Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/41353ABCC22111EEB2919A95775412E6.roa
File: 41353ABCC22111EEB2919A95775412E6.roa (raw, json)
Hash identifier: oXcQymFlE/krOOEr4NVVaSaifs3aMH0vQz8dpJbk6Hw=
Subject key identifier: 67:AC:C3:BF:B8:69:E1:B9:0C:B7:6C:7F:43:03:9E:37:3A:2B:C7:CD
Certificate issuer: /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial: 42
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/41353ABCC22111EEB2919A95775412E6.roa
Signing time: Fri 02 Feb 2024 23:17:38 +0000
ROA not before: Sat 03 Feb 2024 23:17:34 +0000
ROA not after: Sun 31 Dec 2034 23:17:34 +0000
asID: 329057
IP address blocks: 102.216.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Validity
Not Before: Feb 3 23:17:34 2024 GMT
Not After : Dec 31 23:17:34 2034 GMT
Subject: CN=65bd7812-b810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:c0:1c:18:bb:19:b1:72:b1:bb:0e:d6:8d:
65:bc:93:23:dd:d9:44:7c:a5:c7:d7:be:af:de:de:
af:c5:6d:b1:1d:b5:fc:12:e1:e4:23:63:82:a0:de:
d4:74:0c:d8:5a:01:da:f2:d2:3d:58:79:13:e5:4c:
86:4e:c4:7e:25:13:88:24:9f:bd:00:4e:00:f0:52:
0f:28:3b:d7:69:c4:30:e9:b8:5f:19:e3:96:c9:9f:
7f:1f:21:36:27:d0:08:59:a5:0c:99:23:0f:7c:6b:
d2:89:45:bb:9e:9f:cc:2c:64:9a:bb:51:e0:f1:1c:
46:e6:9d:fa:0d:9c:1d:21:59:a3:5b:46:25:38:05:
ad:a8:c3:39:f1:5b:96:97:bd:07:99:73:98:5a:3d:
90:43:fa:08:8d:b4:0a:0f:0f:c9:29:47:36:0f:d7:
fd:ac:d8:46:93:58:0f:f7:8e:2d:f5:92:4f:06:fd:
de:33:20:7c:7b:87:a8:90:98:05:22:7d:75:c4:c5:
84:12:4d:d4:3d:80:b1:cf:e1:7c:b1:78:1a:e8:6d:
24:bc:0b:25:d4:a3:0c:80:f1:4a:bc:84:42:13:78:
52:cb:12:38:aa:4b:05:1d:60:f8:cd:7a:0b:3a:00:
c4:ff:aa:01:6f:1b:c7:bd:29:4e:96:64:44:c1:1e:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AC:C3:BF:B8:69:E1:B9:0C:B7:6C:7F:43:03:9E:37:3A:2B:C7:CD
X509v3 Authority Key Identifier:
keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/41353ABCC22111EEB2919A95775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.8.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:bb:65:fc:cd:d4:89:55:41:18:59:9c:c4:17:7e:be:2a:48:
22:7b:11:57:9e:12:c4:d2:ea:53:83:a9:17:d5:d3:0f:e1:aa:
01:ee:42:90:f6:2c:12:7b:fb:1e:95:98:16:5e:95:dd:75:38:
af:7b:ee:a0:46:da:9d:c7:41:7f:17:ba:cd:bd:a0:58:a3:c1:
0b:6e:21:30:3d:ad:59:a1:f9:ae:53:a7:95:84:7b:ee:3f:96:
5f:c6:d8:2d:93:ec:63:f1:db:ce:e3:d0:19:ad:6a:67:a1:ba:
eb:08:c1:f5:56:58:98:74:81:c3:d6:06:c8:cc:b1:9a:5a:c7:
c0:a3:82:5b:1f:19:7e:1e:dc:f4:41:5b:02:59:da:f0:37:b2:
22:9f:fd:51:60:43:7f:08:8a:13:9b:21:f8:55:8b:a4:8d:05:
26:c2:65:ae:cb:51:78:2e:2c:26:7d:fb:e0:10:58:cc:9a:66:
bd:d6:df:82:af:a8:b3:46:c0:1c:f9:cd:09:61:76:fb:2d:23:
14:8e:ae:d0:a7:dd:70:8a:a7:47:f5:1f:6e:37:b8:4c:e1:be:
5b:54:e4:b7:00:9d:cf:b9:f8:94:60:a7:95:bc:8e:83:e7:83:
46:a0:79:2a:eb:0f:52:7f:7e:ec:ad:ea:32:ac:da:b3:bb:38:
f6:61:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:34 2024 by rpki-client on console-fra.rpki-client.org