Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/8923FE84E70411ECB97A00C7F1222468.roa
File: 8923FE84E70411ECB97A00C7F1222468.roa (raw, json)
Hash identifier: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=
Subject key identifier: 64:57:1F:D6:1C:BD:5C:B4:D4:74:45:A8:37:40:7D:F0:12:5C:BA:D7
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 07
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/8923FE84E70411ECB97A00C7F1222468.roa
Signing time: Wed 08 Jun 2022 08:25:21 +0000
ROA not before: Wed 08 Jun 2022 08:25:17 +0000
ROA not after: Tue 08 Jun 2032 08:25:17 +0000
asID: 329069
IP address blocks: 102.215.96.0/24 maxlen: 24
2001:43fe:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Jun 8 08:25:17 2022 GMT
Not After : Jun 8 08:25:17 2032 GMT
Subject: CN=62a05cf1-0150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:ae:12:26:94:d6:66:2f:64:64:cb:e5:20:
ce:e3:ef:ec:ea:b1:ac:2c:f2:e4:51:71:b2:c5:b7:
4f:ae:56:a7:ae:27:22:a1:e3:1e:e3:a0:68:63:72:
40:76:32:9c:69:13:dc:e4:12:a0:8b:1c:80:8d:e1:
84:e4:bf:14:f7:79:d1:df:f9:79:d2:4d:b7:8e:27:
36:05:63:ed:e1:a2:f4:5f:ae:65:43:b4:ef:44:d9:
97:75:8b:4f:ae:ed:16:47:e9:94:da:40:47:1f:64:
48:b6:7f:66:95:e7:fc:24:70:90:c7:a4:42:93:ea:
1d:17:43:65:b8:99:eb:aa:1e:a2:44:de:c6:2f:17:
cc:52:9d:5c:a4:b5:c8:79:47:07:ab:e6:d2:b2:ac:
b0:59:1b:84:3d:0b:89:35:4a:ab:70:48:cf:ca:a8:
90:04:38:0c:48:ea:af:81:9d:9a:e7:99:3f:e0:a0:
33:49:9a:85:32:36:ce:03:a3:86:6f:be:13:86:05:
b4:a5:71:f6:a2:0b:bc:6c:73:09:c3:30:a9:36:3f:
c2:9f:53:00:6d:68:38:b7:eb:cb:c9:0d:53:73:e5:
48:af:ed:87:d9:01:56:87:66:93:12:e1:3b:4d:51:
d0:67:10:b4:98:c4:43:d7:0e:da:e7:4d:e8:52:65:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:1F:D6:1C:BD:5C:B4:D4:74:45:A8:37:40:7D:F0:12:5C:BA:D7
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/8923FE84E70411ECB97A00C7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.96.0/24
IPv6:
2001:43fe:6000::/48
Signature Algorithm: sha256WithRSAEncryption
6e:3f:a3:84:53:91:e3:51:34:f4:1b:b7:1b:12:f3:f8:85:47:
b0:9a:4e:20:63:7f:dc:03:98:c3:d1:7c:32:cf:0b:29:31:5e:
b2:ed:92:d4:a9:15:08:23:04:99:54:9e:21:48:11:07:95:4e:
7c:d7:a6:cb:22:0b:89:e7:38:cb:be:95:06:0e:9a:fb:7e:9b:
e2:97:e9:96:4b:fe:05:a1:70:45:07:7b:8e:71:fb:4d:6a:52:
9d:6b:fb:e4:73:9c:ad:2d:91:77:4d:1a:85:7e:f8:fa:7c:5f:
f6:a2:83:49:46:51:f2:86:ac:b4:85:da:86:19:73:bd:a4:85:
22:bb:e8:79:fa:55:29:73:20:3c:21:f0:8f:d2:4e:9c:dc:67:
ae:c1:4d:2d:cb:de:79:0c:83:55:b1:39:17:6c:67:b7:52:fd:
47:16:86:ce:85:ab:d7:d8:71:32:22:1e:64:f7:a5:cb:3e:3f:
60:f3:f2:fd:85:5d:1e:2f:ee:13:2a:9e:6f:32:9f:4b:1e:b9:
47:80:1a:31:90:41:bb:18:47:7f:2e:32:7c:f3:d8:56:1d:da:
e4:93:03:49:f2:79:84:d7:e7:4d:d2:59:ab:3f:ef:f2:22:8f:
b4:ee:bd:88:af:d4:33:13:22:25:93:0c:d8:d1:a3:2d:24:10:
0f:6b:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:43 2024 by rpki-client on console-fra.rpki-client.org