Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/BABCAEFE91EF11E9B165E57EF8AEA228.roa
File: BABCAEFE91EF11E9B165E57EF8AEA228.roa (raw, json)
Hash identifier: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=
Subject key identifier: 8F:99:F9:19:A2:75:02:AE:62:09:5C:D3:66:F4:14:48:C2:6F:B6:25
Certificate issuer: /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial: 02
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/BABCAEFE91EF11E9B165E57EF8AEA228.roa
Signing time: Tue 18 Jun 2019 17:37:23 +0000
ROA not before: Tue 18 Jun 2019 17:37:18 +0000
ROA not after: Sat 18 Jun 2039 17:37:18 +0000
asID: 6968
IP address blocks: 2001:43f8:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Validity
Not Before: Jun 18 17:37:18 2019 GMT
Not After : Jun 18 17:37:18 2039 GMT
Subject: CN=5d092153-24a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:1d:31:22:a6:20:80:b9:ee:1f:c1:7f:44:
67:db:a7:0f:f9:eb:45:09:0d:8d:6f:19:60:6d:7c:
f1:7a:a8:8e:84:df:c5:a2:31:38:a0:ed:63:cd:e7:
24:fb:79:71:d9:10:d6:ac:ee:18:88:5f:1e:55:aa:
a1:c4:aa:a6:69:43:aa:c8:4c:90:93:b4:cb:7c:f9:
ad:ec:19:f0:08:81:a1:9b:c3:47:ee:67:11:45:cd:
a5:78:5c:67:18:0a:a2:38:7f:af:33:3c:1f:4d:bf:
10:99:6b:60:9c:3c:e0:02:10:dc:7d:7a:a7:0b:0a:
0c:78:e8:e1:3f:f5:24:49:fe:1f:be:28:35:c9:23:
23:f9:1c:de:3e:43:e5:50:e5:6e:3e:f3:43:ca:fc:
93:92:f8:94:45:be:b5:44:f3:e4:20:93:89:49:11:
1e:14:31:4c:06:d1:22:76:f6:ae:7e:e4:9a:69:e4:
da:b9:ca:c4:cd:8b:b4:97:2e:c7:1c:75:01:9e:87:
db:20:ba:7b:27:56:29:aa:7b:ba:55:54:f7:35:0e:
69:fa:62:fa:c8:b1:9b:ba:ab:00:91:f8:79:0f:86:
61:ea:90:58:21:5b:9c:d7:d5:9e:61:83:a6:47:c4:
ce:cd:91:2c:7c:a7:63:33:c3:aa:49:a4:51:e7:bd:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:F9:19:A2:75:02:AE:62:09:5C:D3:66:F4:14:48:C2:6F:B6:25
X509v3 Authority Key Identifier:
keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/BABCAEFE91EF11E9B165E57EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:30::/48
Signature Algorithm: sha256WithRSAEncryption
8b:b1:70:d6:80:07:4d:04:66:e2:42:24:ed:b5:96:1f:a7:e8:
17:11:b4:50:99:4e:a9:7b:77:6a:0b:ba:9a:e7:c1:18:a0:3f:
dd:f5:c9:cc:a5:93:1a:5b:9d:4f:08:2e:51:46:c8:d4:e5:35:
8a:0b:9c:41:08:97:98:f0:22:33:ab:e5:0d:b2:df:ea:19:21:
8f:72:97:3e:ba:08:b2:27:f8:da:e2:f7:76:1c:69:cf:a0:76:
85:a1:0a:41:c0:66:bb:43:cb:9f:2e:3b:de:a6:46:81:38:17:
f6:6c:96:63:30:85:5a:7b:b0:13:f7:47:b3:be:1a:25:37:ef:
7c:34:4e:ed:e6:cb:b8:4d:68:da:7e:16:15:bd:ba:1e:06:35:
91:a4:06:ca:18:7f:36:a0:cf:ee:25:15:03:30:c7:c2:1f:85:
db:84:ae:18:d4:e1:39:a6:67:fc:3d:82:e0:0b:97:18:2e:e9:
36:57:7a:d5:06:1e:da:2f:1b:b6:d5:d2:c5:76:8d:d2:c9:a0:
ac:d7:9b:2d:6f:36:19:2e:08:ed:f5:60:3e:cd:67:b1:28:31:
c6:2c:82:2b:39:55:14:4a:ce:23:fc:79:7c:38:4d:16:42:cc:
10:3d:bf:68:73:11:e9:7b:97:78:52:4e:97:90:39:dd:da:99:
bd:f2:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:29 2024 by rpki-client on console-ams.rpki-client.org