Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/551745F4F58711EE98741157775412E6.roa
File: 551745F4F58711EE98741157775412E6.roa (raw, json)
Hash identifier: PKlN6lJiG4I6zfGoS0XUarhAA7/4QhFFrR9iXFInLzw=
Subject key identifier: A5:7D:46:B2:5F:F3:BE:77:61:D0:5C:E2:F1:4C:A9:8A:12:F3:3C:6C
Certificate issuer: /CN=F362C0A8AF/serialNumber=27450750851463BA54E7C82DC623D8D4D03BFBF3
Certificate serial: 02
Authority key identifier: 27:45:07:50:85:14:63:BA:54:E7:C8:2D:C6:23:D8:D4:D0:3B:FB:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/551745F4F58711EE98741157775412E6.roa
Signing time: Mon 08 Apr 2024 09:06:49 +0000
ROA not before: Mon 08 Apr 2024 09:06:46 +0000
ROA not after: Fri 31 Dec 2027 09:06:46 +0000
asID: 328993
IP address blocks: 102.217.120.0/22 maxlen: 24
2c0f:3b00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 27 Jun 2024 00:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C0A8AF/serialNumber=27450750851463BA54E7C82DC623D8D4D03BFBF3
Validity
Not Before: Apr 8 09:06:46 2024 GMT
Not After : Dec 31 09:06:46 2027 GMT
Subject: CN=6613b3a9-9b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:6d:b0:7b:fd:5f:2f:d9:e3:72:ff:a4:32:
da:7d:1c:41:a9:2e:b3:32:98:cb:ee:59:3a:ba:15:
0e:3c:94:1a:0a:23:64:a8:ae:36:bb:68:e5:d9:1b:
ae:60:50:3c:48:d3:d1:7c:e2:e6:7d:ad:67:7d:1e:
79:ae:36:f2:d5:c3:8f:97:58:9a:85:c5:41:af:49:
ac:b1:99:82:81:34:ef:0e:94:91:d4:a3:e7:55:40:
72:6d:0b:a7:9e:6f:dc:fe:15:99:ed:46:0f:2a:f7:
aa:06:7f:b4:8d:a9:f1:d0:ff:ca:f0:05:43:af:cb:
bb:0d:a1:3b:ea:ab:aa:e0:7b:e7:9c:91:14:d3:ac:
01:db:e8:60:44:5d:5d:21:31:43:a9:bd:82:a4:cd:
5f:55:49:54:20:94:fc:4a:e6:ac:db:3f:44:f8:90:
36:b1:15:c6:fa:33:19:7b:21:07:b0:8f:1e:b8:f9:
77:59:1d:86:4e:98:0a:53:49:cc:80:50:57:62:c9:
de:12:3c:de:58:68:ea:80:69:33:e4:7c:4d:73:f3:
3a:e1:a5:a5:60:0a:9b:6f:ce:fa:97:d5:3f:dd:40:
d4:40:47:0c:8f:4a:51:28:ab:27:44:e9:16:01:53:
c9:40:3c:7d:64:1c:c0:b6:b8:70:ed:1a:19:2a:bb:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:46:B2:5F:F3:BE:77:61:D0:5C:E2:F1:4C:A9:8A:12:F3:3C:6C
X509v3 Authority Key Identifier:
keyid:27:45:07:50:85:14:63:BA:54:E7:C8:2D:C6:23:D8:D4:D0:3B:FB:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/551745F4F58711EE98741157775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.120.0/22
IPv6:
2c0f:3b00::/32
Signature Algorithm: sha256WithRSAEncryption
ba:04:f0:94:a1:41:d2:a5:50:1b:ed:40:12:44:e2:08:9e:53:
c6:81:8d:3d:18:d8:1c:24:de:ec:f1:4d:58:20:23:4d:3d:0d:
25:d0:0a:b4:7a:a8:ae:a9:3e:dd:38:c9:ca:e8:b2:ea:c5:14:
91:6c:ad:0f:73:e7:97:33:a3:ac:62:44:bf:1a:99:7f:a0:76:
33:93:f9:f3:45:a6:91:1e:c0:1e:53:7f:eb:cf:19:9b:c6:44:
a7:52:32:b6:86:eb:c0:e6:3d:34:83:73:d7:93:4e:b2:57:c8:
eb:ce:74:b5:74:5e:13:76:77:d9:e7:c2:f0:93:35:6b:61:43:
ec:66:1a:72:70:14:6e:e5:93:5c:fd:78:4e:7f:a9:17:0b:3a:
ff:33:5c:78:e2:fa:de:b9:46:fe:49:02:d2:92:c3:8a:19:5a:
87:f9:d2:80:69:f4:c4:af:48:e8:fb:83:db:c5:9b:29:40:51:
54:be:4c:03:10:59:d8:4b:fd:7c:90:e9:c8:be:e1:06:75:2c:
a5:37:1f:29:50:f9:e5:39:46:b6:f3:8c:d8:fb:a4:0b:d2:6b:
73:4c:24:f0:fd:46:c4:11:b6:03:9c:2e:c8:16:e9:f1:b0:f6:
c9:35:3f:f3:27:8f:2e:90:66:90:a0:f3:b3:f0:81:b8:e9:ee:
89:57:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:04:03 2024 by rpki-client on console-fra.rpki-client.org