Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/40E2C4A2E0D411EBB731DB11F8AEA228.roa
File: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (raw, json)
Hash identifier: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=
Subject key identifier: FB:98:BF:B5:5F:70:C8:77:F1:70:8A:16:10:88:DD:F6:14:6B:09:32
Certificate issuer: /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial: 95
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/40E2C4A2E0D411EBB731DB11F8AEA228.roa
Signing time: Fri 09 Jul 2021 16:39:39 +0000
ROA not before: Fri 09 Jul 2021 16:39:34 +0000
ROA not after: Wed 31 Dec 2031 16:39:34 +0000
asID: 37025
IP address blocks: 102.219.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 May 2024 00:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Validity
Not Before: Jul 9 16:39:34 2021 GMT
Not After : Dec 31 16:39:34 2031 GMT
Subject: CN=60e87bcb-4644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:be:50:73:97:65:04:bd:13:8b:de:08:78:
6a:fc:c2:5d:d7:91:eb:d7:98:2c:ab:a8:9f:96:2d:
d2:53:51:55:81:26:18:48:fa:55:a8:96:ad:a8:77:
4f:71:4c:99:66:d7:bd:41:9b:f3:11:0e:4d:42:45:
27:9e:93:32:e2:dd:bd:8b:80:07:36:55:c3:dd:94:
32:49:44:3d:7d:20:64:45:aa:e5:0a:71:c1:8b:c3:
16:9a:ab:60:ec:37:04:bc:bc:06:1e:90:ef:85:97:
b3:d5:db:58:62:9e:63:a8:54:4e:23:18:13:ff:17:
60:1d:5a:53:a3:da:c5:4b:02:18:6d:75:4f:4f:2f:
91:d2:74:5c:95:f7:21:cf:dc:a9:8d:00:7e:04:0c:
ab:27:ae:64:40:e1:93:0c:84:dd:ad:61:5e:26:99:
60:fe:3e:21:78:27:d5:a4:7d:15:25:4c:7e:b2:72:
fe:38:96:fe:58:8b:bc:63:5b:b2:4a:23:e3:95:d6:
3b:4c:72:7e:90:89:56:12:f2:f2:54:24:31:c7:fc:
25:32:74:ff:4f:c8:de:9f:18:a2:f6:24:7a:ed:c6:
e3:b8:a0:a3:7a:dd:29:77:d4:a8:dd:04:dc:e9:41:
46:69:5c:4c:8f:b6:23:97:01:ce:2c:1b:b6:48:81:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:BF:B5:5F:70:C8:77:F1:70:8A:16:10:88:DD:F6:14:6B:09:32
X509v3 Authority Key Identifier:
keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/40E2C4A2E0D411EBB731DB11F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:eb:fc:38:77:86:e4:36:5f:27:c0:d1:ee:2a:09:6d:9d:58:
22:9f:0b:20:a5:c0:d4:08:67:b8:be:39:c6:e9:3e:1a:9c:95:
f1:b0:ad:08:9a:e2:1b:87:c4:ed:28:f5:78:3b:24:1d:14:70:
54:a2:a6:9b:c1:cb:f2:4b:b4:d4:91:8b:98:b5:a0:5c:ec:90:
e6:7e:4c:24:eb:0a:da:e0:1b:4a:69:34:b7:7e:4d:f0:7b:60:
4e:17:70:85:de:19:3a:67:4b:be:e6:72:78:f0:a3:1a:8c:8b:
65:6d:05:50:ba:87:90:b5:5f:c3:11:03:bb:96:a6:44:3d:25:
88:22:e1:ec:9e:f4:8d:e0:b8:9c:78:0e:fe:d9:ec:a1:dd:82:
26:d8:76:78:c6:9a:5c:bc:15:66:06:73:5c:74:c8:92:fe:42:
4a:18:ca:97:3d:86:16:8d:2d:4b:57:40:3f:59:41:ca:87:12:
ee:73:a4:d1:f7:fd:36:7a:40:91:28:a4:d9:62:ad:c2:4a:45:
53:cf:5a:68:7d:73:1d:65:e7:60:2e:b2:1c:6d:93:08:1b:6d:
c4:33:5f:0b:c4:a5:13:fb:fd:ba:1d:b5:8b:98:ef:32:4a:6e:
36:cd:e1:0b:58:24:2b:cc:52:7f:84:78:cc:5b:f6:4c:d9:84:
99:10:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:38:57 2024 by rpki-client on console-ams.rpki-client.org