Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/5B8783E49BAC11ED97C0B6D9F1222468.roa
File: 5B8783E49BAC11ED97C0B6D9F1222468.roa (raw, json)
Hash identifier: PMDaBBvtP2gmeRL/ahXbvJAglpyMYY8FFcv7kEF4xqM=
Subject key identifier: C8:1C:B1:FD:57:AC:C0:7E:DB:1B:13:8B:0D:31:55:02:E6:02:06:D2
Certificate issuer: /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial: 02
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/5B8783E49BAC11ED97C0B6D9F1222468.roa
Signing time: Tue 24 Jan 2023 06:00:09 +0000
ROA not before: Tue 24 Jan 2023 06:00:05 +0000
ROA not after: Thu 23 Jan 2025 06:00:05 +0000
asID: 329182
IP address blocks: 102.213.89.0/24 maxlen: 32
2c0f:2980:4000::/34 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Validity
Not Before: Jan 24 06:00:05 2023 GMT
Not After : Jan 23 06:00:05 2025 GMT
Subject: CN=63cf73e9-bdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:e3:83:ae:8d:7a:96:f8:32:13:0c:b1:26:
8c:94:55:c2:f7:cf:6c:d5:f8:8d:0d:f5:7d:89:95:
a3:c1:3b:1f:5e:3d:bf:85:a9:de:3e:f3:b1:d2:cf:
fa:9c:11:ea:5d:93:81:1a:74:e8:74:15:9e:53:6c:
c3:a4:71:e5:bd:1d:4a:93:19:1a:e9:d5:e0:5a:56:
03:ec:e6:af:40:e3:21:c3:34:ab:e6:12:b3:c5:5f:
97:58:e4:95:f5:e9:fe:84:6e:26:f7:68:c1:fa:09:
25:71:dd:84:70:d1:f0:65:be:e9:a9:c5:e1:5a:87:
3b:24:1a:53:ed:e0:32:84:e3:f3:6c:a9:a8:4c:79:
e2:35:cc:3e:b3:13:0c:8c:35:5d:31:d9:1e:14:24:
f8:1f:71:2d:5a:69:1f:90:14:c3:90:95:d0:3d:a6:
4c:9e:07:e7:73:67:2c:51:7f:f3:3b:f5:1a:82:75:
4a:4e:f2:f5:fc:f3:07:ae:60:1f:30:03:fe:14:51:
08:19:55:78:ff:51:af:78:ab:c3:85:52:44:b7:df:
17:30:49:55:ba:e7:a8:b5:35:98:3a:de:30:d5:b7:
44:1d:d1:20:ae:2f:f5:2f:fa:49:6f:82:a0:74:63:
4d:a4:44:1d:16:ff:55:e8:03:b0:e3:e5:8a:9a:7d:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:B1:FD:57:AC:C0:7E:DB:1B:13:8B:0D:31:55:02:E6:02:06:D2
X509v3 Authority Key Identifier:
keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/5B8783E49BAC11ED97C0B6D9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.89.0/24
IPv6:
2c0f:2980:4000::/34
Signature Algorithm: sha256WithRSAEncryption
8c:8a:84:4e:8c:4f:3c:68:a9:0d:5a:56:ea:81:be:47:0e:43:
01:a3:e3:8d:5c:6c:4f:75:be:a6:f2:e7:05:d7:92:df:65:55:
65:d0:dc:99:c4:0e:91:a8:af:0e:d6:2f:83:74:3a:67:63:16:
22:28:12:45:15:12:15:72:09:3f:0d:a1:49:e7:25:53:04:ab:
45:e7:6b:2e:5c:ef:38:eb:2f:e2:33:ee:89:6a:7a:e9:37:7b:
06:ee:59:e2:26:43:58:10:b1:2c:63:2c:85:6f:84:e9:1d:21:
29:20:41:08:44:13:b4:14:56:de:17:f4:99:4e:e7:b7:2e:1d:
09:13:64:b1:4e:b1:24:f3:c0:1c:8b:e1:06:d4:fa:2e:45:3b:
1e:83:ab:ea:d4:2d:19:75:ed:5b:67:d4:8f:f4:d0:8e:2b:5a:
0d:41:85:bf:2e:48:2b:48:91:27:c5:d6:4d:a3:80:fb:3b:37:
55:c2:bc:f0:23:61:cf:0e:b0:ec:96:be:73:00:7c:99:0a:66:
35:f2:b3:b9:6e:41:45:cf:2c:9a:df:d4:2b:99:4a:93:97:3d:
0d:2e:20:09:2b:99:e2:57:7b:99:6c:6c:4a:61:82:05:cc:f3:
08:14:80:38:68:3c:a3:44:50:0f:d6:f2:8e:6f:e1:06:a6:ac:
fb:b1:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org