Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/BABA0216CDB011EDAD89A0C6F1222468.roa
File: BABA0216CDB011EDAD89A0C6F1222468.roa (raw, json)
Hash identifier: luxr+QNwcQO4iv8H9JMZsFbjB/B4eY0ANzOBLeZGQ7s=
Subject key identifier: B0:E0:44:AF:84:07:A8:D7:2A:5C:49:E0:F1:D9:E7:46:8F:24:21:AE
Certificate issuer: /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial: 031F
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/BABA0216CDB011EDAD89A0C6F1222468.roa
Signing time: Tue 28 Mar 2023 21:37:25 +0000
ROA not before: Tue 28 Mar 2023 21:37:21 +0000
ROA not after: Sat 31 Aug 2030 21:37:21 +0000
asID: 328795
IP address blocks: 102.220.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Validity
Not Before: Mar 28 21:37:21 2023 GMT
Not After : Aug 31 21:37:21 2030 GMT
Subject: CN=64235e15-537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:84:a0:03:e5:64:fd:3b:9b:9c:4d:17:8a:
17:d3:9c:0c:d5:e3:e3:ab:dc:00:5a:13:ff:5c:d5:
e9:e4:71:c8:6c:f4:9d:e0:4b:09:2c:18:da:5e:e9:
c2:9c:99:44:99:a0:4e:17:ac:7a:30:d4:ef:99:4b:
a1:9e:70:b9:b0:3f:0c:46:fe:5a:7e:01:13:16:28:
34:43:9b:8b:6b:1c:8f:eb:53:2a:a0:60:ef:48:5d:
5e:b4:c7:8a:85:05:0f:33:21:fe:a1:d6:96:0c:11:
1d:cd:b8:54:dd:b5:fb:48:37:fc:8f:e1:58:ac:46:
fa:5f:cb:43:86:4e:53:19:ef:c3:15:03:86:93:9f:
42:29:a7:0c:67:ad:3b:39:b1:b6:83:fa:bb:a7:a0:
28:20:c4:28:3d:94:5c:6a:ae:99:d1:5c:98:8a:db:
a2:6c:7d:7b:08:c2:5c:af:34:38:62:22:53:0a:c7:
a9:73:96:42:b1:86:c5:f1:5a:86:88:37:89:8d:8e:
6a:8b:47:45:2d:2d:94:9c:3a:96:19:5c:66:fb:6e:
f5:30:a3:c9:32:68:21:5c:be:ce:4e:74:d0:80:b7:
1a:98:82:10:ed:07:09:bb:e3:08:d1:66:cf:63:cb:
b2:d4:9d:8c:5c:96:52:aa:11:cc:7e:07:6b:65:f8:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:44:AF:84:07:A8:D7:2A:5C:49:E0:F1:D9:E7:46:8F:24:21:AE
X509v3 Authority Key Identifier:
keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/BABA0216CDB011EDAD89A0C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:72:71:8f:85:45:d5:84:43:8d:48:50:a2:7f:b8:99:bc:09:
9a:f2:71:5f:05:d1:82:32:a6:24:8f:3c:41:a5:b8:49:cc:2a:
d9:88:82:23:f3:7e:81:57:ee:db:60:f1:8d:b4:c0:18:3a:7a:
61:0d:82:31:2b:0e:20:25:0e:31:33:f7:8f:08:5a:cf:f6:64:
15:ec:ff:20:28:6c:7b:6f:45:0d:d7:d6:84:ac:96:00:7e:f4:
b5:58:e1:ed:74:cf:bb:76:fd:6f:07:8f:fb:fc:43:2a:ef:0d:
8c:f8:50:00:f9:c8:36:3c:ce:33:e7:4f:af:a6:20:c6:ec:06:
6f:1e:71:c2:c3:23:16:f6:22:79:65:2d:f5:66:56:f6:df:fd:
8f:25:24:c5:1b:0e:17:c2:a9:a1:cc:a7:08:ba:3e:96:9a:e6:
ca:02:46:c2:1c:4a:78:7d:06:02:ba:5f:a9:cd:39:ad:11:4a:
df:a2:df:0b:a1:48:25:9c:ea:0e:6a:fd:68:e9:c1:db:21:ef:
18:34:63:bd:f6:c6:59:37:db:ac:03:bb:b9:81:0d:51:e9:59:
83:be:82:da:0e:f3:44:fd:40:32:8e:13:2d:ca:54:1e:48:1f:
5d:f3:23:af:06:53:98:7c:b8:25:9a:00:93:fd:5b:e0:70:70:
f7:e8:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:06:02 2024 by rpki-client on console-ams.rpki-client.org