Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/B063A1E4F70C11EC941F0CB4F1222468.roa
File: B063A1E4F70C11EC941F0CB4F1222468.roa (raw, json)
Hash identifier: Pp0AH2ECom1pa7n5F8aA5h/FubB3+W9tB91zRCkX5hA=
Subject key identifier: DC:67:C0:74:1B:5E:43:4C:7C:26:E7:5D:EE:31:D9:0D:6B:75:27:BA
Certificate issuer: /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial: 07
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/B063A1E4F70C11EC941F0CB4F1222468.roa
Signing time: Tue 28 Jun 2022 18:04:01 +0000
ROA not before: Tue 28 Jun 2022 18:03:56 +0000
ROA not after: Mon 28 Jun 2032 18:03:56 +0000
asID: 328925
IP address blocks: 102.218.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Validity
Not Before: Jun 28 18:03:56 2022 GMT
Not After : Jun 28 18:03:56 2032 GMT
Subject: CN=62bb4291-a3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:57:f8:f6:a0:aa:e9:62:a3:2b:c5:64:17:
3f:6f:14:01:e2:a4:71:8c:e9:83:0d:2e:67:bd:8c:
58:58:6a:1c:46:09:31:b0:fd:2f:64:6b:de:1a:f4:
fc:37:d6:a7:8d:77:7b:56:54:e0:8e:a1:d9:09:0b:
7e:f6:46:d1:4a:92:c5:e5:1b:41:48:ae:b1:9d:f0:
cf:df:d4:bd:ca:25:50:3b:7d:20:ee:b5:38:85:30:
88:7c:10:01:49:87:7d:d0:dc:97:67:f0:3a:0d:af:
9e:96:8a:13:44:98:20:14:26:dd:63:ff:d8:ad:65:
ce:11:9c:b3:72:53:24:09:39:b5:82:ec:7e:54:df:
61:11:07:95:c4:15:ba:6c:0b:17:0e:80:77:e2:24:
18:5a:7b:c6:a2:37:a4:c7:84:25:96:1a:75:52:88:
7c:d3:52:25:ba:37:76:14:3c:c6:48:0a:98:5c:2d:
20:66:e4:ab:4a:32:d3:e0:8d:e8:e7:16:b8:cc:88:
0c:a3:9a:94:4e:71:f2:a0:d2:ba:5b:b1:58:4b:96:
4d:08:50:7d:4e:fa:d0:95:87:a9:69:a4:8b:c1:71:
9e:8b:72:27:29:65:d7:83:bc:73:4f:36:66:6d:1d:
70:f6:52:f8:21:24:47:4e:53:f2:c6:15:36:38:09:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:C0:74:1B:5E:43:4C:7C:26:E7:5D:EE:31:D9:0D:6B:75:27:BA
X509v3 Authority Key Identifier:
keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/B063A1E4F70C11EC941F0CB4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.152.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b2:d6:d8:6c:a5:af:6c:8d:97:9e:75:8c:7a:b6:0a:76:05:
b1:85:27:dd:e8:28:a4:ee:23:ce:8f:b6:47:3d:0b:35:a7:ae:
37:89:80:d1:9f:96:f1:b8:fb:0b:83:cf:45:6e:cc:37:9b:3f:
89:b5:4b:83:bf:42:af:f4:9f:7d:57:d9:1f:3d:c4:85:da:23:
0c:ae:87:31:48:13:2e:db:86:e5:4b:30:f1:6f:4b:7d:67:e2:
c9:e2:3b:e4:52:29:64:9a:e1:d8:9f:c1:56:64:24:c2:15:a2:
ca:0d:43:2a:06:89:8b:4e:67:02:53:6c:91:bb:57:65:bf:fc:
bb:4a:7e:0a:3c:fa:60:be:e9:a8:ba:f8:30:8d:35:8c:c7:71:
02:c3:23:71:a7:da:88:5a:9c:9c:7a:cb:e6:7e:d0:40:46:dc:
08:b3:e0:32:a6:9e:86:a5:4e:6e:0f:da:89:08:48:4b:04:35:
24:e7:f4:c0:55:42:ce:98:6b:1f:6c:06:54:19:80:c2:11:7a:
73:41:1e:10:71:63:f8:00:12:64:2d:12:2b:38:42:0f:93:b9:
4c:b7:f4:e0:07:fc:51:21:e3:0f:8a:22:0b:7a:82:60:51:27:
22:81:f3:c7:f5:8f:31:6b:67:db:53:76:f0:ce:53:8e:41:b1:
43:5e:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org