Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/ACCF80A0725A11E9A4F37F71F8AEA228.roa
File: ACCF80A0725A11E9A4F37F71F8AEA228.roa (raw, json)
Hash identifier: /cq3b3YEjHQKJ7r9oxTK2L2hH6NQ1gLsW5kWro4hp5c=
Subject key identifier: 1B:06:81:77:66:BE:FC:5A:0F:2A:9F:7A:23:70:A0:60:E1:AA:B9:35
Certificate issuer: /CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
Certificate serial: 02
Authority key identifier: 70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/ACCF80A0725A11E9A4F37F71F8AEA228.roa
Signing time: Thu 09 May 2019 13:02:19 +0000
ROA not before: Thu 09 May 2019 13:02:15 +0000
ROA not after: Tue 01 May 2029 13:02:15 +0000
asID: 328453
IP address blocks: 102.65.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
Validity
Not Before: May 9 13:02:15 2019 GMT
Not After : May 1 13:02:15 2029 GMT
Subject: CN=5cd424da-615b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:58:9c:81:1a:c0:18:d8:26:50:55:1f:51:84:
d5:d2:f7:be:3f:94:2f:be:ff:44:4f:22:50:ef:69:
4f:14:ee:66:79:18:ef:f4:13:11:b3:35:0d:b3:03:
29:a3:72:b1:0a:96:1b:7b:bb:71:4c:be:7a:89:a3:
f7:cf:80:ab:41:0f:21:ab:27:5e:2e:c1:d7:72:46:
03:ec:64:16:54:fa:5b:55:de:8d:3a:23:6b:ea:5d:
06:e2:fd:77:e9:d5:33:29:a8:f8:46:ba:f3:37:5a:
23:3c:75:2b:61:9f:16:b9:d6:90:28:7d:61:17:04:
f3:91:dc:ea:e5:c5:8d:a3:ad:ff:8f:eb:25:fa:d9:
97:f6:5c:c6:88:08:bb:f4:d4:b4:31:ef:06:9b:70:
78:75:02:fb:5e:d4:ab:89:c7:42:72:d6:4a:a7:2b:
0a:b1:19:f0:a4:7a:17:c4:7b:12:6c:9f:bc:ed:41:
7a:81:97:06:34:02:a9:f9:61:71:c2:d9:8e:45:60:
6e:8c:99:a0:53:48:a6:78:b8:ea:30:66:f5:5d:39:
74:9e:55:2c:40:ce:5a:03:2d:2b:ba:e3:99:2e:ee:
78:ae:02:c2:91:42:41:a7:25:78:82:22:ee:ac:8c:
d6:f9:48:ec:1d:5b:3b:8e:d7:de:0a:54:18:45:1a:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:06:81:77:66:BE:FC:5A:0F:2A:9F:7A:23:70:A0:60:E1:AA:B9:35
X509v3 Authority Key Identifier:
keyid:70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/ACCF80A0725A11E9A4F37F71F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:dc:70:af:ec:93:51:bb:25:6c:06:44:cd:e5:c9:52:1a:3e:
c5:a9:15:be:48:36:38:8c:c4:40:e8:c8:71:c1:1c:54:47:f5:
04:30:8f:bc:59:29:07:e4:a2:ac:9a:42:b4:d0:72:35:1e:97:
9c:d7:e0:fb:5a:a3:9b:9f:6e:44:92:c7:55:3b:5e:e1:31:82:
f8:49:31:e4:26:af:67:08:c7:b7:32:ef:5b:d5:59:81:21:8d:
c7:4e:38:5f:14:79:d6:44:19:39:72:92:8c:3c:1e:4e:1c:eb:
c5:b3:ad:b1:1b:56:3c:4d:4d:57:81:16:9c:24:c0:df:4a:d5:
ba:9a:47:7a:1c:56:9d:43:b5:4c:85:28:c0:79:ce:21:f4:e2:
fe:8b:58:48:07:f0:13:9e:a9:6e:a9:2d:0d:4b:50:51:2d:c9:
47:24:89:da:e2:0c:d5:97:21:dd:d0:82:4d:7a:b4:b9:a3:e4:
27:46:fc:b4:67:f2:a8:35:88:3d:21:cb:6d:2b:d5:74:b5:91:
1d:d0:fa:3e:6a:fb:71:79:01:e4:8a:48:c9:a1:b1:3b:72:a0:
07:e4:c2:05:70:ad:89:d9:e7:64:79:b7:26:a5:52:56:5d:72:
c0:08:87:2b:27:5a:b6:ef:09:9f:e0:c8:09:e4:1b:f0:9c:04:
4c:29:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:34:51 2024 by rpki-client on console-ams.rpki-client.org