Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361FDEB/02D6E85A489311EDA5DCF0D8F1222468/A9DD5B7448DA11EDAA7E0A8FF1222468.roa
File: A9DD5B7448DA11EDAA7E0A8FF1222468.roa (raw, json)
Hash identifier: 1MczgcI8pLnvzcnO3CaxMO5QV8HJ3q4QZPCVvdTNE2w=
Subject key identifier: 96:0D:67:9F:F8:4D:C6:D2:12:6F:75:AB:04:DC:B0:E7:82:40:41:6E
Certificate issuer: /CN=F361FDEBAF/serialNumber=17A7D2EADC61FFEE42A4CCB24F0EAFDC420F5251
Certificate serial: 02
Authority key identifier: 17:A7:D2:EA:DC:61:FF:EE:42:A4:CC:B2:4F:0E:AF:DC:42:0F:52:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F6fS6txh_-5CpMyyTw6v3EIPUlE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361FDEB/02D6E85A489311EDA5DCF0D8F1222468/A9DD5B7448DA11EDAA7E0A8FF1222468.roa
Signing time: Mon 10 Oct 2022 20:32:31 +0000
ROA not before: Mon 10 Oct 2022 20:32:25 +0000
ROA not after: Thu 10 Oct 2024 20:32:25 +0000
asID: 328456
IP address blocks: 102.69.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361FDEB/02D6E85A489311EDA5DCF0D8F1222468/F6fS6txh_-5CpMyyTw6v3EIPUlE.crl
rsync://rpki.afrinic.net/repository/member_repository/F361FDEB/02D6E85A489311EDA5DCF0D8F1222468/F6fS6txh_-5CpMyyTw6v3EIPUlE.mft
rsync://rpki.afrinic.net/repository/afrinic/F6fS6txh_-5CpMyyTw6v3EIPUlE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361FDEBAF/serialNumber=17A7D2EADC61FFEE42A4CCB24F0EAFDC420F5251
Validity
Not Before: Oct 10 20:32:25 2022 GMT
Not After : Oct 10 20:32:25 2024 GMT
Subject: CN=6344815f-7460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:50:4e:d9:be:49:45:1d:6f:00:81:c9:a6:
e0:cd:c3:45:20:9c:fd:df:b1:76:31:bb:76:f0:82:
0c:6c:a3:05:82:d0:58:ea:8f:33:5b:39:44:3f:fb:
4c:b2:af:d4:ad:b7:18:ce:d2:5e:4e:67:ac:48:97:
85:ef:c9:ce:af:d3:3b:dc:b5:6e:c0:49:0e:7b:50:
41:b0:4e:09:e7:9f:f3:36:b5:69:af:d9:f1:c1:6a:
87:0d:f1:97:0e:fa:15:91:9c:28:de:45:49:51:ee:
62:fb:39:94:45:02:7a:28:35:1e:9f:44:1c:8f:2d:
68:5a:9b:a5:95:b3:1a:58:14:3f:c0:41:ad:43:0f:
1f:32:e6:d3:f2:d6:8e:55:16:76:63:de:f5:cb:8c:
0a:45:e6:01:91:15:64:7f:e8:f4:d7:9a:c9:be:0c:
c9:7f:6d:f0:38:63:21:cb:6f:59:71:c1:d9:7e:00:
36:3b:21:48:ad:13:58:58:66:4d:bd:96:a0:dc:63:
14:6f:cc:7e:d5:35:2b:ee:92:14:03:33:3c:92:92:
a4:6a:68:de:e2:7a:c7:76:e0:59:1e:72:9a:b8:be:
30:4d:e7:d7:87:d3:fd:a4:6b:5a:9e:07:e1:f6:de:
93:6e:8e:a6:7c:87:9e:8a:50:18:29:4f:b4:4f:4e:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:67:9F:F8:4D:C6:D2:12:6F:75:AB:04:DC:B0:E7:82:40:41:6E
X509v3 Authority Key Identifier:
keyid:17:A7:D2:EA:DC:61:FF:EE:42:A4:CC:B2:4F:0E:AF:DC:42:0F:52:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361FDEB/02D6E85A489311EDA5DCF0D8F1222468/F6fS6txh_-5CpMyyTw6v3EIPUlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F6fS6txh_-5CpMyyTw6v3EIPUlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361FDEB/02D6E85A489311EDA5DCF0D8F1222468/A9DD5B7448DA11EDAA7E0A8FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.244.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:cf:c0:c1:1c:eb:cf:0e:7f:28:ec:f7:11:48:e5:dc:6c:e5:
14:03:04:79:f0:84:ab:46:67:d1:39:35:c0:16:df:51:be:13:
cd:c9:04:7f:8f:b2:40:47:30:b0:60:99:d8:05:b6:9b:f3:82:
4c:be:9b:bd:78:52:33:a3:9c:a6:6e:67:53:af:38:e9:7c:d5:
b8:2b:fd:7e:c3:27:61:f9:23:98:0f:12:97:1b:10:17:48:8e:
95:10:94:cc:33:42:79:2f:33:1e:16:07:40:97:39:bb:8e:c7:
81:81:09:1a:d9:36:3f:9a:29:11:df:c7:20:2b:df:ac:76:ac:
a3:82:d6:f5:98:7d:cc:c5:57:12:89:28:c3:46:a9:fc:7a:06:
3e:bb:2c:fc:41:d5:db:f3:4b:3a:6f:ca:84:04:95:13:7b:0c:
04:89:78:af:c4:7e:f8:47:5e:f8:e2:f4:fb:b5:e3:87:8c:39:
22:0f:77:66:f7:1b:45:3b:6d:46:22:8b:e8:da:dc:2d:3d:38:
f8:82:8e:83:8e:7b:55:44:a0:de:6f:9c:46:30:fd:f3:ce:15:
e1:29:c4:bd:2c:b4:9b:a1:50:ef:c5:94:18:6c:8c:69:0c:c1:
4e:d2:fc:50:39:1a:55:ab:d6:8f:40:a1:67:af:bf:e4:38:c2:
a7:c8:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:42 2024 by rpki-client on console-fra.rpki-client.org