Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1970B130E81B11EEACE154C6775412E6.roa
File: 1970B130E81B11EEACE154C6775412E6.roa (raw, json)
Hash identifier: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=
Subject key identifier: E8:4E:B6:3D:55:67:DD:EE:F3:41:AF:9D:A3:CC:61:41:65:0F:25:2B
Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Certificate serial: 9D
Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1970B130E81B11EEACE154C6775412E6.roa
Signing time: Fri 22 Mar 2024 07:09:18 +0000
ROA not before: Fri 22 Mar 2024 07:09:15 +0000
ROA not after: Tue 22 Mar 2044 07:09:15 +0000
asID: 36962
IP address blocks: 102.210.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Validity
Not Before: Mar 22 07:09:15 2024 GMT
Not After : Mar 22 07:09:15 2044 GMT
Subject: CN=65fd2e9e-c4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:3e:9b:62:af:9d:06:d3:20:ac:f3:50:91:
97:0c:be:39:3d:01:26:8a:f8:29:9d:2e:5f:87:2b:
81:71:fd:cc:be:34:7e:a9:3f:fd:28:7e:95:60:af:
86:36:2f:91:75:31:16:bb:a5:ac:c3:65:b3:e9:05:
22:a5:51:30:d9:bd:9b:88:d4:04:bd:7c:1e:5e:db:
89:5e:a5:44:a5:e7:1b:ea:a3:98:e9:e2:61:d7:4b:
f7:f7:09:32:76:6e:1b:4a:ae:93:92:7b:a9:d7:bc:
b1:1f:fe:5d:8e:5b:f8:3d:21:2d:e6:b8:a6:cf:02:
3c:ac:60:78:b8:08:16:cf:30:c7:a3:69:5b:27:b7:
7d:89:ca:ed:f5:f1:dd:82:13:cb:b1:96:90:ac:8a:
3d:2e:32:66:9f:ad:60:9a:97:a6:de:08:a8:cc:73:
b8:e3:61:e9:0e:07:fd:26:e0:87:6c:2e:b2:db:f6:
d7:05:23:3c:87:2e:bf:22:9f:90:d2:52:e6:7c:05:
ba:ed:e4:e0:8b:30:0e:09:69:0e:e2:bb:e9:fe:78:
87:1c:85:95:81:27:d6:f8:31:e5:a4:ac:0e:99:2e:
30:dd:50:3f:f0:63:17:53:bc:2c:93:b7:a3:59:cc:
a2:27:bd:46:ca:d1:e5:d3:e9:05:ed:d0:0f:93:c2:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4E:B6:3D:55:67:DD:EE:F3:41:AF:9D:A3:CC:61:41:65:0F:25:2B
X509v3 Authority Key Identifier:
keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1970B130E81B11EEACE154C6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.160.0/22
Signature Algorithm: sha256WithRSAEncryption
01:ee:60:81:45:3a:a7:78:0a:84:53:ba:f6:33:99:8a:9d:f8:
f9:4a:98:bf:af:dc:ee:73:e0:a9:57:97:6d:7e:7d:b9:74:58:
e7:59:76:5f:03:ef:79:e1:41:c0:bf:71:03:ee:7b:9e:a6:28:
39:d0:1c:de:4b:1f:b4:5f:a6:74:78:45:49:fe:75:52:d2:bb:
14:d3:b1:da:d6:59:39:da:2d:8b:45:27:e0:69:db:20:92:f4:
e3:55:6d:7b:b4:b9:b2:36:0b:df:bd:cf:54:14:d4:13:da:e1:
22:33:11:27:c0:f9:72:bf:44:c3:03:2a:4a:16:49:80:65:8c:
d8:5a:ac:ba:38:41:10:19:88:da:d8:63:09:1f:02:54:e4:65:
32:c8:9f:76:10:8c:70:f8:4d:0f:f3:fa:73:6f:19:03:88:01:
fb:d9:54:7b:bc:69:4f:c9:d9:e9:c2:fe:ba:87:ee:8d:14:d8:
e5:c6:7f:fc:dc:70:b1:5e:e4:86:06:6a:42:0b:d8:b7:88:05:
78:f9:a3:86:81:a4:47:eb:3c:d0:23:da:98:1d:61:eb:ad:46:
66:98:f6:7d:5f:6a:6f:72:b2:1c:0d:32:1e:68:85:5c:88:d6:
e4:6c:0e:97:ed:73:b3:a5:6e:72:1b:08:75:eb:87:1f:ef:b4:
74:2a:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org