Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9AECDB08EE3411ED9B086D5C4AD9E6FC.roa
File: 9AECDB08EE3411ED9B086D5C4AD9E6FC.roa (raw, json)
Hash identifier: 7TbXwTAAA29/ssAknCIxCJNoExHtrE/m255Mx4kSiPE=
Subject key identifier: EE:E9:E5:AC:28:7C:B3:1B:88:76:2C:9C:AA:DE:D8:7B:CF:F3:39:A7
Certificate issuer: /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial: 0265
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9AECDB08EE3411ED9B086D5C4AD9E6FC.roa
Signing time: Tue 09 May 2023 06:42:02 +0000
ROA not before: Tue 09 May 2023 06:41:59 +0000
ROA not after: Tue 30 Jun 2026 06:41:59 +0000
asID: 329181
IP address blocks: 102.219.12.0/22 maxlen: 24
2c0f:1900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Validity
Not Before: May 9 06:41:59 2023 GMT
Not After : Jun 30 06:41:59 2026 GMT
Subject: CN=6459eb3a-6e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:c4:70:f9:98:69:25:51:b9:d5:95:ce:c4:
99:ab:6e:be:bd:27:fc:41:08:91:24:60:0d:8b:44:
40:88:dc:6c:b1:5c:c8:13:81:72:56:e1:9b:43:f7:
fd:88:f4:1a:ec:db:46:97:18:0e:74:56:2b:f5:83:
2e:d5:93:3a:dd:cc:52:4a:85:53:36:b2:8b:67:6c:
9e:ca:a5:0e:5c:6f:f0:ac:ce:60:eb:c3:d1:29:18:
3c:81:c5:2e:1d:c1:2e:3a:f5:53:ff:a9:b3:b4:a0:
25:6f:39:d9:86:e0:eb:8c:0f:58:8d:c7:2f:b2:5c:
4f:85:e8:3e:87:65:57:e3:f0:52:d1:65:e1:22:8f:
c8:b3:7e:01:78:d8:45:dc:a3:69:7a:83:fe:c4:1f:
30:a7:5d:49:7a:f2:fa:c4:43:e8:5c:5a:91:7f:82:
d4:51:8f:03:7f:b5:f3:55:e6:88:d4:22:ad:c1:46:
5c:8d:f2:cf:b1:83:58:aa:b0:ba:70:fd:61:e7:8e:
7d:5e:dc:a2:76:42:ad:ff:da:cf:54:f9:ca:54:41:
c0:d1:3d:04:00:15:1d:f6:c0:99:85:ad:ba:b5:1b:
57:1f:51:88:6d:26:71:c5:8a:9c:c1:b4:ea:5a:68:
8d:d3:9c:c0:42:ac:2a:d7:f6:30:1b:3c:c4:ad:c9:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:E5:AC:28:7C:B3:1B:88:76:2C:9C:AA:DE:D8:7B:CF:F3:39:A7
X509v3 Authority Key Identifier:
keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9AECDB08EE3411ED9B086D5C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.12.0/22
IPv6:
2c0f:1900::/32
Signature Algorithm: sha256WithRSAEncryption
cb:26:38:95:47:65:fa:43:3f:d7:25:05:f2:f9:08:66:1f:7d:
9e:e1:4e:ee:de:13:b9:20:5f:de:5d:94:7f:ff:7b:3e:89:1b:
c2:21:1f:bb:d9:d5:07:5a:ba:11:05:e0:28:27:bd:af:e3:15:
d8:43:36:91:b6:8d:ab:24:0b:9b:d0:8c:f1:80:73:69:0a:d1:
6c:ed:ab:07:d9:a9:65:a9:f3:90:9b:db:e5:c4:68:fb:03:a2:
c5:ae:4d:f4:51:90:97:85:29:c2:e7:20:01:af:1d:a2:07:ee:
aa:c5:e9:69:d9:1c:10:8c:a9:05:a7:d6:6b:06:ca:fc:51:d1:
9f:95:8d:93:73:4d:b2:22:b1:92:1b:c7:9a:eb:98:5b:92:40:
fb:1d:7e:62:75:92:c4:4b:04:e9:43:8a:0f:49:c6:9b:88:e8:
ce:13:bb:00:9c:f2:04:39:db:0c:6d:38:d2:dc:1f:53:9f:0f:
6a:c8:f1:23:b0:5b:c9:c6:36:e1:f4:c5:df:5d:40:90:2e:9b:
df:95:00:30:cc:e2:a7:a1:c5:da:a5:14:60:3c:95:f2:97:d4:
82:f0:96:cb:32:90:05:bd:50:98:42:87:18:17:c4:58:da:65:
58:d8:c9:46:68:f8:67:0c:eb:db:b9:6f:6b:82:bd:e4:86:79:
33:22:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:35 2024 by rpki-client on console-fra.rpki-client.org