Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/F651CEB6579011EE8A5472724AD9E6FC.roa
File: F651CEB6579011EE8A5472724AD9E6FC.roa (raw, json)
Hash identifier: 5bXimLkE8Qqx3GSG77JS4WMgm65eY1+wSpVGQZoXe9k=
Subject key identifier: E7:B2:41:03:94:F9:C5:08:DA:12:5A:39:44:7E:F6:3F:AD:A9:5B:BB
Certificate issuer: /CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Certificate serial: 01C7
Authority key identifier: 0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/F651CEB6579011EE8A5472724AD9E6FC.roa
Signing time: Wed 20 Sep 2023 08:37:41 +0000
ROA not before: Wed 20 Sep 2023 08:37:38 +0000
ROA not after: Sun 01 Jan 2034 08:37:38 +0000
asID: 328178
IP address blocks: 102.212.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Validity
Not Before: Sep 20 08:37:38 2023 GMT
Not After : Jan 1 08:37:38 2034 GMT
Subject: CN=650aaf55-39aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:4d:41:c3:12:7e:81:0c:7b:9f:ea:b1:c7:
6a:89:06:0a:13:d0:cc:fe:1a:b8:24:35:36:fe:c9:
1e:70:8e:3b:63:48:f9:fb:0b:d4:ee:c2:4a:db:98:
87:38:e2:8d:fd:03:1e:14:91:bb:d8:8c:0f:9a:ac:
df:7e:a4:ff:80:75:34:99:11:27:10:a2:76:31:d0:
89:64:96:0a:03:c0:e5:db:6b:ca:36:c2:b6:77:a1:
fe:4b:72:aa:c5:5e:a5:bf:5b:e0:8f:fc:60:5b:82:
15:9b:22:72:d0:88:ef:e9:0c:da:db:34:d2:1c:d6:
75:fc:ea:cb:da:13:30:4c:8f:41:fa:ea:38:fe:0b:
10:27:96:52:2d:81:c7:93:d1:08:d5:dd:bb:78:b8:
cd:60:47:56:37:f0:12:56:22:11:a6:41:1c:0d:eb:
ef:49:52:92:45:c1:b5:97:05:17:e9:d5:cb:c5:b2:
08:69:cf:3c:72:27:59:d5:79:9d:8c:30:0d:e2:e7:
a8:fc:3c:12:b6:d9:01:e6:f6:f8:a5:96:79:3c:45:
5b:b3:31:60:7d:65:9b:05:5c:61:92:f2:24:28:0a:
21:56:f3:8a:da:d9:e7:b0:c1:0a:ec:d4:bc:a6:95:
1d:25:f9:5b:fa:75:28:41:89:f1:c0:06:70:23:77:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:41:03:94:F9:C5:08:DA:12:5A:39:44:7E:F6:3F:AD:A9:5B:BB
X509v3 Authority Key Identifier:
keyid:0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/F651CEB6579011EE8A5472724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:ae:cc:71:14:ff:8e:5d:d8:90:b1:8d:f7:01:a3:9a:d7:d7:
23:e7:f2:04:0d:0a:c2:c3:d2:85:36:15:8d:c6:d8:de:6a:73:
2d:a8:2e:be:c2:c8:98:87:93:c0:7d:5d:78:96:f4:16:03:a0:
b4:16:6d:44:f7:b1:af:4f:4e:f0:f8:5c:cd:ad:91:90:fb:41:
cb:09:de:82:f9:23:93:f4:f3:68:7d:74:4a:f3:03:cf:92:a5:
b3:0f:bb:3c:65:c2:7c:55:80:cb:08:8a:e7:89:68:fe:65:da:
4b:0c:20:0a:59:d1:90:ce:54:c8:1c:3b:66:75:75:8a:88:56:
c8:9e:0a:a3:db:6d:30:94:d9:c9:0e:be:18:0a:1f:ea:61:95:
64:fa:6a:09:ef:64:5d:7a:f5:0c:4d:88:18:3c:4c:85:0e:47:
02:20:9c:fa:98:2e:c7:18:3c:3f:4d:25:87:ba:37:07:06:b0:
c8:4d:a6:24:fa:1b:48:38:bf:14:9e:70:21:04:b5:16:06:ec:
58:09:d3:f5:a8:f1:68:12:e0:f7:c3:42:62:25:5f:5d:1c:f8:
d1:fa:1a:da:ab:86:97:b2:c7:8d:b8:f8:73:ef:db:67:53:d7:
f8:14:30:bf:4f:e1:e3:db:ec:21:a0:06:9b:ee:c6:c5:6b:dd:
f0:92:d1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:55 2024 by rpki-client on console-fra.rpki-client.org