Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/E8C1348EF70C11ECA5BCDAB4F1222468.roa
File: E8C1348EF70C11ECA5BCDAB4F1222468.roa (raw, json)
Hash identifier: sQtWx2Bv/Sqp8d9pEf9Jqmmnu5VfFPqFz45blSrAhD8=
Subject key identifier: 43:0E:49:51:7A:FB:40:AA:67:1B:02:54:52:EE:BA:7A:C8:F9:CD:2C
Certificate issuer: /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial: 0B
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/E8C1348EF70C11ECA5BCDAB4F1222468.roa
Signing time: Tue 28 Jun 2022 18:05:36 +0000
ROA not before: Tue 28 Jun 2022 18:05:32 +0000
ROA not after: Mon 28 Jun 2032 18:05:32 +0000
asID: 328925
IP address blocks: 102.218.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Validity
Not Before: Jun 28 18:05:32 2022 GMT
Not After : Jun 28 18:05:32 2032 GMT
Subject: CN=62bb42f0-a5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:55:c5:d6:eb:8d:a9:58:79:0f:b6:a3:c7:
a5:ac:e3:da:b7:2a:8a:ff:54:14:5f:41:73:e7:35:
4f:42:36:df:48:38:46:1b:5a:b2:ca:89:d2:11:13:
88:1b:5a:49:d0:33:ba:4b:29:0c:35:83:e2:cf:12:
1b:48:6e:50:7d:60:c3:e5:d7:1f:ab:ac:37:f6:4d:
2a:d3:f3:8d:8b:b4:5a:f2:5a:29:f9:ea:2e:ff:bd:
91:d5:f3:f8:3a:33:a4:8c:02:ee:58:c3:b7:73:04:
a5:52:14:fe:c6:88:71:97:20:87:66:c4:ab:b4:58:
1c:80:39:35:e7:c7:f0:45:97:8d:b7:f0:f7:f5:ac:
0e:c6:3c:42:a1:54:42:7a:11:50:e6:6c:37:ea:a4:
f8:ab:00:d1:a8:b6:0c:0d:6f:c6:15:3f:07:c3:d0:
98:c9:49:0e:1f:cb:f7:11:90:40:72:5e:65:94:ac:
6f:2e:a9:a0:03:1b:a5:70:f5:d8:44:d4:09:56:09:
58:72:c6:1c:eb:11:e6:43:72:e6:2e:37:8b:e7:76:
8b:a4:40:57:f0:3f:d5:a0:10:39:4c:6f:fc:b0:d8:
59:4e:10:f8:22:6f:61:1f:fc:b6:e0:59:ba:a9:2f:
5d:34:1a:ec:4c:24:20:31:d9:7b:0b:c5:49:0b:b4:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:49:51:7A:FB:40:AA:67:1B:02:54:52:EE:BA:7A:C8:F9:CD:2C
X509v3 Authority Key Identifier:
keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/E8C1348EF70C11ECA5BCDAB4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:52:d9:03:b3:8f:77:ae:b0:81:de:6e:e0:41:26:14:75:cf:
71:83:2e:b0:99:66:a4:ef:5b:37:bf:16:33:c6:54:dc:a6:d9:
18:0c:b2:36:c0:ad:f2:5d:17:80:6b:20:07:2a:29:23:99:7e:
19:6c:21:3a:6c:6c:9d:59:e6:ae:0d:28:56:75:d1:0a:bd:45:
45:9f:52:86:f9:60:d3:36:cd:08:19:36:a6:f2:23:51:ab:21:
ad:a8:5b:e5:c9:00:d9:da:96:ad:24:a2:4c:1b:7c:72:18:4c:
6b:93:c0:07:ab:f0:79:4f:15:f5:67:dc:cd:35:bc:46:fc:21:
be:5c:02:20:5f:d6:d0:d1:d9:8e:2a:2f:30:20:84:41:36:e6:
d7:4e:d3:93:cb:88:ab:57:d5:6b:3c:a8:86:77:4c:fc:cf:03:
2c:58:fd:c8:b8:4d:54:cb:1c:2f:9b:a7:bb:fd:c7:bd:1e:8c:
e3:3a:af:ec:40:b9:1f:e5:f7:34:8d:b1:9d:13:eb:d0:cb:b9:
b0:14:b3:6c:03:72:42:23:8f:76:89:58:aa:2f:58:a1:f7:fe:
a0:63:37:1d:34:04:3d:6d:4d:f4:92:e5:44:b7:49:e0:34:86:
dc:18:19:42:bf:6a:be:c9:96:0a:95:24:6d:5c:8d:b9:d6:f1:
36:a8:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org