Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/9DA32534F00711EE898986C5775412E6.roa
File: 9DA32534F00711EE898986C5775412E6.roa (raw, json)
Hash identifier: TQ1/8BV5zm3Y2ZTtbjmsP2mRNnDdpHUUQ/EORWgyJDM=
Subject key identifier: 51:F9:D0:A6:9A:BA:18:9A:D3:70:22:93:7F:B7:8F:BC:6A:FC:32:7E
Certificate issuer: /CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Certificate serial: 05A1
Authority key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/9DA32534F00711EE898986C5775412E6.roa
Signing time: Mon 01 Apr 2024 09:10:00 +0000
ROA not before: Mon 01 Apr 2024 09:09:56 +0000
ROA not after: Mon 30 Jun 2025 09:09:56 +0000
asID: 19905
IP address blocks: 41.220.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441 (0x5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Validity
Not Before: Apr 1 09:09:56 2024 GMT
Not After : Jun 30 09:09:56 2025 GMT
Subject: CN=660a79e7-94c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:88:c7:2f:6d:40:c8:68:6d:02:cd:75:11:
fa:26:0f:8f:4c:c9:76:cf:80:fb:8f:20:f3:c0:0f:
78:2e:30:8a:61:1f:4c:e7:4b:2e:17:22:76:a5:49:
2a:31:6e:02:5d:10:a5:36:b1:56:35:64:6b:45:c2:
cb:a1:cb:70:f9:e6:78:9c:a2:df:cc:99:48:13:02:
bf:6a:ca:12:0a:24:0c:c9:d5:9f:e5:d2:88:a9:31:
4c:20:3c:0c:60:91:17:2d:68:97:06:33:75:20:be:
33:c9:c0:7c:0a:4d:72:5d:fe:61:45:e7:30:0e:90:
2d:9e:f4:00:ee:1d:0f:31:73:7f:f8:45:35:bc:3a:
db:41:06:5b:4a:51:7c:80:0d:81:16:c6:58:09:53:
12:39:af:82:a2:9d:95:cd:0f:83:38:ed:8c:6c:d0:
63:19:86:31:4d:d0:22:61:ea:72:6c:a0:91:c6:02:
b7:8c:2c:9c:ae:a9:ba:56:1e:36:0f:9f:8e:0e:25:
d9:3f:46:6f:5d:55:df:95:bb:c0:48:6a:f1:13:17:
dc:15:89:ca:c2:e0:82:23:f9:41:f1:eb:41:a2:22:
fe:6e:88:27:9c:a4:2d:80:1c:50:6b:30:15:26:c9:
70:5e:dc:16:28:65:62:54:6c:ee:fe:9c:c1:dc:40:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:D0:A6:9A:BA:18:9A:D3:70:22:93:7F:B7:8F:BC:6A:FC:32:7E
X509v3 Authority Key Identifier:
keyid:2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/9DA32534F00711EE898986C5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.220.64.0/20
Signature Algorithm: sha256WithRSAEncryption
48:00:05:23:41:ed:89:c1:2f:d2:94:a6:68:6f:98:7a:04:fd:
d0:71:e1:2c:6f:58:02:cd:89:43:14:e2:1b:77:42:04:82:44:
73:1e:30:16:a5:a3:bd:78:a9:76:be:e5:1d:cd:5b:24:16:0b:
a8:fb:1c:e8:fd:74:80:4a:8e:93:23:20:8e:ae:2c:87:e4:0d:
7b:b8:28:f2:d7:7a:5e:f4:89:af:4c:5b:31:44:ca:03:66:67:
95:b0:48:6d:08:40:3e:b8:1f:17:34:88:0d:24:67:f9:14:f3:
b1:ad:6c:fa:34:23:08:17:2f:1e:d2:4d:71:b4:cb:d8:ee:fd:
09:b1:a8:a9:d1:1f:66:12:a9:9e:6d:d5:78:d0:d0:07:92:2a:
25:63:3d:e9:dd:c7:5c:52:61:b3:57:0a:91:3a:a1:e6:f5:bf:
80:47:44:9d:52:8b:d9:ac:51:a1:cd:9a:7a:95:06:a3:fa:b8:
bd:45:aa:94:e5:39:8a:b2:62:15:29:e8:8a:72:2d:f8:04:14:
4d:a2:d5:e1:37:17:4f:ff:89:c7:f5:55:09:51:4b:25:1e:72:
1c:00:c6:23:49:54:69:4d:d0:1c:23:14:0e:82:7f:ef:92:1c:
d6:31:29:8a:78:bf:10:16:b6:95:29:0e:09:38:27:79:be:c5:
a9:c0:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:53 2024 by rpki-client on console-ams.rpki-client.org