Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/B39DEA9E9C5F11EB929A9E21F8AEA228.roa
File: B39DEA9E9C5F11EB929A9E21F8AEA228.roa (raw, json)
Hash identifier: nXH7Fk1rA8ErZqPYeVLGsXae4WxPl+j1t+V+c7REQ+Y=
Subject key identifier: B2:A2:81:45:70:F7:64:0C:FC:81:84:CC:05:97:D5:85:37:68:FE:55
Certificate issuer: /CN=F3663E7AAF/serialNumber=24753CA915E4EC2D2ECB9865B90DD5ED0EFF0562
Certificate serial: 02
Authority key identifier: 24:75:3C:A9:15:E4:EC:2D:2E:CB:98:65:B9:0D:D5:ED:0E:FF:05:62
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/B39DEA9E9C5F11EB929A9E21F8AEA228.roa
Signing time: Tue 13 Apr 2021 13:54:01 +0000
ROA not before: Tue 13 Apr 2021 13:53:55 +0000
ROA not after: Sun 13 Apr 2031 13:53:55 +0000
asID: 328819
IP address blocks: 102.220.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft
rsync://rpki.afrinic.net/repository/afrinic/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663E7AAF/serialNumber=24753CA915E4EC2D2ECB9865B90DD5ED0EFF0562
Validity
Not Before: Apr 13 13:53:55 2021 GMT
Not After : Apr 13 13:53:55 2031 GMT
Subject: CN=6075a279-a982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:34:8c:bf:55:bc:03:a7:54:0d:72:ea:3a:
04:c2:af:a1:da:1b:cf:b3:26:2c:07:87:0a:1d:ad:
e4:df:64:10:3d:8f:fa:9b:81:64:4b:ae:10:13:4d:
bf:35:35:dc:b6:85:8f:3d:7d:08:30:4c:d0:95:00:
3e:33:b5:50:c5:c9:e6:d9:ec:b6:c1:ee:9f:76:f1:
4c:cf:38:33:a6:62:e5:b5:49:10:91:a1:6c:57:74:
c4:c6:f6:3e:18:4b:2a:09:4c:98:1f:82:79:36:58:
1b:07:cb:f0:e3:cf:57:f1:3e:f2:37:02:fe:e7:c3:
80:b8:b1:cb:93:9c:af:79:35:54:f0:1f:33:5f:55:
46:15:ac:99:ca:f5:88:84:44:f8:62:e1:e2:3d:6f:
57:01:77:50:8d:25:ca:7c:e6:17:85:b5:d1:25:e1:
b3:3f:f4:2d:b2:54:b0:74:f5:12:36:35:ca:a4:c3:
a2:d5:aa:f5:a4:7b:ea:a2:56:fe:01:5d:4d:36:26:
c5:24:64:ae:43:14:75:05:dd:6f:c3:14:10:75:af:
e5:19:0c:fc:83:aa:e0:43:af:71:a8:a7:8c:3c:f9:
33:00:ae:ff:08:e8:b4:85:e5:f9:19:ec:c1:ff:7a:
fd:85:d6:d6:75:55:72:c4:0d:7f:ce:56:ec:2f:65:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A2:81:45:70:F7:64:0C:FC:81:84:CC:05:97:D5:85:37:68:FE:55
X509v3 Authority Key Identifier:
keyid:24:75:3C:A9:15:E4:EC:2D:2E:CB:98:65:B9:0D:D5:ED:0E:FF:05:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/B39DEA9E9C5F11EB929A9E21F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.112.0/24
Signature Algorithm: sha256WithRSAEncryption
71:70:ed:09:5f:cb:f0:f0:ee:c1:98:3a:9a:3c:df:5f:14:3b:
5a:dc:14:fb:05:3a:7d:5a:f6:c5:4a:03:1e:da:e3:88:31:7a:
4a:34:75:e2:45:0c:d7:99:ec:6a:f7:bc:43:f1:a3:69:e9:f8:
88:7f:a9:a6:7a:a6:47:9a:49:20:5e:b6:42:fa:78:13:b6:44:
27:26:a9:a6:71:d0:39:03:ee:1e:98:e4:3e:a7:81:1b:ba:af:
52:e4:96:e8:63:52:16:22:c6:14:5c:07:87:e9:53:a7:50:15:
79:8f:f1:cf:76:ce:cf:f6:3c:ea:8d:4f:34:ab:87:fa:1d:d8:
fd:f3:d5:a8:7e:dd:95:4d:ee:69:69:75:75:cc:e4:f5:29:87:
a4:84:66:94:de:3b:b6:18:ea:a0:0b:ac:c4:c7:9c:c9:47:20:
67:7b:f2:53:83:4d:da:1b:a3:eb:11:65:f3:63:ef:db:14:a0:
47:1f:60:29:15:80:b1:d2:4c:89:e6:2b:9b:ba:18:bb:91:b9:
d5:60:54:c4:29:e0:5b:e1:01:f6:c0:6b:c3:dc:d5:78:dc:20:
90:9d:f9:69:88:91:b3:e9:f0:d3:c0:16:fe:21:9b:5b:d9:f3:
3f:b5:27:75:a5:6e:48:f4:96:1a:72:db:a5:b2:e3:18:e8:10:
f9:4c:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:08 2024 by rpki-client on console-ams.rpki-client.org