Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/F87528A6A12811EDB5D240E7F1222468.roa
File: F87528A6A12811EDB5D240E7F1222468.roa (raw, json)
Hash identifier: vHYExMtQIEcTE0uFspL7BR88kLFQ8kCFxteexWuEzOY=
Subject key identifier: 11:E7:C8:AE:C2:E3:7C:95:F3:E4:B0:64:3C:4B:11:66:62:B0:B6:EB
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 0C31
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/F87528A6A12811EDB5D240E7F1222468.roa
Signing time: Tue 31 Jan 2023 05:34:46 +0000
ROA not before: Tue 31 Jan 2023 05:34:42 +0000
ROA not after: Thu 31 Jan 2030 05:34:42 +0000
asID: 37181
IP address blocks: 2001:43f8:110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 19 Jun 2024 00:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3121 (0xc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Jan 31 05:34:42 2023 GMT
Not After : Jan 31 05:34:42 2030 GMT
Subject: CN=63d8a876-9d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:d8:46:d6:a6:35:c4:91:18:6e:bb:0a:5c:
40:c1:b1:e8:19:16:b0:19:fb:61:b8:ae:b6:90:cc:
fe:ff:f3:14:db:f0:3e:0b:96:4b:04:bd:26:4d:70:
5f:21:c1:da:3f:56:ae:f6:23:c3:f5:57:38:fa:b9:
53:cc:d5:0c:1a:36:e1:b8:ea:d2:72:bb:bb:64:a0:
3f:11:5e:f1:41:32:ba:b3:ae:c0:86:2a:32:1b:bf:
c7:f9:ec:e4:10:6b:32:8d:ac:07:cb:20:12:2e:6b:
9d:2f:43:5c:6c:ac:08:29:8d:5d:0d:e9:a4:34:2e:
12:89:88:d3:43:15:15:86:d8:41:28:2e:a6:ac:40:
1b:5b:51:c1:9c:07:5d:79:9f:0c:83:7c:07:3a:84:
a5:39:6c:78:ac:c2:5a:d6:b5:49:cf:2e:d9:fc:a1:
41:94:83:29:94:85:ab:aa:00:ac:3b:b3:b1:63:72:
02:fd:fb:5f:6b:41:66:17:91:ef:2b:03:c7:4a:d3:
97:3d:bb:79:9d:78:03:0f:2d:80:94:c9:de:2c:bc:
57:4d:4e:85:7c:64:a6:dd:17:51:38:7b:29:37:46:
5c:06:23:7b:cf:a8:c7:ab:cb:bb:e1:46:15:f7:f5:
04:12:ca:67:64:4f:2b:63:ff:62:c7:d5:bc:43:35:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:C8:AE:C2:E3:7C:95:F3:E4:B0:64:3C:4B:11:66:62:B0:B6:EB
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/F87528A6A12811EDB5D240E7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:110::/48
Signature Algorithm: sha256WithRSAEncryption
5a:14:85:7c:42:09:c1:17:c9:bf:2d:21:a4:c2:45:c8:01:4e:
e6:16:21:fc:d5:fa:04:26:88:7f:a7:ff:f3:28:20:5e:8f:c8:
0f:1e:23:b0:34:7d:3e:46:a4:51:72:b9:f7:b8:bf:da:cf:6b:
c4:5a:a3:ff:c1:63:6b:11:13:37:cf:58:01:ec:63:bb:b1:9c:
1d:28:85:17:1d:37:50:33:8f:53:f1:47:fa:8f:f0:25:4e:2d:
f5:aa:56:4a:68:11:4d:9a:9e:3c:2d:ce:95:1e:93:88:92:87:
db:85:91:02:c5:73:1d:7c:6c:fe:98:98:a0:f0:5f:4a:81:68:
be:ac:39:86:0a:e1:14:9a:9c:04:23:4d:7b:d8:f5:b4:4c:95:
7b:1e:03:9a:a1:ff:e3:52:23:84:4c:c9:c1:78:16:7f:0c:c9:
31:4f:dd:93:47:8a:d5:8c:4f:3d:50:a2:84:24:05:5a:4b:c4:
72:12:0e:df:a8:d6:23:f5:11:66:db:90:8f:6b:38:cc:7f:ce:
4c:02:62:a2:49:9f:c5:82:8c:d4:13:d0:22:66:b5:91:fe:c4:
49:9f:d3:d3:a8:41:0a:6d:a5:8a:6c:ff:b3:be:62:66:85:c6:
f4:41:a3:be:aa:5c:c1:9f:de:9b:0c:cc:9f:7e:45:84:cb:b0:
8f:eb:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 01:44:38 2024 by rpki-client on console-fra.rpki-client.org