Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/487A092ADA8611ED9609AEE52F6D8C1D.roa
File: 487A092ADA8611ED9609AEE52F6D8C1D.roa (raw, json)
Hash identifier: D/BuyKELkA6Kinn/ZmmBBy28n4BcPuuOdNb0VMO9tSc=
Subject key identifier: 67:A1:78:D8:3B:E2:4A:EF:6E:24:4C:B6:E1:93:14:25:70:5C:2C:47
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 05D4
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/487A092ADA8611ED9609AEE52F6D8C1D.roa
Signing time: Fri 14 Apr 2023 05:36:20 +0000
ROA not before: Fri 14 Apr 2023 05:36:16 +0000
ROA not after: Thu 14 Apr 2033 05:36:16 +0000
asID: 327733
IP address blocks: 102.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: Apr 14 05:36:16 2023 GMT
Not After : Apr 14 05:36:16 2033 GMT
Subject: CN=6438e653-ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:0e:64:fe:8c:5a:ff:98:8b:fb:80:fe:ec:
8d:61:29:23:81:93:2b:57:41:20:21:84:ae:0e:92:
17:7b:b0:4f:39:a4:da:b8:57:34:9b:90:d5:af:11:
2d:ed:0e:bc:fc:00:a8:55:ec:e8:a3:ad:32:67:3d:
c7:d8:91:14:f3:b0:ba:53:1f:b2:f8:31:23:d3:21:
c9:40:52:04:e3:a0:5d:47:4d:2c:8a:87:7c:4d:2f:
0f:7e:e5:37:5d:14:2b:37:b6:16:d0:de:ab:03:29:
83:12:35:05:60:8c:bb:37:9e:69:a4:db:d8:1a:e9:
c1:65:36:7e:e0:48:46:15:d3:13:64:80:1b:95:b2:
7f:e6:91:0d:96:79:92:11:21:bc:d4:42:0c:b3:3e:
b7:36:6e:b2:31:78:b9:ea:84:50:9e:4a:53:fa:c2:
28:8e:a4:e9:9f:67:ca:0b:31:ff:f9:87:95:48:df:
16:ab:bb:02:83:b5:68:48:e3:2a:ea:88:5e:75:c2:
1a:fd:57:5b:a1:c7:93:07:1f:29:87:7b:e3:35:d8:
19:7e:d9:1d:cc:f6:9e:53:94:bd:24:9e:0b:a8:28:
f6:f7:20:2c:1f:9c:d6:28:67:29:0e:64:72:3b:ef:
c7:25:b9:dd:b0:d3:3b:53:83:38:7d:88:5a:6f:a2:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:78:D8:3B:E2:4A:EF:6E:24:4C:B6:E1:93:14:25:70:5C:2C:47
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/487A092ADA8611ED9609AEE52F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5c:e6:14:3c:e5:e0:db:f9:7b:0c:63:00:d6:46:b6:a9:e3:
7b:cf:1e:0f:ba:43:bd:17:ff:bb:ec:5a:bd:c6:de:1b:d7:b6:
49:76:87:5c:03:50:d2:15:98:59:0f:43:e6:4d:c0:7b:f5:96:
a8:fb:e6:f0:4f:c3:3d:a2:90:97:4d:4a:da:ed:6a:7e:e0:3c:
53:88:53:0c:fa:5b:91:52:53:42:08:ba:3d:a9:2d:94:24:88:
3f:99:f7:ad:dd:0f:44:2a:61:44:40:33:6e:bc:61:5c:05:2e:
a4:0d:86:10:bc:08:c9:bb:37:62:22:41:3d:87:12:9f:4c:6d:
da:97:50:c6:52:df:e8:5e:0e:c3:ae:6d:ff:f2:77:20:05:23:
19:b2:93:4d:42:13:06:a8:6a:9c:43:37:c1:6c:85:fa:4b:74:
f3:6c:1f:8b:10:24:0d:74:50:53:9f:33:e6:3f:e6:cc:c9:4d:
b5:fa:60:40:d6:51:02:f4:e9:28:5a:7f:8c:3d:81:d0:32:0a:
a3:7e:69:f9:a7:3f:8a:78:8e:e2:f5:54:73:03:93:ec:21:09:
f1:51:22:ac:c0:0d:9a:60:64:5d:b6:23:5b:10:a4:6d:b8:65:
cf:be:67:d7:d5:78:45:4a:6a:ca:5f:66:60:70:fa:de:07:ff:
c1:4f:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:30 2024 by rpki-client on console-ams.rpki-client.org