Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/91135B6C3A8211EE9A6DC83D4AD9E6FC.roa
File: 91135B6C3A8211EE9A6DC83D4AD9E6FC.roa (raw, json)
Hash identifier: jc1BkzeLthjW4uSWrxhP6DCOIx6HYRr2/YSdWQwPOpQ=
Subject key identifier: 41:09:83:6A:13:6C:80:0B:C2:51:B4:5D:33:BF:DD:59:C3:4D:6C:C5
Certificate issuer: /CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Certificate serial: 19
Authority key identifier: 34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/91135B6C3A8211EE9A6DC83D4AD9E6FC.roa
Signing time: Mon 14 Aug 2023 09:11:35 +0000
ROA not before: Mon 14 Aug 2023 09:11:32 +0000
ROA not after: Wed 31 Aug 2033 09:11:32 +0000
asID: 37468
IP address blocks: 102.212.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 26 Jun 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Validity
Not Before: Aug 14 09:11:32 2023 GMT
Not After : Aug 31 09:11:32 2033 GMT
Subject: CN=64d9efc7-fb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:ce:95:44:bc:27:7e:38:ce:cb:85:99:40:
d8:8c:b3:e7:0f:b3:a2:ed:ee:76:f3:e5:f4:5b:8d:
a9:bb:5f:c6:68:54:eb:8e:71:12:c4:3b:e7:5b:dc:
f8:93:ea:08:4f:72:ed:9a:27:06:36:cf:31:3e:1a:
83:35:25:0a:86:c7:82:01:7b:a1:8a:c3:9a:a8:71:
c2:b9:5b:9a:b1:e1:eb:ef:66:48:7b:35:18:c8:50:
f0:7d:19:fa:e4:d6:aa:83:53:27:87:dd:3b:8e:f9:
0a:90:82:f3:f2:57:0b:40:c4:33:81:bb:1f:cf:02:
a1:8b:23:10:d9:37:70:3c:b4:01:56:7c:ef:7a:fe:
06:46:d6:7e:5c:02:f7:fb:1e:86:72:fc:dd:11:08:
99:5b:4d:1e:f0:c2:ba:41:22:fc:cc:d4:ce:f4:c3:
95:bf:ca:c3:2f:42:0d:fc:3a:4d:60:39:fd:36:e4:
d8:8e:e4:67:a3:ac:35:a2:fb:a0:21:08:cd:24:ca:
09:70:67:c1:c0:43:bc:3a:6c:7f:1c:7b:9c:d3:1a:
10:57:9d:f4:39:77:c3:8c:22:1a:41:e6:e2:6b:cc:
0c:29:6a:56:26:f8:10:66:89:1a:a5:7b:02:e1:39:
ed:7f:63:1e:67:16:18:41:53:34:dc:cf:e3:ab:85:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:83:6A:13:6C:80:0B:C2:51:B4:5D:33:BF:DD:59:C3:4D:6C:C5
X509v3 Authority Key Identifier:
keyid:34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/91135B6C3A8211EE9A6DC83D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:bb:79:59:c9:ee:b2:97:b3:f5:50:78:4f:67:03:ac:86:6c:
67:56:23:b8:b9:74:e5:06:e5:8e:27:a2:9c:e0:f6:24:e7:a7:
51:65:e3:d4:50:ce:e4:ac:c9:c8:1d:4b:1e:0e:cb:77:9c:8f:
90:9a:d3:c5:ce:ec:11:16:fd:b5:a6:04:3b:36:d6:7e:36:4b:
9f:a2:ff:9e:22:e6:7b:37:e9:1a:94:b6:76:7d:53:dc:54:0e:
a0:4b:fd:e2:ce:19:cf:7d:03:1b:54:59:16:6d:48:aa:98:ca:
a5:9a:8e:fb:d8:59:5e:1f:c3:03:e5:a3:a2:3a:95:28:ed:8b:
05:32:b0:ee:5d:39:8f:73:08:02:02:3b:b9:a3:7c:59:2a:49:
71:4d:d0:d1:f2:e9:51:8f:61:94:2b:d7:36:8b:71:32:61:61:
58:84:92:81:d3:e0:c8:ef:5c:38:31:ee:d2:30:ed:2e:49:7f:
20:3d:3c:27:1d:85:f2:96:e8:94:c4:8f:4f:88:f2:81:36:c8:
b2:1b:8c:e5:3b:a2:4e:08:e5:76:1c:59:94:90:78:ad:37:6f:
a4:41:76:9b:ab:d4:e2:ee:b4:34:c0:05:0f:cd:d4:86:23:24:
3a:ac:76:f8:ba:c9:4c:39:c5:fd:d4:c6:5c:a6:5e:c3:c2:87:
07:89:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:55:00 2024 by rpki-client on console-ams.rpki-client.org