Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/49178D26482111EFBF6A9846762E951A.roa
File: 49178D26482111EFBF6A9846762E951A.roa (raw, json)
Hash identifier: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=
Subject key identifier: B0:6F:30:74:A9:A0:71:59:ED:4A:6D:28:B1:BA:AC:94:7C:34:92:27
Certificate issuer: /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial: 02
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/49178D26482111EFBF6A9846762E951A.roa
Signing time: Mon 22 Jul 2024 11:55:27 +0000
ROA not before: Mon 22 Jul 2024 11:55:24 +0000
ROA not after: Sat 22 Jul 2034 11:55:24 +0000
asID: 329373
IP address blocks: 102.210.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Validity
Not Before: Jul 22 11:55:24 2024 GMT
Not After : Jul 22 11:55:24 2034 GMT
Subject: CN=669e48af-3b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:52:53:c2:7b:4c:f7:e4:95:25:ff:fe:e2:
b7:4a:f0:7b:83:e3:24:5e:58:a9:19:9a:b7:8b:d2:
75:b0:59:63:05:d7:47:9e:07:e4:45:78:8b:8d:c7:
ce:d9:ac:75:f1:55:6e:c3:ea:c8:e5:bf:dc:32:73:
26:a3:26:4c:cf:67:de:6b:2c:a9:07:8f:2c:7d:71:
03:5e:4c:f7:c1:95:bf:23:f3:dc:b8:11:bb:3d:ed:
68:d1:05:47:3c:7f:87:5e:9e:1c:aa:32:a4:f7:04:
61:cc:fa:e1:3d:af:9b:c2:73:4d:af:76:f9:6f:81:
1c:f0:d0:33:de:8e:79:b2:cf:58:88:cf:f1:8b:8d:
a6:68:6d:f5:81:48:87:ee:17:66:f9:af:73:b7:33:
ae:6b:ad:21:d4:ad:a3:4b:e5:59:3a:cf:4f:76:45:
82:e7:c1:be:f1:1f:5f:c4:15:89:c8:39:c9:2c:f6:
81:a0:db:69:ce:74:9b:03:74:01:e6:30:02:2d:cf:
5f:f8:19:bd:10:ab:50:ec:d5:71:7b:af:26:f8:de:
dd:ad:41:cc:b3:7a:76:93:6f:a7:3d:88:06:e2:15:
e7:23:9b:f1:d0:44:7d:9b:8e:50:06:6d:72:fd:b1:
be:f2:69:94:f5:a0:6e:2a:9f:51:44:ac:0b:74:e3:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:30:74:A9:A0:71:59:ED:4A:6D:28:B1:BA:AC:94:7C:34:92:27
X509v3 Authority Key Identifier:
keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/49178D26482111EFBF6A9846762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:a2:42:63:1a:f3:5e:53:a8:1d:87:a0:e9:21:c5:07:6e:03:
c1:ab:dd:a3:80:d4:68:cb:f1:7c:e1:22:9d:43:02:89:2b:48:
92:63:f0:ef:53:f1:26:2d:ec:c9:60:f2:8a:01:e3:f4:92:7a:
a3:9d:b3:7c:73:44:96:61:36:af:ce:04:c2:ca:e4:1b:cd:28:
b9:bb:36:56:fe:ee:94:cb:c2:76:67:5f:c2:ad:10:38:00:6a:
b2:22:f7:db:e9:a5:e8:c2:1b:64:e1:01:4c:a9:85:c8:2c:52:
c2:62:df:75:4c:0f:80:35:2e:24:2a:87:d6:7e:a8:99:ea:46:
05:e3:a4:0a:a6:ef:f3:41:3f:d6:90:8b:de:e9:71:fa:9f:5b:
42:6c:d9:81:d5:fe:5a:da:37:a0:3e:70:27:ca:7b:4e:86:48:
31:8f:d0:e7:a0:37:cf:d6:98:2c:eb:a6:bd:6b:34:7a:b8:3b:
43:55:25:c7:0a:0f:02:70:02:80:2c:61:ff:b2:6b:27:ad:19:
b1:1e:7a:6b:41:30:84:6e:6e:6a:0b:a1:3b:40:2a:15:ed:aa:
53:61:42:4d:d2:6a:52:f0:19:15:25:ce:18:98:4c:b4:a5:9a:
66:14:57:26:a7:8a:01:fa:e1:40:4a:ba:71:33:53:f0:d9:df:
58:c2:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:22 2024 by rpki-client on console-fra.rpki-client.org