Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/79BCA104AA6011EABF54BD75F8AEA228.roa
File: 79BCA104AA6011EABF54BD75F8AEA228.roa (raw, json)
Hash identifier: 2Qz+ljxijYcdl6kPi9I4CTsUSzVdMruUcWGLCSgT+a0=
Subject key identifier: 6E:87:8F:AD:40:0D:D6:CC:01:7E:34:AA:16:4A:E9:E2:1D:1C:18:B2
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0D
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/79BCA104AA6011EABF54BD75F8AEA228.roa
Signing time: Tue 09 Jun 2020 14:49:53 +0000
ROA not before: Tue 09 Jun 2020 14:49:46 +0000
ROA not after: Tue 31 Dec 2030 14:49:46 +0000
asID: 33771
IP address blocks: 105.48.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jun 9 14:49:46 2020 GMT
Not After : Dec 31 14:49:46 2030 GMT
Subject: CN=5edfa190-a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8e:60:aa:2d:83:b1:e3:76:1a:4d:b4:2c:55:
8b:f8:1b:31:db:7f:b4:9b:eb:a0:93:df:39:bf:71:
2f:8a:ad:3a:53:4e:2e:f9:ae:b4:df:6c:e0:1c:31:
d9:49:2a:54:66:39:14:67:a9:0a:c2:f0:6a:c1:e0:
11:0d:44:a6:49:75:04:18:8f:d5:50:1e:c3:8b:a8:
36:b5:9c:0a:0d:22:5b:af:6f:b7:ba:e6:ae:90:4d:
0b:0b:73:f4:fa:a0:53:a6:4b:ce:7a:81:0c:5d:9e:
bc:59:54:2f:6c:ec:f7:fe:d7:1a:96:fa:d5:92:5f:
09:e3:39:7c:64:15:59:f7:aa:32:32:40:c7:84:c5:
0f:ad:f8:5b:61:5c:c5:57:04:dc:39:5d:3c:fe:d7:
d5:6a:73:41:61:7c:9d:f4:c6:68:d0:77:1e:d1:cc:
ca:96:82:12:27:ad:b5:23:56:43:6b:11:c8:1d:2f:
37:2e:f7:98:80:ba:06:87:7c:e7:d4:d0:49:e9:d7:
3e:99:60:1e:dc:76:d6:b2:bd:75:28:0c:31:ab:14:
51:9b:4b:b8:17:96:6d:87:d4:4e:9a:d1:86:ea:a3:
9b:2f:c2:2a:15:76:68:d4:56:99:14:47:d5:65:6e:
af:0e:3d:9f:49:bf:e2:04:10:cd:7f:82:ad:48:da:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:8F:AD:40:0D:D6:CC:01:7E:34:AA:16:4A:E9:E2:1D:1C:18:B2
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/79BCA104AA6011EABF54BD75F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.48.0.0/12
Signature Algorithm: sha256WithRSAEncryption
23:4c:5a:e6:6e:2c:a9:34:3b:5f:ae:dd:70:dc:b7:c6:7c:16:
de:92:33:59:46:9c:a3:52:ef:22:22:ea:74:ed:03:25:87:72:
f5:88:a4:cc:8a:59:fd:3a:c7:eb:ec:28:db:42:6a:fd:af:16:
02:e5:0d:9b:e1:4d:4a:1f:64:6f:3f:a3:ae:19:71:cb:e3:3a:
5f:12:a8:3a:58:80:4a:db:6b:e4:9e:67:a7:52:1c:af:77:7d:
3f:63:dd:d9:05:cf:14:b9:82:3d:08:2b:71:5f:e1:43:e1:f7:
db:4b:ba:2c:13:92:8b:a9:93:a1:a3:c2:1d:33:55:04:c7:fe:
56:01:bb:93:59:f8:c0:3b:e3:40:5a:c0:57:ba:49:2b:59:3c:
2f:ad:14:3f:aa:08:16:bb:b5:cd:d5:b0:69:9d:56:b8:40:30:
37:5d:dc:3f:18:70:2d:68:8a:18:91:b7:9f:0c:43:47:3a:74:
d3:d0:73:fa:f9:f6:e8:ac:7c:ed:a0:5c:bf:1d:07:77:36:8b:
c0:1f:30:22:8a:44:1a:46:f0:66:42:77:22:52:ff:bf:b4:24:
57:e3:f9:fd:fc:72:23:3b:82:0e:28:c1:06:14:9d:a4:b0:1b:
a0:20:29:36:d8:2b:71:c6:8f:06:76:c8:91:4a:03:1f:81:9d:
dc:49:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:11 2024 by rpki-client on console-fra.rpki-client.org