Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/42F3F790CD7511ED90D70697F1222468.roa
File: 42F3F790CD7511ED90D70697F1222468.roa (raw, json)
Hash identifier: pBMuRG1HJgh4SVstyiUpIYlRbDo+xDDlMaQsl1/xXjw=
Subject key identifier: 1A:F6:9C:FC:18:D8:A0:B1:11:A2:F1:34:FE:5C:9D:72:D7:DD:45:59
Certificate issuer: /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial: 06
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/42F3F790CD7511ED90D70697F1222468.roa
Signing time: Tue 28 Mar 2023 14:31:44 +0000
ROA not before: Tue 28 Mar 2023 14:31:40 +0000
ROA not after: Thu 31 Mar 2033 14:31:40 +0000
asID: 37309
IP address blocks: 196.46.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Validity
Not Before: Mar 28 14:31:40 2023 GMT
Not After : Mar 31 14:31:40 2033 GMT
Subject: CN=6422fa50-48df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:00:4c:c5:68:f4:50:9f:72:31:3f:bf:52:
fc:c0:c1:5d:01:dc:b5:18:7c:84:b1:ff:90:e2:4f:
c9:00:86:93:c9:05:b1:6d:34:bf:7e:f8:ea:f1:41:
39:dd:b0:f9:48:4f:68:6a:cc:9f:9b:61:7b:62:01:
aa:c0:eb:29:ec:61:cc:11:be:1b:7f:61:2d:d0:c6:
88:c8:2e:b7:af:99:5f:02:c8:34:41:21:07:f8:3c:
70:f4:35:e1:1c:8e:88:d7:b2:f1:55:1f:83:1f:ff:
60:78:51:90:51:59:ef:18:28:99:06:fb:32:32:b5:
b8:fe:81:90:e1:71:eb:3c:24:5a:18:53:a8:34:46:
ef:7c:9c:22:70:11:8e:2e:0c:79:65:e7:37:54:f7:
e5:20:79:48:97:18:04:cd:ee:03:71:34:f8:4d:46:
16:5b:ed:7a:d9:37:7e:ac:b9:ef:68:1a:11:c1:a0:
64:77:e8:51:9a:dc:c0:3e:43:68:e5:d4:9c:aa:54:
36:b4:e8:e8:a7:19:60:bf:87:2f:09:06:8d:26:ed:
ec:fd:8f:3a:72:a7:6f:83:27:24:1f:59:66:40:19:
f5:73:c6:cd:4f:2f:b3:9f:85:fa:0c:40:7e:0b:29:
11:35:3f:b1:39:db:69:f8:90:e0:d6:79:96:4a:59:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F6:9C:FC:18:D8:A0:B1:11:A2:F1:34:FE:5C:9D:72:D7:DD:45:59
X509v3 Authority Key Identifier:
keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/42F3F790CD7511ED90D70697F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.46.232.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:51:07:7b:ab:22:aa:ad:a2:da:6d:35:cc:a5:d3:49:fb:3b:
ca:a1:52:d2:1d:b2:57:e3:05:b3:a9:92:21:6b:9e:f9:a9:3a:
d4:ee:b1:2d:ce:0c:a1:7c:57:74:da:cd:c7:49:55:81:7a:e1:
b6:75:f8:b8:bf:80:8c:ea:60:57:6f:df:a1:67:6c:e8:e8:9e:
ee:1b:a2:2e:cf:fa:a5:72:cd:e3:b2:8f:b6:e4:12:ff:fe:1b:
e2:bc:b2:ad:cc:1f:40:dd:fb:1a:b3:f1:f0:9d:f0:2a:99:9a:
f7:93:33:2b:76:a4:13:82:58:8b:fa:53:2a:76:2e:fa:aa:e6:
fa:69:f7:42:1e:55:a8:6c:05:e7:55:ed:bd:88:d9:eb:b1:cc:
e3:78:02:82:bb:57:55:54:10:26:e9:c8:fd:ee:dd:83:c3:be:
6e:6c:d2:39:63:20:5c:e5:bd:50:6a:fa:cf:bf:b1:57:cc:3b:
9e:f7:6d:ef:09:bf:88:53:b7:6c:d6:a7:c8:e4:e6:60:ba:73:
1e:24:a1:d8:ae:8f:28:7e:d1:f6:70:98:77:fd:83:a0:47:21:
c3:4f:8d:fe:8c:54:ab:92:20:a8:be:1f:32:dc:20:1f:c3:a9:
82:7e:ab:a9:30:ad:22:a5:1a:f7:6c:c6:d2:8e:2b:de:9f:3c:
c2:3e:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:38 2024 by rpki-client on console-ams.rpki-client.org