Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/AC9E51C2D4DE11EBADC42846F8AEA228.roa
File: AC9E51C2D4DE11EBADC42846F8AEA228.roa (raw, json)
Hash identifier: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=
Subject key identifier: F3:C4:7A:B3:AC:FC:82:3D:34:2E:20:6C:FB:23:7E:38:A0:C8:5D:0B
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0871
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/AC9E51C2D4DE11EBADC42846F8AEA228.roa
Signing time: Thu 24 Jun 2021 11:24:01 +0000
ROA not before: Thu 24 Jun 2021 11:23:56 +0000
ROA not after: Wed 30 Apr 2031 11:23:56 +0000
asID: 327750
IP address blocks: 102.23.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Jun 24 11:23:56 2021 GMT
Not After : Apr 30 11:23:56 2031 GMT
Subject: CN=60d46b51-b13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:72:64:1c:97:af:43:d8:5a:92:e5:2f:6e:
58:d7:92:f6:2f:07:30:b6:38:d0:71:8d:d7:f8:67:
bd:68:49:2b:3e:e9:4a:64:8d:90:b4:67:0f:d2:9f:
be:4f:5c:84:08:b3:d3:cd:16:4b:cd:62:54:4c:18:
7a:12:c9:b2:18:84:df:cb:f9:24:47:f1:3e:bd:87:
4b:2e:5f:fd:60:fd:98:a4:b9:ab:b4:fb:2d:5e:62:
97:35:d2:ab:41:68:52:60:e9:26:53:80:27:78:70:
ad:9a:44:99:ec:03:8d:ae:e6:24:31:de:94:c7:02:
8f:e8:41:3f:15:4f:9c:ae:e2:c9:7b:2e:0b:6c:e1:
05:0f:ff:ae:2f:f4:54:ff:db:25:27:ad:55:b0:52:
af:8e:cd:18:d5:b9:64:85:d6:8a:f7:f7:3f:fd:96:
05:32:f2:fd:58:06:44:f0:dc:04:6c:c7:3d:8d:5d:
e1:47:be:55:9e:1e:2f:e9:14:88:00:75:bc:7e:d6:
81:61:74:c6:cf:4e:65:b5:84:7b:0f:64:d2:64:cf:
f1:14:6d:eb:bc:c7:16:f5:07:ff:da:6e:c5:3c:10:
94:c0:0b:f5:4c:26:04:dc:d9:2a:67:9d:43:16:7b:
96:fe:87:0e:d5:0e:29:e4:2d:2a:05:06:d2:be:fc:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C4:7A:B3:AC:FC:82:3D:34:2E:20:6C:FB:23:7E:38:A0:C8:5D:0B
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/AC9E51C2D4DE11EBADC42846F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:98:9b:e1:78:71:46:32:f5:10:5f:59:00:14:1a:dc:b0:d4:
e3:03:84:5e:53:36:7e:c8:09:31:67:a1:5a:07:aa:6b:f2:d2:
a1:e6:4d:26:b4:62:e9:21:45:b1:62:19:0a:20:87:14:4f:d3:
c2:40:25:f3:00:54:8d:fd:d3:76:3c:58:b8:89:c8:3a:f6:3c:
58:a7:57:8b:73:59:8f:73:5a:87:f1:f0:39:b6:54:85:87:60:
90:c2:e3:9e:7f:2a:88:dd:e4:63:47:52:69:33:87:4b:89:73:
12:8e:c5:b8:9c:a9:a8:29:47:6b:67:52:0f:83:85:1f:6c:cf:
df:ac:bd:1f:b9:96:81:72:1c:5b:0f:e6:a8:4f:3c:9a:9a:cb:
17:37:d1:a0:e0:df:a4:68:51:a0:7f:78:b7:cc:5a:b3:be:a6:
48:52:9f:ce:a4:fc:ea:5a:7b:23:dd:39:f1:56:cf:81:67:da:
9b:38:f7:42:61:10:5d:71:d9:37:00:7d:4d:a9:23:eb:b3:d8:
e0:3e:91:8c:49:54:4e:3d:47:72:e7:c9:2e:84:75:d9:67:68:
4b:e6:b7:e2:90:36:95:d2:c7:47:c6:38:50:75:d4:c3:0b:f0:
ef:33:de:83:76:e6:17:b4:dd:ed:b0:92:36:28:a8:78:34:e1:
21:26:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:45 2024 by rpki-client on console-fra.rpki-client.org