Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/B408418E4D4511EEA5BF80254AD9E6FC.roa
File: B408418E4D4511EEA5BF80254AD9E6FC.roa (raw, json)
Hash identifier: XsUzNoI7Cnb7Doz8DQeMLWbR1sVWZHM6EUhchZpGFPE=
Subject key identifier: 6A:CA:6B:2E:A7:EE:95:A8:53:9A:E1:31:A5:6D:86:81:EA:01:F9:05
Certificate issuer: /CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Certificate serial: 0525
Authority key identifier: 22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/B408418E4D4511EEA5BF80254AD9E6FC.roa
Signing time: Thu 07 Sep 2023 06:13:46 +0000
ROA not before: Thu 07 Sep 2023 06:13:43 +0000
ROA not after: Mon 07 Sep 2048 06:13:43 +0000
asID: 328358
IP address blocks: 102.134.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1317 (0x525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Validity
Not Before: Sep 7 06:13:43 2023 GMT
Not After : Sep 7 06:13:43 2048 GMT
Subject: CN=64f96a1a-7bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:73:ee:47:c1:3b:b2:3d:48:ce:0e:11:98:
31:e6:25:b8:6d:95:81:5d:70:ab:9a:c8:47:bd:0d:
b4:09:84:dc:66:e7:db:f2:ba:cf:45:7d:24:8a:e4:
07:43:d8:d3:5a:cf:8c:11:22:a0:bf:dd:47:e6:9c:
73:80:d5:6a:2b:e3:d4:0b:86:0d:c8:d2:98:79:d1:
48:bf:9e:ec:a2:96:d1:2e:5a:5f:6e:ac:42:5e:3d:
2f:b2:fc:c7:a4:f6:b9:8b:91:64:77:b9:21:b8:2b:
98:26:6d:1a:b8:6b:11:4a:a8:27:fc:49:72:91:40:
53:bd:3c:ef:fd:c3:c8:a8:73:c1:af:72:72:36:4d:
52:4f:d1:49:7a:11:89:bc:ed:e9:be:20:9b:2c:c0:
9b:97:2e:fe:cb:f3:66:88:39:a2:d5:ed:a2:44:42:
5b:72:e8:2b:d1:3a:42:eb:db:12:90:c3:60:fa:35:
cc:83:f8:24:93:07:27:24:66:0e:85:22:a2:7c:d4:
a4:20:44:21:3e:1d:ad:2f:58:a6:98:53:9f:2b:7a:
c1:63:09:ca:ec:1e:55:79:7c:a2:e0:80:68:e0:d9:
00:58:89:d5:99:38:a1:e6:3c:37:96:bf:5b:df:a8:
96:12:3e:28:e5:81:a4:d8:83:b7:29:93:48:ac:c5:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CA:6B:2E:A7:EE:95:A8:53:9A:E1:31:A5:6D:86:81:EA:01:F9:05
X509v3 Authority Key Identifier:
keyid:22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/B408418E4D4511EEA5BF80254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.146.0/23
Signature Algorithm: sha256WithRSAEncryption
48:7c:95:6e:47:1b:76:c2:72:c0:66:04:bc:e7:08:59:2e:c9:
53:1c:be:e4:8f:af:fb:f0:96:db:16:c2:19:f0:18:4d:d8:86:
71:be:7f:48:f1:45:0f:7f:dc:9a:78:02:a3:8c:8c:a0:bf:07:
e9:5d:22:35:a3:ae:b7:e4:ca:68:d7:d8:8a:ce:8a:b2:5f:1d:
6a:2a:69:2b:05:7e:24:9b:06:a0:42:2c:f1:cd:70:6c:bf:5c:
96:2c:4b:39:7b:17:45:ea:d9:0f:20:0e:0c:04:64:0b:f9:df:
91:24:0e:0b:f7:72:3f:93:29:6b:a4:bf:94:66:20:9a:8a:3f:
24:c6:bc:7c:bd:d7:fe:18:c3:01:91:50:b0:90:fc:aa:44:e9:
cd:b1:71:22:e7:94:ae:09:2e:4c:fa:45:8d:14:23:9a:e2:97:
b2:ca:e8:98:c7:27:21:58:0e:0d:da:ca:73:2a:06:09:a6:d7:
78:02:e5:34:3a:22:68:bc:ab:28:5f:c0:fe:5a:c8:61:35:0f:
5c:1f:c6:cf:33:4e:57:29:7e:47:a3:01:8f:97:6d:89:1e:3b:
d1:f5:78:83:a5:11:60:54:7d:83:ec:f4:ef:34:bc:ff:cd:b0:
9f:77:88:9c:8c:40:1b:2f:58:cf:cc:f8:01:8c:0a:5d:32:5c:
99:00:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:18 2024 by rpki-client on console-ams.rpki-client.org