Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B3AF20B22BCC11EEADC220224AD9E6FC.roa
File: B3AF20B22BCC11EEADC220224AD9E6FC.roa (raw, json)
Hash identifier: nXzorb03me3+qUCitQD81j7/qTZ3iZHzisnNHDuCpaA=
Subject key identifier: 2B:62:78:6A:DF:85:59:87:60:D9:BB:B2:23:D5:56:24:8E:D8:2C:74
Certificate issuer: /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial: 0389
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B3AF20B22BCC11EEADC220224AD9E6FC.roa
Signing time: Wed 26 Jul 2023 15:54:28 +0000
ROA not before: Wed 26 Jul 2023 15:54:25 +0000
ROA not after: Mon 31 Jul 2028 15:54:25 +0000
asID: 328813
IP address blocks: 102.220.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.mft
rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Validity
Not Before: Jul 26 15:54:25 2023 GMT
Not After : Jul 31 15:54:25 2028 GMT
Subject: CN=64c141b4-e41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:5d:83:74:45:55:95:cd:3d:1d:75:af:32:
b2:f0:8f:16:33:67:c6:5c:8a:2c:af:b8:97:bc:9e:
66:f5:a8:1a:5b:57:0b:f6:69:eb:df:62:09:f7:c1:
5b:72:b7:99:78:bd:37:71:8e:56:e4:0a:f8:c6:a7:
0b:bd:39:b9:70:10:ca:98:11:05:d6:43:a1:4c:a1:
7d:8f:17:f0:fc:57:af:42:0c:f5:1d:7d:b2:85:21:
6d:08:8f:44:8b:da:a9:c8:79:b4:ee:6c:f1:97:58:
2e:a9:8f:48:7c:58:ec:f1:76:31:e0:a4:a5:80:9f:
0b:b8:0d:e6:34:8e:15:ed:9a:04:8a:8e:e5:98:eb:
5e:56:a5:e8:33:7a:6d:7a:c1:ed:b8:70:7b:3b:f3:
f0:cd:00:86:60:bd:74:99:34:8a:78:e0:be:06:b3:
98:a3:b8:24:ec:2b:36:e1:29:a3:c7:35:ea:57:30:
4f:aa:ff:f7:2b:13:7b:a0:22:e0:82:8c:79:22:db:
ac:fa:c2:54:6f:d9:c5:6b:86:d7:73:72:20:2c:0e:
d6:89:24:d9:23:05:66:b7:21:a9:29:24:77:e7:d3:
52:6b:d3:9b:14:76:c1:35:81:42:00:67:c6:16:72:
dc:28:9a:e4:5c:aa:37:0c:1f:1b:97:e6:c4:54:9e:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:78:6A:DF:85:59:87:60:D9:BB:B2:23:D5:56:24:8E:D8:2C:74
X509v3 Authority Key Identifier:
keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B3AF20B22BCC11EEADC220224AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.200.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:03:ed:f6:34:b9:7d:dd:84:41:ad:37:d4:68:13:d4:4a:81:
64:03:31:1f:6b:52:f5:db:df:62:5e:70:8d:cc:e7:f4:ee:07:
b6:84:64:47:84:6a:11:fc:5a:94:9a:3d:fe:5a:c1:6d:58:8c:
1e:c0:da:c2:af:a6:fb:ec:f1:9b:7e:d2:7a:d8:97:10:f5:fb:
44:f9:d9:78:94:94:d4:4d:18:98:ab:99:15:87:ad:52:36:f2:
91:51:05:9d:3b:78:df:87:06:b0:bb:73:94:d5:cf:37:a2:c8:
f5:73:95:f8:d9:a1:9a:d0:b2:c6:30:41:61:39:81:60:5c:b9:
17:a0:33:65:f2:89:40:2f:89:cd:43:46:90:c9:35:7a:b1:50:
f0:22:4b:da:5a:5b:07:d2:8e:3c:f6:9e:ef:b4:09:fc:49:90:
88:a0:74:de:b5:0c:64:05:c7:d9:b4:5a:76:a6:8f:56:9d:5b:
cf:e6:0f:90:98:da:53:75:94:19:c6:94:a9:95:21:41:f7:20:
59:fa:e6:2a:3f:70:8e:90:2b:3f:67:c3:d7:22:cb:55:c0:2f:
f8:44:b3:8c:fd:d0:d5:9b:56:88:4d:8e:c8:81:b0:cb:db:09:
24:96:b6:8b:ae:b4:d8:19:41:38:e6:b8:68:11:25:fc:38:73:
c8:8d:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:24 2024 by rpki-client on console-fra.rpki-client.org