Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/943304A485DE11ED8F84DF93F1222468.roa
File: 943304A485DE11ED8F84DF93F1222468.roa (raw, json)
Hash identifier: nyXNdI51/pXwY1eJI+s1T8nqtzFUWWHJ35+EkIkhEbc=
Subject key identifier: 61:7A:99:B0:11:0C:6C:CA:03:9E:39:14:BF:C2:6B:FE:FB:32:2A:70
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0232
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/943304A485DE11ED8F84DF93F1222468.roa
Signing time: Tue 27 Dec 2022 12:04:13 +0000
ROA not before: Tue 27 Dec 2022 12:04:10 +0000
ROA not after: Fri 27 Dec 2030 12:04:10 +0000
asID: 61317
IP address blocks: 102.215.224.0/22 maxlen: 22
102.215.228.0/22 maxlen: 22
102.216.80.0/22 maxlen: 22
102.217.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Dec 27 12:04:10 2022 GMT
Not After : Dec 27 12:04:10 2030 GMT
Subject: CN=63aadf3d-9d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:e5:5a:bc:40:58:46:93:f1:8b:25:33:85:
84:75:25:ef:2c:82:a1:e9:af:67:f3:98:0f:c0:65:
3d:5e:f3:cb:ae:47:30:e7:3e:83:ff:28:54:c2:0c:
75:58:45:3b:93:ec:e5:24:62:c1:58:6e:ca:6e:05:
c3:27:89:9f:44:8c:04:56:79:c1:93:18:c6:38:f1:
f0:6c:40:74:69:67:2e:a8:1f:cb:c6:5f:52:e7:3a:
ce:ba:1d:42:3e:ed:7e:38:07:78:8d:32:aa:d2:d9:
a3:13:72:d6:53:cb:c9:8b:5e:e3:4a:5e:9f:7d:35:
5a:29:ad:10:89:03:aa:80:34:fc:04:59:05:fa:57:
72:07:79:b9:fb:79:82:b6:ce:fd:3a:2c:5b:95:c0:
36:f7:8d:f2:a2:16:04:a7:36:55:20:df:4f:07:2b:
22:9d:be:09:99:b8:c6:b1:99:1f:73:a0:20:af:13:
35:3f:a3:29:98:25:be:cb:43:9f:8a:a2:dd:ee:8e:
47:c7:75:3f:57:bb:92:de:a2:79:ed:1f:96:92:0f:
f4:4a:82:bc:19:6c:64:ac:1a:e5:a4:8e:4f:9b:f0:
0b:5c:07:8f:76:55:f6:f1:c2:31:dc:1d:31:bf:9c:
52:45:ff:c9:f3:95:06:3e:85:05:4f:40:9a:cd:46:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7A:99:B0:11:0C:6C:CA:03:9E:39:14:BF:C2:6B:FE:FB:32:2A:70
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/943304A485DE11ED8F84DF93F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/21
102.216.80.0/22
102.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:ee:37:6c:4d:60:ea:b9:70:d4:94:67:02:38:9b:e5:43:84:
55:b9:af:fb:a5:1e:d3:5e:d9:13:24:a7:0f:34:da:fa:b8:3d:
b9:e7:8e:5f:31:5c:77:76:7f:56:88:85:85:38:da:95:1f:11:
23:27:38:c8:6b:d3:b8:30:7c:6d:70:6f:cd:73:a6:e6:30:65:
20:09:32:79:1e:f4:97:d0:87:b8:af:d4:30:28:59:69:54:b5:
42:b7:12:95:8f:f2:7c:c1:25:8e:0c:c8:49:3c:06:81:8d:76:
00:26:92:42:4d:c9:db:a2:f1:99:ea:85:ec:de:6f:b3:74:79:
c9:9c:52:ab:63:e1:5d:49:3c:e6:02:78:17:f6:81:96:8f:be:
7c:eb:15:f9:75:be:f5:0e:af:0a:99:f2:3e:0a:0c:ee:7e:5e:
0c:7e:e4:a4:bc:93:56:ff:44:38:04:bc:83:29:88:fe:8c:fd:
15:a8:0d:ca:61:87:42:bb:7a:23:7c:5f:c3:f8:33:37:2f:c2:
52:4a:f1:a0:ba:ce:f1:10:c9:3f:f4:cd:64:0b:5e:86:1a:5b:
12:de:22:3a:14:36:1b:a3:22:31:33:6f:68:84:26:b2:23:34:
41:2b:4a:86:6a:2a:b5:0d:9a:dc:78:f4:91:0e:3f:ea:c2:a5:
d0:d5:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:45:42 2024 by rpki-client on console-fra.rpki-client.org