Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/5EFA3278F0CA11EEA9DC16BC775412E6.roa
File: 5EFA3278F0CA11EEA9DC16BC775412E6.roa (raw, json)
Hash identifier: 3auDBpHpM3kdULnRRSm/mIzDvmza9Nwt6gL4Un18lvA=
Subject key identifier: BA:D7:F6:31:EB:B4:D3:16:7F:1B:D5:F8:38:E5:BE:A3:1B:2A:A0:F3
Certificate issuer: /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial: 022C
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/5EFA3278F0CA11EEA9DC16BC775412E6.roa
Signing time: Tue 02 Apr 2024 08:24:06 +0000
ROA not before: Tue 02 Apr 2024 08:24:03 +0000
ROA not after: Sun 02 Apr 2034 08:24:03 +0000
asID: 328474
IP address blocks: 102.209.120.0/24 maxlen: 24
102.209.121.0/24 maxlen: 24
102.209.122.0/24 maxlen: 24
102.209.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Validity
Not Before: Apr 2 08:24:03 2024 GMT
Not After : Apr 2 08:24:03 2034 GMT
Subject: CN=660bc0a6-6a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:1a:fd:82:b0:7b:92:98:c0:53:70:95:55:
fb:53:e7:be:3a:9c:5d:6c:fa:3d:02:c5:6f:e6:18:
bb:78:54:69:b8:90:35:cf:91:c8:75:1d:97:6d:49:
ee:55:6c:e9:11:4c:8a:3c:a2:75:52:09:e9:e3:86:
5b:53:c5:0e:9c:75:a2:83:32:37:5f:65:98:26:ad:
1a:99:59:e2:8b:66:84:23:ed:52:0f:5b:5d:82:a7:
54:a2:de:b5:e6:7b:13:33:86:ce:c7:38:c8:72:50:
08:76:91:b0:67:96:93:06:d5:df:df:ec:98:6b:9d:
9d:b4:e1:ec:52:84:c4:3e:3d:4c:9f:1c:e6:91:45:
08:17:5f:f5:3b:cf:f6:67:0c:0f:e8:b6:1f:94:45:
e6:20:e2:cf:2a:0b:38:2a:3c:f0:29:ae:ce:2f:27:
53:35:fe:5c:df:c3:23:99:11:87:28:e4:79:c1:33:
6c:99:3b:6a:71:06:e6:eb:eb:92:22:17:3b:52:b7:
98:1f:95:df:d6:f5:ec:f8:55:e1:3b:1b:a9:de:a7:
8c:74:d9:e2:60:92:d2:8a:6a:11:28:7a:28:ab:17:
66:1b:fc:6c:e5:66:e0:aa:01:e7:ab:90:e4:6c:74:
1d:17:43:77:34:25:44:ac:cd:1d:5d:f4:9f:22:99:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D7:F6:31:EB:B4:D3:16:7F:1B:D5:F8:38:E5:BE:A3:1B:2A:A0:F3
X509v3 Authority Key Identifier:
keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/5EFA3278F0CA11EEA9DC16BC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:f0:91:19:9a:d8:b4:3b:bd:7f:3c:36:27:61:ee:ed:07:a9:
6d:74:1f:5c:d7:41:de:9b:56:f3:b2:21:94:ac:d0:c7:bc:cf:
ab:ae:99:61:a3:05:52:29:69:45:df:9d:99:07:2a:3d:35:45:
ee:01:a0:50:be:70:6d:e3:3e:b0:bf:58:47:c8:e4:77:bc:f9:
59:22:a1:84:ad:2a:ba:32:5d:37:5a:b5:a8:28:91:4d:c4:6f:
b8:87:f4:2c:29:fe:8b:52:1d:bc:7e:68:40:22:ac:ab:89:da:
c3:4b:68:91:c2:9b:16:58:82:5f:0a:dc:ac:8a:59:b4:81:7b:
9c:b5:72:d9:c5:97:ec:e4:c8:85:33:9e:a5:ce:e8:55:30:44:
0d:f4:b1:a8:ec:dc:70:7e:df:17:55:da:ba:9c:09:7e:33:c6:
bd:6a:fa:1f:a1:b9:57:e9:5d:70:25:71:54:c8:96:62:c3:16:
10:fb:35:4f:9c:a9:3e:df:2d:4d:a1:4a:50:2c:26:16:0e:16:
c3:dc:85:2d:0a:5c:51:0e:37:9b:66:34:16:c1:2a:fb:0e:23:
24:f7:9f:1d:03:d4:31:70:7b:26:b0:f6:01:fc:64:64:b7:10:
4b:7e:e6:97:9f:36:7f:2c:eb:1e:fd:e6:af:1b:64:ca:aa:4a:
06:34:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:28 2024 by rpki-client on console-ams.rpki-client.org