Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/B583ED0E3A8211EEB5131E3E4AD9E6FC.roa
File: B583ED0E3A8211EEB5131E3E4AD9E6FC.roa (raw, json)
Hash identifier: WmxgNkjxxZLbC/HeUbCJF95mFGaihCn883qwkH0aO3E=
Subject key identifier: 62:7E:60:39:CE:8A:AB:FB:85:10:9D:BC:BC:84:30:28:D3:04:C5:19
Certificate issuer: /CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Certificate serial: 1B
Authority key identifier: 34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/B583ED0E3A8211EEB5131E3E4AD9E6FC.roa
Signing time: Mon 14 Aug 2023 09:12:36 +0000
ROA not before: Mon 14 Aug 2023 09:12:33 +0000
ROA not after: Wed 31 Aug 2033 09:12:33 +0000
asID: 33763
IP address blocks: 102.212.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 24 Jun 2024 00:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Validity
Not Before: Aug 14 09:12:33 2023 GMT
Not After : Aug 31 09:12:33 2033 GMT
Subject: CN=64d9f004-dda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:d0:b0:18:91:21:40:5a:e6:5a:d7:4f:ba:
86:84:88:81:42:e6:7e:f4:19:ea:30:38:34:18:a2:
3a:06:97:19:92:83:8f:aa:47:28:b9:12:3e:48:4d:
94:d2:bb:59:e6:b3:a7:5d:90:f4:3c:a3:db:2e:7a:
8d:80:14:3b:b1:db:4e:fb:97:fc:09:7d:c9:73:0e:
c8:12:30:1d:b3:63:dc:ed:56:eb:16:d1:4e:ee:f4:
76:c7:bf:9d:69:f5:29:91:71:e4:ac:35:c3:68:a3:
d7:bb:55:71:c6:fb:22:5b:8c:7f:fd:31:a9:9e:a4:
ca:b5:53:16:1d:d1:fd:13:fc:28:fc:94:7a:38:7f:
56:50:56:8a:59:ed:6f:f9:7d:f7:7a:64:db:11:4a:
dd:b4:57:50:bc:5d:f4:71:cb:3c:ec:25:69:d0:3a:
7b:42:0b:61:a3:28:39:77:13:2d:fa:f9:13:a9:e0:
77:96:2f:05:44:75:57:d1:96:de:36:2f:3a:22:08:
a9:a8:1c:9e:a7:40:63:f6:2f:38:0e:a9:19:33:9d:
cf:6e:6b:78:99:9d:d8:07:b5:45:20:07:62:79:de:
f3:be:5c:99:ba:45:ea:40:af:b6:78:d4:2c:20:d1:
ca:af:61:c3:16:99:6f:5c:9b:26:d5:7f:79:e4:5b:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7E:60:39:CE:8A:AB:FB:85:10:9D:BC:BC:84:30:28:D3:04:C5:19
X509v3 Authority Key Identifier:
keyid:34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/B583ED0E3A8211EEB5131E3E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.216.0/22
Signature Algorithm: sha256WithRSAEncryption
13:80:0b:6e:a6:8f:87:b1:15:f0:7d:19:ca:8e:93:2f:71:c6:
0a:45:4a:3f:6a:1e:7b:11:97:d6:7b:62:d5:aa:1e:65:fc:3c:
16:93:03:22:bd:f4:14:64:fb:1d:0b:95:7a:b2:b6:35:17:e4:
38:10:eb:85:06:b6:19:37:a3:ad:68:d8:3a:08:88:3a:6a:e5:
a3:f3:9e:b8:01:b4:01:6e:8c:54:9c:86:6f:ab:8d:3c:fb:a8:
af:39:d2:17:c4:7c:ba:04:44:61:90:c6:95:dd:cf:d8:f1:d9:
a8:b9:d9:96:bf:86:55:5f:ba:9c:f0:ab:cf:3c:90:91:30:71:
72:71:2f:ac:d7:9c:1d:98:79:28:08:cc:d8:2d:a4:b7:77:44:
70:71:af:64:45:90:26:e9:36:ea:ea:1c:eb:84:d2:bd:f0:f7:
29:f6:5c:3b:58:b4:f8:06:50:f3:6a:79:47:e0:2c:48:b8:e6:
cb:74:cf:44:c7:d5:43:b3:19:5f:00:c1:67:4e:37:63:f5:9d:
f5:39:2e:cc:ce:5d:23:32:8e:5a:81:9d:d2:3d:43:50:5d:79:
99:9f:2c:ba:ad:f8:06:6d:d3:6f:78:99:d1:b3:22:b5:55:09:
43:70:78:6b:9a:0a:1b:20:16:60:d7:d9:d9:3e:28:32:e4:e0:
f6:d5:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:18:16 2024 by rpki-client on console-fra.rpki-client.org