Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/618DD2E6D4DB11EBAC678141F8AEA228.roa
File: 618DD2E6D4DB11EBAC678141F8AEA228.roa (raw, json)
Hash identifier: 2dfVxKybLHR5+MMwCeet4VquLas7BlSkUUwjxoFXr54=
Subject key identifier: 20:5C:13:1F:F1:14:94:CD:E9:83:C0:69:E1:3D:F2:C0:44:7D:28:8F
Certificate issuer: /CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Certificate serial: 03
Authority key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/618DD2E6D4DB11EBAC678141F8AEA228.roa
Signing time: Thu 24 Jun 2021 11:00:26 +0000
ROA not before: Thu 24 Jun 2021 11:00:22 +0000
ROA not after: Tue 23 Jun 2026 11:00:22 +0000
asID: 328808
IP address blocks: 102.220.228.0/22 maxlen: 22
2c0f:4500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Validity
Not Before: Jun 24 11:00:22 2021 GMT
Not After : Jun 23 11:00:22 2026 GMT
Subject: CN=60d465ca-895d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:f8:84:d4:ca:8b:88:d9:10:75:bb:c5:2a:
8b:a5:1b:c2:e3:ec:f7:9d:ba:09:90:78:e0:9c:23:
2c:76:98:a9:90:09:ef:e5:b3:e2:e7:7c:d1:89:96:
32:9a:67:53:40:c4:c6:70:d7:c9:80:4d:8b:17:08:
ea:e6:cf:94:a6:cc:0e:86:3c:e5:20:4c:19:17:24:
bc:ea:b2:61:a2:07:79:ff:84:6f:b1:46:00:87:1b:
19:4f:2c:00:95:ca:31:a0:b1:c1:3c:38:73:d6:cd:
b8:44:a0:9e:3c:35:f4:e2:c6:bc:f1:f6:fd:d4:11:
5a:64:37:2c:4e:c2:58:80:0b:3d:4a:5c:44:b2:61:
0d:48:a3:14:05:27:08:a3:78:d3:50:1e:1e:8f:10:
b8:96:48:83:4d:e9:8e:7f:5f:67:88:38:87:b8:a5:
da:75:77:a4:e8:35:22:3e:c7:fb:2b:a8:6f:17:c5:
d8:e8:98:fc:a6:c2:13:d9:ed:5a:38:d2:f1:6f:22:
4d:2b:74:be:83:e3:e8:d2:c2:9f:20:62:9e:f2:1a:
a7:7b:37:d1:be:83:9e:38:59:ea:d1:95:da:5b:10:
ad:31:ec:ff:43:b5:b9:9d:13:71:f5:08:74:57:b1:
b4:41:9c:ea:e8:1b:5c:9a:7c:88:d4:60:4a:ff:3f:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:13:1F:F1:14:94:CD:E9:83:C0:69:E1:3D:F2:C0:44:7D:28:8F
X509v3 Authority Key Identifier:
keyid:FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/618DD2E6D4DB11EBAC678141F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.228.0/22
IPv6:
2c0f:4500::/32
Signature Algorithm: sha256WithRSAEncryption
0c:9b:b1:da:ae:1c:f2:e6:f0:f2:38:21:f2:7f:a7:64:d8:4d:
29:c1:2e:73:7c:c6:14:80:0b:e3:7f:b3:5a:45:04:7b:a5:a9:
d3:08:56:68:88:34:50:a0:e7:ee:52:19:ec:9c:cc:8a:41:82:
4c:73:58:99:77:50:96:be:ab:ef:d0:99:f5:4b:ba:db:fa:0a:
0a:b1:92:16:a6:fa:3c:f8:23:1f:37:09:db:a4:1a:70:a2:76:
a9:8b:8b:52:a3:08:3a:47:ba:ae:63:f5:3b:db:ab:87:d6:7d:
a8:25:fa:fa:82:95:fe:9a:d1:a3:2b:f7:e3:84:02:a4:06:7a:
d8:b6:60:74:a0:56:ed:0f:bf:70:2b:dd:32:ca:b7:30:d1:23:
1e:b0:ae:7c:13:89:e1:4c:14:eb:28:4e:11:8a:12:8a:f7:78:
3b:7f:9f:a7:34:2f:08:fd:2e:9a:6d:54:ad:0d:be:7c:cc:8b:
10:b8:a7:65:50:cd:ee:28:49:63:7e:ce:b9:e9:c9:8a:65:1a:
44:97:29:3e:68:c9:24:58:a0:0f:53:df:2f:ed:15:2b:b5:95:
49:75:f2:55:99:77:4e:bf:b3:3d:57:7a:ca:df:a5:a2:da:b1:
30:49:12:59:59:27:c0:9d:af:69:13:9c:7f:c0:4f:cf:c9:56:
3d:c1:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:11 2024 by rpki-client on console-ams.rpki-client.org