD3E6F387DDC24C2.roa
Signing time: Tue 28 May 2024 09:06:24 +0000
ROA not before: Tue 28 May 2024 09:06:20 +0000
ROA not after: Sat 31 Dec 2044 09:06:20 +0000
asID: 29286
IP address blocks: 41.76.84.0/24 maxlen: 30
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947 (0x3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Validity
Not Before: May 28 09:06:20 2024 GMT
Not After : Dec 31 09:06:20 2044 GMT
Subject: CN=66559e90-1632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f2:23:d5:0c:c9:e8:43:aa:7c:4d:9b:24:52:
7f:f1:8c:e2:e5:33:35:f9:3c:88:80:1a:c8:91:b0:
16:1c:39:2c:2c:fe:6a:e7:be:83:bc:e8:60:0d:8c:
61:e6:6a:1e:fd:fe:39:55:61:c9:7c:c6:29:8f:a7:
6f:06:62:5d:b9:9e:95:2d:8a:f3:86:07:d3:d8:cb:
28:68:f9:5b:bf:41:a6:86:26:93:86:3d:82:f9:95:
03:5b:c3:4c:b3:d8:63:6a:13:9e:bc:10:71:da:0a:
2b:5e:e6:29:16:da:cd:d9:39:c9:b3:df:29:89:bb:
80:1c:fe:81:c8:d0:9b:44:b7:0e:3a:b2:42:6f:41:
52:ee:c1:2c:70:cb:f6:0d:d0:f2:db:db:01:aa:8f:
44:0b:c1:d8:d7:a8:7f:55:93:df:04:6a:67:81:5a:
6e:92:88:05:5f:cc:0a:e1:70:e4:d1:10:4d:b4:51:
62:6c:62:52:33:b2:2e:b8:19:19:bd:99:83:a1:03:
ca:49:84:f3:58:9a:1f:4a:c0:c5:54:ea:ff:27:a0:
aa:44:85:fc:9b:1c:73:6b:bc:34:14:d1:72:cb:c3:
e5:48:bc:23:1f:be:6c:c8:ed:e9:6f:a2:1c:d6:bd:
08:31:9e:47:73:a5:9a:da:4a:4d:a7:29:5e:55:c7:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:D6:B2:6B:CC:47:D1:1F:86:58:84:55:4C:9F:AE:13:E2:E7:6C
X509v3 Authority Key Identifier:
keyid:BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/8E90E6161CD111EFAD3E6F387DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.84.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2c:08:55:3c:58:1e:e8:3f:5d:82:ce:14:7c:ea:ec:81:a3:
17:13:e2:39:38:68:d4:c4:3a:5e:62:d4:2b:36:c5:e6:e3:6c:
ca:b5:6f:a6:82:04:1d:5d:45:08:7c:dd:e6:f2:3e:ba:93:40:
20:67:62:9c:db:7d:87:2f:4f:1f:a6:74:b5:d6:4d:33:aa:18:
87:f3:00:d8:e5:99:87:d4:88:01:a1:5c:be:55:5c:76:d2:a7:
82:f9:8f:bd:be:f3:0b:0e:5a:32:8c:2c:1f:bf:7e:0d:be:28:
20:9c:5f:79:aa:6b:7a:50:b6:db:ca:37:1f:92:3e:70:64:a4:
c8:15:09:8c:87:73:57:81:ab:66:8e:e3:97:87:fb:11:47:f8:
5a:39:7b:1d:ee:0f:5b:03:e3:aa:17:fc:f3:2f:bf:c2:3e:93:
ce:38:18:8c:0e:aa:c7:7d:90:1a:fa:13:58:0d:3c:1a:8d:eb:
73:0f:d6:62:36:d8:9b:1c:35:fb:de:ca:27:34:00:d5:18:3f:
72:a0:c5:c0:91:0f:1e:fb:31:40:b0:fe:0d:cd:fc:43:ae:1b:
7a:02:e8:db:a1:61:a2:74:fd:2e:3f:72:76:f0:16:d6:98:c9:
fd:c2:82:83:b6:47:f0:b2:a0:ec:ea:21:23:87:d5:b7:b3:5c:
35:1e:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:01 2024 by rpki-client on console-fra.rpki-client.org