Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/BD35823837EA11ED900673C9F1222468.roa
File: BD35823837EA11ED900673C9F1222468.roa (raw, json)
Hash identifier: K3b0R/z4frBDGrfF/mCTN3o21drYDHR1MM4314IVJ6A=
Subject key identifier: 1F:87:E7:1A:A2:F6:2E:EA:53:8F:46:02:FD:10:C3:37:BF:69:11:87
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 0245
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/BD35823837EA11ED900673C9F1222468.roa
Signing time: Mon 19 Sep 2022 07:14:46 +0000
ROA not before: Mon 19 Sep 2022 07:14:42 +0000
ROA not after: Sun 19 Sep 2032 07:14:42 +0000
asID: 37053
IP address blocks: 102.214.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Sep 19 07:14:42 2022 GMT
Not After : Sep 19 07:14:42 2032 GMT
Subject: CN=632816e5-7b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:29:65:d6:58:23:96:ab:4c:c0:6c:36:c1:
c6:8a:2d:bc:14:8a:ac:ae:96:e4:cb:b9:40:02:e9:
9a:da:b2:dd:5c:a0:42:0f:98:b7:d3:f1:59:01:23:
4f:4f:3c:a6:92:17:e2:2c:33:1a:72:91:da:81:2e:
32:7c:1f:24:3a:bc:eb:bf:d3:da:88:e1:ef:02:20:
ed:a9:0f:0a:7b:3c:d1:52:11:0c:7e:e4:b1:fc:a7:
9f:ee:10:bd:25:95:5b:f8:fb:b2:8d:c1:04:f3:88:
16:3d:58:5f:99:3e:f2:2c:c9:85:71:54:0d:85:82:
8e:4d:f4:fe:30:56:74:04:ba:32:59:56:1f:31:1f:
73:0d:88:6c:2d:8f:b5:74:ee:59:3c:09:ff:78:b2:
ed:34:48:82:9a:e2:0f:dd:c3:89:55:11:4b:ce:a8:
9f:d5:0a:0d:68:96:fa:f6:50:c9:f1:a3:78:86:62:
4d:a9:32:33:70:49:5c:34:5c:23:dc:ae:7f:b6:9a:
ea:91:29:af:23:fc:9d:ec:fd:ce:d4:ea:e2:c3:1a:
e3:06:7e:d5:a8:67:c8:25:7e:dd:18:e8:d2:9f:6a:
96:30:f2:dd:e1:83:1d:fd:b7:ac:d8:03:8f:28:51:
71:35:3a:5d:97:0f:f8:ba:e2:db:e3:1c:5e:9c:60:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:E7:1A:A2:F6:2E:EA:53:8F:46:02:FD:10:C3:37:BF:69:11:87
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/BD35823837EA11ED900673C9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.92.0/22
Signature Algorithm: sha256WithRSAEncryption
91:47:12:21:68:dd:53:4a:3a:3f:81:96:a3:e5:32:ee:a0:0f:
ca:5c:ae:85:f9:cc:79:d8:1b:38:02:de:c8:e5:00:af:f1:6f:
db:6e:45:e3:50:db:92:93:22:db:a6:39:7b:6c:00:1a:7b:c6:
3b:bb:80:b3:b7:3c:43:6d:59:5a:ce:25:2c:b0:86:fd:e4:a2:
86:ea:8a:de:6c:7c:1a:ad:36:14:17:65:7f:cb:75:fa:7d:12:
fc:62:d5:5a:fc:74:a9:35:8c:61:66:13:05:5c:1b:13:af:49:
4c:45:00:4e:35:2b:e1:db:b3:cd:ae:7f:26:e6:96:81:54:4f:
f1:a6:13:11:47:5b:b0:05:f8:31:16:13:47:5c:12:96:79:72:
79:2a:b1:59:6b:df:0e:bd:18:b4:38:95:6d:57:18:37:22:bd:
09:40:ce:28:52:08:af:ba:25:8a:66:af:42:2f:98:20:7e:9c:
d4:3f:10:88:be:fb:2d:fa:52:13:f3:07:78:99:09:e9:e3:9f:
a9:bc:56:f5:85:23:62:5f:18:5d:9a:07:32:cb:66:b9:a5:e5:
34:00:84:72:e7:1b:26:45:ed:0d:7c:a1:ef:30:8a:cb:e2:70:
1c:0d:10:83:d3:3b:c5:a6:62:7f:95:05:fa:64:e0:33:ac:b9:
7d:4d:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:44:34 2024 by rpki-client on console-fra.rpki-client.org