Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/C37677449B4211EE97C01A0BD25BE465.roa
File: C37677449B4211EE97C01A0BD25BE465.roa (raw, json)
Hash identifier: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=
Subject key identifier: 7C:CD:C6:18:64:49:7F:BC:C9:11:9F:63:A5:C4:71:6C:CE:95:C3:79
Certificate issuer: /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial: 20
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/C37677449B4211EE97C01A0BD25BE465.roa
Signing time: Fri 15 Dec 2023 12:09:15 +0000
ROA not before: Fri 15 Dec 2023 12:09:11 +0000
ROA not after: Tue 20 Dec 2033 12:09:11 +0000
asID: 14618
IP address blocks: 102.210.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Validity
Not Before: Dec 15 12:09:11 2023 GMT
Not After : Dec 20 12:09:11 2033 GMT
Subject: CN=657c41ea-1958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:81:03:b2:82:58:aa:d9:b2:98:b9:d1:45:
71:63:cb:fa:6b:72:97:7e:2c:02:35:a1:3a:fc:62:
37:a7:60:58:23:cd:9c:7d:99:1c:39:ca:f7:fc:68:
a0:7d:0e:b2:48:f7:09:af:06:9d:0a:5a:55:8a:15:
5a:e2:7f:c4:bb:36:9c:5c:5c:1c:4b:2e:8f:dc:bb:
d6:88:d4:98:d4:da:ba:30:45:ca:85:db:f5:38:77:
25:8d:52:b0:60:02:f2:c0:f0:70:62:37:28:09:aa:
df:ee:33:54:ea:c3:66:34:3b:3c:c3:a8:28:93:a2:
e4:13:c6:9c:41:47:d0:47:76:29:af:63:bd:04:1e:
27:af:0d:64:58:9b:eb:63:57:0d:ef:fb:94:70:6a:
10:b7:6f:2f:95:0c:67:9d:4b:cb:5a:2a:5d:4a:84:
a1:3c:99:4b:a1:ef:74:d8:24:92:b6:b0:1b:b5:76:
fe:df:06:35:b8:c0:c5:f0:0b:9c:bf:e1:21:53:00:
67:52:c2:11:a9:fd:b5:ce:d6:ff:1d:5b:81:ed:27:
24:13:0d:7c:d8:af:a9:e0:4e:dc:30:10:9a:52:79:
23:d7:9f:c4:52:f2:e4:d5:69:48:fd:1e:c1:da:d1:
72:50:51:32:3e:c3:4b:99:b2:dd:1e:24:3c:62:2d:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:C6:18:64:49:7F:BC:C9:11:9F:63:A5:C4:71:6C:CE:95:C3:79
X509v3 Authority Key Identifier:
keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/C37677449B4211EE97C01A0BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.190.0/23
Signature Algorithm: sha256WithRSAEncryption
81:5c:aa:9f:12:b2:66:da:d9:92:4a:be:d4:d0:06:79:10:f1:
fe:d4:20:1e:38:32:83:3d:59:44:e2:13:a6:27:9c:a2:bc:1f:
76:36:64:57:10:61:b7:a3:1f:9d:70:d6:d3:28:2c:75:34:c9:
2e:7d:b5:ef:2f:bf:c8:fb:ff:42:59:ec:88:14:5e:1c:bc:67:
9d:cd:f3:f4:2e:27:fd:dc:69:96:e1:40:14:67:2e:62:1a:f8:
46:26:90:71:d0:30:f3:95:0a:5c:db:26:ec:f2:cc:ab:f8:2d:
02:d4:c8:86:ca:80:9c:7a:0d:01:83:a5:17:0d:63:1a:40:f5:
36:12:fd:47:3d:d8:da:3c:0f:36:52:33:ab:5c:c9:b0:65:4a:
34:71:21:b2:7d:d9:85:12:96:26:cd:28:48:60:62:5f:6f:57:
3e:d5:0c:5f:90:5d:82:d6:e5:7f:a6:a7:04:fc:bb:b4:fa:c3:
59:08:f1:e9:c7:b3:9d:40:f5:16:26:5c:a1:69:b3:47:f7:ad:
f8:2a:0a:87:69:e5:3b:61:99:14:70:42:dc:84:46:52:a4:86:
2a:df:0a:91:20:f3:16:4d:f5:f0:c8:ec:fc:93:29:86:28:44:
cb:06:94:3c:48:5d:4d:c8:15:d5:a6:51:a2:76:ce:36:23:a6:
0b:c2:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 03:20:24 2024 by rpki-client on console-fra.rpki-client.org