Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/469FD1D2B90E11EDA4D709B8F1222468.roa
File: 469FD1D2B90E11EDA4D709B8F1222468.roa (raw, json)
Hash identifier: DwCiq+yl1LO0Hky4qis9ittQ4gAvggd/ZDmtdnICEP0=
Subject key identifier: 5D:C9:68:AA:52:AD:79:B3:51:F1:23:6B:58:57:CD:4D:57:21:69:6C
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 23
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/469FD1D2B90E11EDA4D709B8F1222468.roa
Signing time: Thu 02 Mar 2023 15:24:08 +0000
ROA not before: Thu 02 Mar 2023 15:24:05 +0000
ROA not after: Mon 02 Mar 2026 15:24:05 +0000
asID: 33763
IP address blocks: 197.234.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 15:24:05 2023 GMT
Not After : Mar 2 15:24:05 2026 GMT
Subject: CN=6400bf98-a9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:a6:ab:65:8c:f3:ed:07:d6:a0:a5:62:c1:
30:1a:fa:0f:17:0f:57:1c:82:74:73:e4:6b:53:df:
ba:f2:57:37:e5:dd:1b:75:5f:cf:a2:70:2f:28:ac:
5e:aa:d2:76:b1:26:ce:da:d3:23:d1:e5:95:7c:e2:
fc:34:7e:3c:2f:d7:9b:9a:c5:77:f7:5a:d5:13:4e:
c1:9c:1c:8d:18:a9:fa:82:57:a0:f7:6a:9a:67:f4:
fb:e9:db:2c:2a:b4:2c:e8:11:52:57:01:ce:10:b3:
cc:1f:ae:2b:a6:bf:4c:d0:4d:9c:bd:f3:f3:35:6c:
76:4a:5c:86:6f:fd:81:43:0e:db:fa:3f:01:b2:d5:
db:72:22:65:f5:d2:14:7c:97:ce:ac:01:16:4e:83:
4a:58:1e:54:26:7f:3c:a9:a0:06:2f:e6:ce:b6:dc:
d5:7d:d8:61:7b:d5:4e:01:4b:4b:9d:78:de:35:51:
4c:48:4e:b0:44:48:07:bd:99:4b:4e:58:3f:c3:2e:
ad:79:57:93:d3:91:c5:8f:20:e8:68:0d:fe:93:53:
5c:76:5d:2c:e0:ac:e5:e3:68:9e:28:ee:36:ae:99:
49:a0:d1:45:06:20:ff:71:1e:d3:e8:d5:cf:08:0d:
a0:c4:83:3a:e5:3e:d6:3f:14:72:30:7e:5e:f0:97:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C9:68:AA:52:AD:79:B3:51:F1:23:6B:58:57:CD:4D:57:21:69:6C
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/469FD1D2B90E11EDA4D709B8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:53:63:69:82:63:4d:7a:14:c9:a1:04:c9:8f:dd:11:cc:49:
bc:c3:07:70:57:5e:f8:c8:16:db:d3:3c:2f:c0:db:21:c6:5d:
42:80:aa:45:62:17:d5:8e:81:bb:dd:b3:e2:20:05:0e:b4:f4:
56:bc:98:a9:0c:05:97:9c:b5:3a:ab:f9:8d:76:8d:dd:1c:ef:
dd:49:79:84:6b:4e:9e:fc:d9:72:92:c8:d8:0c:c6:97:ce:27:
2e:d0:bc:df:55:ac:2e:97:0e:5f:35:cc:e2:cb:26:18:85:5a:
97:f1:46:53:12:4f:9c:8f:c5:40:3c:49:a3:c6:a9:e2:d9:16:
ad:ad:79:b6:73:b5:be:c2:08:45:84:6a:cc:9c:df:31:b0:43:
13:45:84:62:33:3c:5f:47:74:4a:df:a2:b5:11:4c:d3:c0:0e:
c4:b0:da:af:cb:63:06:14:13:8c:bd:d6:21:8b:cc:73:5e:ed:
1e:88:83:8e:1b:e0:48:c5:aa:26:aa:29:b0:5b:1c:ea:d7:20:
11:66:92:ad:77:9f:24:7e:60:5a:25:af:56:77:c6:88:ee:da:
5a:40:25:5d:0f:f1:0d:31:7d:3c:5f:14:16:6a:a3:ce:38:0b:
07:85:17:cb:3c:c5:46:8a:af:d0:6a:31:d6:4b:8e:a2:89:1a:
33:5e:92:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:27 2024 by rpki-client on console-ams.rpki-client.org