Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/781C12E636D811EEA590B3444AD9E6FC.roa
File: 781C12E636D811EEA590B3444AD9E6FC.roa (raw, json)
Hash identifier: Js2yPxnRr8TnD2VHTvWz7stmjZ4nVcG6c5WJuOI5UGA=
Subject key identifier: 9E:FB:15:20:2D:A7:F9:16:96:04:38:A3:2D:8A:95:38:3F:A9:02:BA
Certificate issuer: /CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Certificate serial: 0E
Authority key identifier: 34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/781C12E636D811EEA590B3444AD9E6FC.roa
Signing time: Wed 09 Aug 2023 17:16:25 +0000
ROA not before: Wed 09 Aug 2023 17:16:21 +0000
ROA not after: Tue 09 Aug 2033 17:16:21 +0000
asID: 329270
IP address blocks: 102.212.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 24 Jun 2024 00:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Validity
Not Before: Aug 9 17:16:21 2023 GMT
Not After : Aug 9 17:16:21 2033 GMT
Subject: CN=64d3c9e9-e5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:29:93:d3:c1:c3:6b:b6:f9:b1:a1:26:e8:
20:2a:62:c7:c5:56:76:d5:e8:54:ca:9c:59:98:de:
13:0b:48:70:d3:b2:ea:eb:25:36:91:e3:37:4b:db:
66:15:7f:94:5c:65:86:b0:b0:e5:e7:9b:82:83:d6:
63:75:99:fb:c1:af:e4:02:d1:ff:06:d8:cf:53:04:
65:06:b3:f2:fa:97:71:14:ce:b0:72:4c:2c:00:34:
8a:93:d3:48:e5:02:4d:cf:49:1c:a8:e4:48:44:2a:
7c:08:5c:71:ac:38:53:d4:c8:81:60:68:53:3e:03:
20:32:5e:e4:b1:b6:42:ed:a2:dc:c0:47:a6:48:19:
a9:37:1f:8e:49:72:eb:39:d2:7f:cb:38:6c:47:c4:
d4:44:c1:88:81:0b:9a:5a:aa:d3:f2:9f:68:da:d0:
2b:d6:f5:38:2b:7d:71:08:ec:c1:7a:6a:97:36:15:
b2:f8:cd:b6:87:97:1e:5c:5c:44:9e:d0:a7:31:70:
a1:0a:67:b1:25:e8:ef:0a:ec:35:af:50:bc:05:cc:
04:0a:37:47:d4:df:90:98:f3:f0:e3:dc:07:f5:85:
43:6f:78:27:29:6b:c5:5e:65:f0:69:dc:35:3b:e9:
83:5b:e7:aa:47:a2:41:56:2a:6e:92:14:f0:70:c9:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FB:15:20:2D:A7:F9:16:96:04:38:A3:2D:8A:95:38:3F:A9:02:BA
X509v3 Authority Key Identifier:
keyid:34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/781C12E636D811EEA590B3444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.216.0/22
Signature Algorithm: sha256WithRSAEncryption
65:e6:6e:01:c7:b6:87:df:99:63:e6:7a:d0:e4:80:35:cd:74:
eb:9e:2d:ee:75:ca:d2:60:81:29:3a:b5:b2:27:d7:e2:08:0c:
fd:d8:10:54:7d:e6:fd:00:7f:28:1b:db:83:9c:da:90:fb:7d:
90:06:e4:3b:47:84:8a:50:73:e2:70:72:76:69:28:a6:c8:90:
29:47:83:34:f4:56:87:87:18:08:13:7d:8a:dc:0d:66:3a:2f:
0f:58:53:87:ba:60:88:0f:bd:50:4c:67:65:b1:8d:00:cb:92:
18:68:2e:6a:ef:6b:99:50:0b:74:10:5a:66:00:84:17:6d:71:
69:81:d6:df:b5:5f:45:ca:27:8b:22:b3:56:3b:7c:21:33:0e:
94:e7:84:70:95:5e:6d:04:cd:53:9f:bd:04:c7:93:af:f2:22:
a6:bb:98:45:4e:1e:2e:ab:a8:8c:71:e4:b4:1b:b2:b4:aa:5d:
73:ec:df:0c:6c:6a:cd:61:29:da:96:07:bb:4e:eb:0c:71:12:
47:d0:5a:dd:d3:d7:ea:4d:5b:4c:a6:f0:37:27:68:32:cf:7f:
73:21:df:18:c5:14:eb:59:a9:e5:ab:b8:82:f9:1b:81:d6:45:
93:07:d3:29:5d:10:b1:28:71:70:1b:84:70:95:e1:0e:42:42:
d6:48:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:13:55 2024 by rpki-client on console-ams.rpki-client.org