Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/43E1BDF2F95C11EBACA1E93DD8A014CE.roa
File: 43E1BDF2F95C11EBACA1E93DD8A014CE.roa (raw, json)
Hash identifier: jtNO13rj1M0ghD4GjsATf2dtAxGGZDj246YjTe+oOGk=
Subject key identifier: C6:4E:98:3F:2C:66:CF:4C:BD:DA:0D:97:69:A4:6B:85:EC:13:9F:C2
Certificate issuer: /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial: 0190
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/43E1BDF2F95C11EBACA1E93DD8A014CE.roa
Signing time: Mon 09 Aug 2021 21:54:22 +0000
ROA not before: Tue 10 Aug 2021 21:54:13 +0000
ROA not after: Sun 10 Aug 2031 21:54:13 +0000
asID: 37468
IP address blocks: 102.130.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 30 Jun 2024 00:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Validity
Not Before: Aug 10 21:54:13 2021 GMT
Not After : Aug 10 21:54:13 2031 GMT
Subject: CN=6111a40e-f2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:e6:a8:d1:7c:2d:19:24:14:5b:92:57:f5:
f4:b6:fa:03:05:b8:a7:ef:a5:f2:c2:74:1f:74:fa:
c4:43:76:32:ca:67:e7:34:df:80:cf:54:bf:27:a6:
d2:8c:8c:ca:98:b6:30:57:db:3a:36:af:74:cc:1c:
e5:ac:62:4e:8a:96:14:7a:7a:a3:e4:a6:5d:28:e8:
14:0b:1b:34:23:f6:08:06:2c:c3:2f:73:50:7a:9f:
6d:78:ce:37:d0:16:82:4f:66:13:63:28:79:f0:84:
63:a0:a6:26:e8:2b:c7:cf:09:f6:02:f4:e9:96:cf:
d8:fd:ed:07:71:2e:c6:a7:9c:99:58:c0:2d:de:ba:
cf:00:25:cd:82:20:ad:88:38:21:32:2e:74:3e:9c:
fd:c3:51:74:f3:0e:e0:ef:e9:07:53:70:e3:85:1c:
3e:29:a6:36:2c:76:ff:25:c4:4f:78:1d:aa:cc:23:
a0:ca:00:5d:f8:fd:96:68:8f:8d:0f:37:4c:cf:0e:
90:ae:ed:cc:a8:62:bd:f5:e6:2a:48:93:65:0e:f7:
bc:a7:b6:f0:7f:e7:a8:60:9b:08:ee:2a:f9:f7:8f:
9b:df:04:82:08:8c:8d:03:48:fa:d8:39:78:f9:d8:
b8:89:ea:93:1a:ea:5d:ea:73:a6:d4:8e:5b:b0:b0:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:98:3F:2C:66:CF:4C:BD:DA:0D:97:69:A4:6B:85:EC:13:9F:C2
X509v3 Authority Key Identifier:
keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/43E1BDF2F95C11EBACA1E93DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.130.64.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:02:05:10:ae:c5:b4:68:be:b6:ab:0a:12:b0:e4:8f:96:47:
f9:45:4d:f9:cf:b8:0b:e6:5e:f0:ca:06:ec:dc:27:3c:a1:a8:
63:dd:57:a1:e1:08:d0:e3:48:25:29:40:fb:c2:cd:87:13:13:
62:26:fe:8b:de:bb:78:34:b4:8e:67:56:74:62:a7:62:d1:8e:
6c:12:68:f1:8c:32:25:1e:d9:10:b3:08:5e:ce:ce:c9:a7:a2:
6b:b9:d1:16:e6:42:34:5e:fc:a1:50:31:f2:20:1b:69:80:f0:
cf:74:e4:36:ba:7c:08:9c:8b:e4:a1:e6:58:40:62:c8:8a:40:
c1:e3:99:bd:62:80:5a:fc:d3:68:a2:41:36:c8:4e:bc:5b:09:
ec:9d:34:ac:c9:1d:93:f8:4f:7c:4c:f7:12:8f:e9:c7:89:5e:
68:be:13:a7:a4:09:65:c0:82:ba:ab:3b:fb:9e:2e:a4:9d:0b:
fb:77:0e:ef:7e:e7:a9:21:0d:35:f4:f4:52:55:7f:39:0b:3b:
60:65:2d:82:de:10:bc:0f:32:a1:aa:57:40:05:e5:92:5c:50:
a6:e8:1f:d7:3d:45:5c:3b:aa:c0:ab:40:7e:56:32:52:4a:af:
f2:9f:a1:af:b1:b8:d2:cc:61:fc:1a:e0:e7:07:45:9b:ca:cb:
82:ee:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:14:22 2024 by rpki-client on console-fra.rpki-client.org