Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/790E531095AD11EE9C283379D25BE465.roa
File: 790E531095AD11EE9C283379D25BE465.roa (raw, json)
Hash identifier: Qj3JkuwJNN7j0VesRDUQ2bCZfvpe+I/vZ/mOS/O0MGI=
Subject key identifier: 89:83:5C:D9:F6:40:66:70:46:A9:63:7B:72:2C:D0:8F:32:3F:85:A4
Certificate issuer: /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial: 2B
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/790E531095AD11EE9C283379D25BE465.roa
Signing time: Fri 08 Dec 2023 09:37:59 +0000
ROA not before: Fri 08 Dec 2023 09:37:56 +0000
ROA not after: Mon 08 Dec 2025 09:37:56 +0000
asID: 327907
IP address blocks: 102.214.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Validity
Not Before: Dec 8 09:37:56 2023 GMT
Not After : Dec 8 09:37:56 2025 GMT
Subject: CN=6572e3f7-4777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:3b:38:b3:90:ba:fa:8c:14:74:81:a7:18:
da:a5:31:1c:dc:84:bb:ab:6b:d8:0e:bb:9a:f3:59:
df:fb:ce:dd:23:18:52:82:5d:c7:78:b9:20:d8:9c:
d5:af:75:50:88:ed:b4:fa:20:e5:69:18:9b:b8:05:
d2:72:0d:43:2b:d3:eb:86:a5:46:77:45:e1:8d:1a:
f1:d8:7b:24:3c:ff:19:e3:d1:86:86:e8:80:b1:01:
19:69:cf:03:ab:f7:9a:4f:1f:90:a1:f0:f1:45:b9:
04:ca:47:a6:20:29:80:7e:60:09:97:ce:8d:88:61:
f2:c2:99:c9:f5:94:08:cc:76:6f:08:b2:ce:fd:be:
b6:77:3b:e5:b3:92:42:84:1d:22:ef:61:fb:6e:5b:
aa:b5:43:51:01:98:7f:70:43:b4:8c:9d:e7:fb:e4:
79:82:6e:ea:6e:5a:44:e3:c4:f2:f1:c2:bd:dd:0e:
d7:03:92:86:e7:a1:36:d9:50:90:16:ef:0f:59:dc:
df:4e:19:eb:b3:a7:33:63:f8:0f:c2:4a:30:43:ce:
a3:b9:3a:3c:31:97:f8:d4:8a:68:7f:34:b1:af:59:
27:11:33:89:76:9f:62:f2:ee:fb:3a:55:4f:72:4b:
f2:81:21:c8:4b:eb:98:b5:72:9b:38:4d:14:39:35:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:5C:D9:F6:40:66:70:46:A9:63:7B:72:2C:D0:8F:32:3F:85:A4
X509v3 Authority Key Identifier:
keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/790E531095AD11EE9C283379D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:e6:49:7f:78:56:e4:62:8e:ec:2c:08:2a:d4:e9:d1:c4:e4:
10:a9:67:e5:69:3b:c7:e9:49:54:0f:f6:e7:d9:65:42:c3:70:
40:8a:1d:3d:5c:25:c9:7a:ad:62:68:26:79:a8:cb:dc:cd:14:
e2:e9:fc:24:1a:73:8d:b2:73:6b:36:91:fc:79:6a:10:88:ac:
02:ca:1c:37:0a:49:8b:fa:fa:aa:69:e7:28:6b:0c:59:39:6c:
29:e8:ff:23:be:44:bb:45:f9:24:53:28:fd:5b:d1:a2:35:62:
1c:5b:02:a4:09:b2:6c:02:37:a6:5e:9e:77:8f:ad:a8:fc:e2:
7d:c9:24:f6:92:f3:71:37:11:c0:43:98:c4:58:3b:44:99:1c:
66:95:55:fa:34:13:cf:1a:f1:40:72:48:67:a6:ec:31:fe:d9:
be:64:ea:8c:24:6d:9d:3f:9d:6a:f2:dd:da:3f:cc:0a:7c:f3:
48:cc:d6:48:4d:a1:3c:69:fb:b0:25:16:6b:08:c0:ec:4f:e2:
30:01:c2:d9:69:c4:e5:ed:d5:bb:f6:91:b6:90:ae:d5:c5:b2:
ee:9c:f3:05:44:8d:41:88:69:06:85:7e:88:7f:56:71:68:72:
fa:8a:1c:19:6b:8e:90:a1:70:b7:ea:8e:33:b7:6d:00:2e:2e:
47:71:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org