Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D723225EB90E11ED8875AFB9F1222468.roa
File: D723225EB90E11ED8875AFB9F1222468.roa (raw, json)
Hash identifier: Kn9nxXMbZkD7/JtPdi9k9kabkdwN9RHHmYUqtxe5CgQ=
Subject key identifier: 4C:23:EF:70:F0:C6:83:57:76:A2:26:1A:4A:2A:C6:41:E1:28:11:12
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 29
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D723225EB90E11ED8875AFB9F1222468.roa
Signing time: Thu 02 Mar 2023 15:28:11 +0000
ROA not before: Thu 02 Mar 2023 15:28:07 +0000
ROA not after: Mon 02 Mar 2026 15:28:07 +0000
asID: 33763
IP address blocks: 197.234.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 15:28:07 2023 GMT
Not After : Mar 2 15:28:07 2026 GMT
Subject: CN=6400c08b-c290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:0c:8e:78:c8:72:c8:5b:2e:0d:ce:a8:98:
1b:d3:c7:71:4d:4f:45:9a:11:4d:fb:70:33:97:ed:
77:5d:e9:1a:13:98:c0:d4:dc:30:3a:99:30:62:6e:
32:e7:5e:9a:dc:45:76:0f:ac:80:79:05:31:93:5f:
0b:ca:8a:78:7e:54:cc:8e:22:44:94:cc:eb:bc:0d:
d9:1e:3e:c3:97:5a:84:ed:9c:71:c4:d2:52:4e:03:
4c:f3:20:a1:92:f0:f2:97:72:78:e0:5f:4d:f0:ec:
c3:58:d5:c9:a7:19:47:f5:09:22:b0:1d:12:0c:7c:
d5:c3:ba:26:d6:c4:0c:25:fd:bb:43:9e:f1:97:ea:
85:13:08:42:e5:a4:63:c8:0a:7e:bd:2d:d5:cb:74:
4e:6a:99:cf:a6:88:52:10:d7:5a:6b:fc:cb:c9:cb:
59:1c:e6:c8:bf:e3:3e:c2:a3:c1:1e:81:49:12:b4:
fa:a7:65:12:95:29:91:6d:79:15:b7:27:21:d0:ad:
7d:c4:ce:5e:73:ba:be:56:3a:5b:82:dc:fb:5f:4a:
b1:d7:db:29:99:82:96:c2:9d:4d:de:7b:e5:3c:44:
58:b6:f9:4e:9d:ab:9b:48:17:cf:c9:4b:c4:e6:b6:
b1:26:0e:45:f5:80:74:fd:1d:ff:84:cb:2d:5f:38:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:EF:70:F0:C6:83:57:76:A2:26:1A:4A:2A:C6:41:E1:28:11:12
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D723225EB90E11ED8875AFB9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
32:f4:56:60:c3:28:3d:60:3a:ed:4a:3e:fa:d8:31:c5:62:01:
25:b7:3e:92:56:88:d2:fb:90:9e:dd:4f:66:1b:b4:67:52:36:
68:02:11:65:ef:e0:30:ba:72:90:b2:91:0d:52:4b:fc:43:f8:
29:30:b9:17:e9:6c:96:bf:5e:ed:7a:07:88:51:2c:5a:e6:1a:
5b:b7:a9:de:09:bb:79:cc:6c:65:a4:76:30:15:bd:30:95:a2:
2a:12:07:3a:f7:ff:31:cc:d6:b9:9d:ba:54:54:72:8b:a0:04:
db:8e:0c:c8:9d:32:b8:71:04:20:74:bb:0c:a5:aa:b7:2d:32:
ae:ce:f6:ce:85:3c:40:24:18:02:8a:fe:40:fd:08:f6:0b:dd:
1f:ab:8e:67:75:a2:cb:57:96:85:66:82:3d:0d:ce:6e:1f:9f:
93:3b:75:b0:51:4e:3b:cd:08:94:5f:e6:1d:99:a0:f4:16:b7:
17:95:ed:08:44:42:3e:da:a8:de:67:5d:58:44:9c:2b:42:df:
82:ad:eb:82:d0:75:a5:6e:06:18:eb:e5:3c:c0:24:14:fd:72:
ec:6d:48:ed:ad:ad:73:f0:7f:f0:ed:22:2e:13:3a:15:3a:ba:
da:b2:f4:56:37:67:c8:22:52:cc:86:76:4b:0e:b7:0f:a3:7c:
d1:de:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:57 2024 by rpki-client on console-ams.rpki-client.org