Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/B193AAD8E25411EAACEFFA5EF8AEA228.roa
File: B193AAD8E25411EAACEFFA5EF8AEA228.roa (raw, json)
Hash identifier: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=
Subject key identifier: C0:7A:12:32:09:B5:87:1D:43:F5:D3:10:18:56:F1:A7:E9:FC:61:3E
Certificate issuer: /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial: 0C
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/B193AAD8E25411EAACEFFA5EF8AEA228.roa
Signing time: Wed 19 Aug 2020 19:46:38 +0000
ROA not before: Wed 19 Aug 2020 19:46:32 +0000
ROA not after: Sun 18 Aug 2030 19:46:32 +0000
asID: 8075
IP address blocks: 102.37.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Validity
Not Before: Aug 19 19:46:32 2020 GMT
Not After : Aug 18 19:46:32 2030 GMT
Subject: CN=5f3d819d-2c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:3b:b9:0c:6b:1e:a2:f3:17:eb:b5:69:04:
77:12:be:46:d0:ea:48:c2:20:37:d3:c9:6e:3d:1a:
82:50:5b:d7:f9:aa:1f:6e:8f:ad:70:1c:f9:6e:38:
e7:b0:7c:53:33:4d:23:0d:56:2c:0d:18:b0:97:49:
75:3b:a8:34:43:2c:72:00:9d:25:d4:1e:e0:6a:e6:
b0:01:9b:6b:0f:06:71:d7:13:4e:85:f1:e2:60:92:
23:44:70:08:fe:b0:62:08:09:40:e3:16:16:d9:02:
b8:37:c4:c0:1c:0a:50:23:65:e0:be:c1:75:fe:b5:
e3:54:ef:98:a8:c5:2d:a7:82:0e:76:9c:bb:f7:fd:
63:90:f0:c4:81:27:1d:22:6b:3b:89:a2:46:de:a5:
a3:4a:bc:fb:c0:6f:3a:a8:04:72:89:fa:69:1b:89:
76:a6:4c:d9:3c:44:b9:b6:07:40:6e:66:a7:6c:e8:
83:f4:58:06:97:3b:37:0e:3e:47:00:19:30:77:7b:
27:3a:e8:dd:96:9d:af:1c:e0:97:42:fd:06:a9:1c:
5d:5e:4b:38:f5:43:15:41:d0:6a:19:96:24:51:a8:
38:3c:6a:27:6f:a6:e9:59:e8:1e:c8:7e:09:74:e8:
29:bb:b6:f8:cc:c5:7f:1b:04:24:c0:ce:ad:c6:5c:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:12:32:09:B5:87:1D:43:F5:D3:10:18:56:F1:A7:E9:FC:61:3E
X509v3 Authority Key Identifier:
keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/B193AAD8E25411EAACEFFA5EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.37.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:76:dd:13:5c:77:6a:99:bb:65:ed:dc:49:ae:2f:3f:72:e8:
f8:88:21:ad:69:84:e0:d4:ef:55:01:80:e8:61:d6:2b:a7:15:
f5:72:db:79:a4:c3:5b:70:e3:81:e9:b0:85:f2:4b:ab:a1:5f:
22:89:e2:ed:dc:6c:2a:2d:90:7f:0b:f0:3d:c0:dd:85:c0:6a:
51:04:1d:01:65:74:4b:ac:62:14:f9:23:1e:da:09:36:19:87:
c0:d5:b0:38:6f:8e:0c:59:66:3e:00:a3:3f:68:ef:66:e0:17:
74:2b:0d:39:34:c5:9f:ca:67:3c:f2:7d:f1:7b:5c:a5:33:5b:
80:a2:30:71:17:0e:7c:e0:e8:cd:88:ea:ac:2d:b9:98:e5:5b:
3e:35:69:b0:f5:93:a5:95:ce:5a:f5:0b:e5:50:37:83:54:7c:
08:43:66:2c:ce:ee:ed:b6:55:b2:01:c6:81:06:40:cb:4b:75:
6b:d1:6b:67:31:03:d3:a8:8e:e0:d3:3e:e6:1f:cd:3b:8d:eb:
26:c1:4c:f5:10:84:bd:f9:c7:41:b7:76:78:be:cc:c7:c8:66:
22:50:94:ce:16:67:7f:73:e2:21:14:d2:61:45:27:af:21:2b:
74:5a:c7:7a:39:b8:e8:af:03:0c:58:56:2a:0b:97:de:7f:15:
56:1d:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:29:17 2024 by rpki-client on console-ams.rpki-client.org