Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/954F64EAFFC811ED8FCE30624AD9E6FC.roa
File: 954F64EAFFC811ED8FCE30624AD9E6FC.roa (raw, json)
Hash identifier: dfhGabIAAHxuN6e18OQhuqwD7Wt4GKbIL/xRCP/tZwE=
Subject key identifier: 00:9A:16:3B:4C:00:29:89:B3:A5:7A:15:A1:9C:B3:D6:E5:8E:81:A8
Certificate issuer: /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial: 02F0
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/954F64EAFFC811ED8FCE30624AD9E6FC.roa
Signing time: Wed 31 May 2023 15:34:08 +0000
ROA not before: Wed 31 May 2023 15:34:05 +0000
ROA not after: Wed 31 May 2028 15:34:05 +0000
asID: 328861
IP address blocks: 102.219.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Validity
Not Before: May 31 15:34:05 2023 GMT
Not After : May 31 15:34:05 2028 GMT
Subject: CN=647768f0-8cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:86:7f:f6:8f:a9:25:82:bf:eb:36:62:6f:
01:cc:7d:ef:fc:28:4a:c4:37:1c:e0:bb:d4:39:73:
10:c6:8e:54:74:b7:e6:7d:1d:eb:d5:2c:48:15:d6:
a7:11:5c:56:63:17:3f:c5:dd:35:a4:a4:04:68:72:
a6:19:bc:c3:3f:9c:d5:ad:70:c1:76:c4:f6:99:60:
80:0e:98:7d:e8:20:fe:f8:63:42:ed:63:ba:89:ff:
dc:c9:99:63:8d:04:2b:20:d2:e2:0a:b1:19:87:d5:
7a:e2:88:4e:c4:1c:e7:a0:c0:b9:7d:a5:ab:33:78:
11:37:08:6a:21:8d:15:ad:f2:8f:ac:2f:28:6a:6d:
91:48:29:87:6a:c5:63:1f:8f:b8:7a:6e:08:4d:76:
b6:e3:34:45:43:15:bd:52:47:ff:9e:83:d9:2c:2e:
dd:c7:22:ed:90:4b:97:b9:3c:97:f8:12:20:54:43:
32:b7:6e:00:91:7f:18:c1:65:91:78:67:50:8c:cf:
1b:5c:34:3e:a1:e5:2d:78:53:a9:07:a4:f9:2a:58:
0d:1a:2d:33:ca:84:ef:5c:9c:91:ab:a2:5a:6f:19:
62:ef:bf:2f:ca:0b:bb:50:19:15:c3:b1:7f:94:94:
45:81:19:02:40:28:f3:ac:9a:24:70:a6:8d:b5:a0:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:16:3B:4C:00:29:89:B3:A5:7A:15:A1:9C:B3:D6:E5:8E:81:A8
X509v3 Authority Key Identifier:
keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/954F64EAFFC811ED8FCE30624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.220.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8f:40:52:46:01:2a:19:fa:60:d7:a8:a8:e5:d7:dc:24:85:
c2:4f:c7:b8:d1:ec:27:02:30:1a:fe:d0:29:56:2c:b9:34:12:
9d:22:97:c1:61:95:0e:6e:b9:da:ed:56:5c:57:e5:4d:ab:0a:
3d:06:7a:e2:d8:bd:88:52:d4:3c:b6:c9:91:97:a5:fd:61:fe:
7b:af:b0:c5:ed:34:7d:76:28:3a:00:a5:69:37:86:ae:17:7b:
2f:23:e2:14:92:ac:34:48:07:3e:de:a2:b9:5e:0b:82:6b:89:
05:f7:51:0a:0c:ac:0c:f3:d4:3f:a0:ae:69:35:e1:05:35:c3:
2f:aa:a7:dd:cf:2d:0c:d5:01:97:01:ba:ae:e7:5d:4b:3b:15:
ea:f7:a6:ca:d7:60:0e:9a:08:c6:35:17:04:dd:99:a9:d9:eb:
19:b9:9d:02:2b:bb:0c:73:58:f4:db:81:91:48:91:13:92:8f:
e9:d7:7a:b0:69:2f:5d:bb:1b:b1:63:12:0d:6d:ea:81:1a:8b:
da:ef:d0:4e:99:80:90:99:6b:99:f2:63:73:81:ee:7c:c1:85:
1c:a2:15:95:43:e2:75:21:a1:84:6e:0b:50:71:39:1d:c6:05:
d6:5f:44:bc:68:e5:92:15:a7:10:96:3e:35:bc:34:9f:98:1d:
2d:d3:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:17 2024 by rpki-client on console-ams.rpki-client.org