Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/383588FC85DE11ED95F5E792F1222468.roa
File: 383588FC85DE11ED95F5E792F1222468.roa (raw, json)
Hash identifier: bf/TLHCv9T9EBIrnGJXK5h0C2Sd2sa4sykeQ08T163o=
Subject key identifier: 2A:EC:48:E3:02:0E:E5:D1:8C:B7:B0:AF:8F:30:8B:EB:60:F3:37:CD
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 022F
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/383588FC85DE11ED95F5E792F1222468.roa
Signing time: Tue 27 Dec 2022 12:01:39 +0000
ROA not before: Tue 27 Dec 2022 12:01:35 +0000
ROA not after: Fri 27 Dec 2030 12:01:35 +0000
asID: 328992
IP address blocks: 102.216.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Dec 27 12:01:35 2022 GMT
Not After : Dec 27 12:01:35 2030 GMT
Subject: CN=63aadea3-a23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:2e:61:aa:f3:67:ae:e9:3e:52:10:7a:ec:
ac:eb:d9:0f:1a:a6:ce:8a:e6:50:b4:c9:d7:ea:73:
48:fe:ce:7f:6e:88:2d:00:ac:b8:29:a9:e5:7d:e0:
4d:bb:67:bb:c6:74:05:00:d5:81:c8:69:09:f8:e0:
0e:1d:4d:58:35:bd:23:2f:b5:e8:9c:42:26:41:31:
d3:3c:2b:2f:ad:5f:d7:d4:9c:4a:87:92:95:7b:1a:
14:49:6b:01:98:79:a4:e5:7a:f6:2e:0a:0d:50:54:
04:36:b5:01:28:35:da:e0:21:6e:a7:70:f9:97:21:
83:84:b3:13:aa:7e:d9:ae:29:9c:4c:61:fe:89:16:
d0:a9:ed:12:0d:70:e7:7b:ea:f9:5f:fb:b7:1f:1a:
05:09:75:8c:30:e6:ab:44:fd:d9:e0:26:99:a7:0b:
f2:b9:06:78:f9:f7:67:1b:9a:5e:6b:56:c1:cc:7e:
b2:66:26:eb:ac:fe:4c:e0:8a:bc:fd:d7:62:9c:d4:
71:9d:e0:ae:46:21:93:b4:80:de:1f:20:62:a1:a5:
5e:28:ad:ee:6c:21:c2:85:97:88:23:f5:d2:4a:18:
a0:09:ca:7a:67:a4:91:8a:4c:63:0b:31:72:f5:0a:
a6:d5:f8:89:43:03:7f:95:5c:75:ef:1a:06:fa:39:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:48:E3:02:0E:E5:D1:8C:B7:B0:AF:8F:30:8B:EB:60:F3:37:CD
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/383588FC85DE11ED95F5E792F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:c0:8d:b4:8c:b0:b9:3f:63:b6:3b:8b:61:03:09:3f:0c:19:
9f:6e:19:89:1b:c3:67:38:47:07:f9:b5:3b:07:68:84:bd:bc:
62:83:fa:7c:6b:21:b1:46:5e:fb:32:07:3b:7a:95:24:fd:6f:
69:59:f9:2c:d0:82:26:a8:f3:f7:77:91:24:0c:bc:83:c4:8e:
5a:e4:9d:80:a3:60:f7:7e:ad:54:0b:9a:3b:04:ef:2e:fb:e2:
11:e7:e8:78:c1:be:ae:c8:ad:b1:b5:fb:e3:eb:76:eb:b5:26:
55:6e:db:cc:90:f9:d2:3f:ef:f9:d3:94:19:b5:e6:c1:f7:32:
9d:e3:1f:60:29:09:aa:8a:37:20:02:fe:2d:e5:1f:b5:81:d7:
32:13:08:78:ef:66:f5:84:d0:58:f0:33:ed:94:12:ad:c2:4c:
01:61:b3:05:4d:e2:6f:da:77:76:d3:4b:d0:b6:4e:92:18:92:
7c:f3:ae:97:ad:a3:a7:be:f5:23:b1:15:51:e7:3b:6b:3b:87:
80:a8:32:dc:3b:ee:ab:e2:fd:bd:87:6f:0e:8e:08:a0:f8:5c:
23:d4:f4:52:e4:4c:af:3a:30:8f:42:ca:b1:18:e5:7e:52:3c:
c7:cf:07:ff:61:4d:02:b6:5f:c4:ea:91:8e:fd:44:c7:77:d1:
44:7a:4d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:46:08 2024 by rpki-client on console-ams.rpki-client.org