Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/B816586EA91811ED9C6B08FAF1222468.roa
File: B816586EA91811ED9C6B08FAF1222468.roa (raw, json)
Hash identifier: yQjFDr1J8xnuzgmrjoQrHGlo418HKfpv3BOS6bU+5xA=
Subject key identifier: E0:30:46:2C:10:49:66:3E:5B:32:1B:CB:FD:1B:A0:FB:69:3E:13:A3
Certificate issuer: /CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
Certificate serial: 0426
Authority key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/B816586EA91811ED9C6B08FAF1222468.roa
Signing time: Fri 10 Feb 2023 07:58:35 +0000
ROA not before: Fri 10 Feb 2023 07:58:32 +0000
ROA not after: Thu 10 Feb 2033 07:58:32 +0000
asID: 328517
IP address blocks: 102.212.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1062 (0x426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
Validity
Not Before: Feb 10 07:58:32 2023 GMT
Not After : Feb 10 07:58:32 2033 GMT
Subject: CN=63e5f92b-9f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:b7:c3:78:a9:41:b1:28:71:22:63:d7:fc:
b8:29:df:e1:35:7f:89:25:f9:4c:ca:54:5d:1c:e6:
3d:88:95:d1:dd:d5:40:18:56:f0:1b:0c:b7:36:08:
b3:eb:01:39:3f:31:ff:05:49:a2:a7:0e:7d:b0:c3:
3c:ff:8f:6b:65:20:01:a2:f2:5d:51:74:0d:df:9c:
1d:a1:9a:8d:c7:1d:bf:50:c5:99:79:4d:3a:4c:ec:
75:6e:b4:4a:6b:29:1b:3e:36:99:51:86:de:a3:d8:
4e:c9:61:a7:d9:ad:3e:48:c6:4b:c7:b9:b6:6f:3e:
23:56:ba:e2:b4:72:b7:6b:c6:01:0f:66:ea:01:7a:
34:2d:06:ab:e9:f2:16:3b:af:d0:f9:7a:1e:da:d6:
92:8e:a0:47:71:2d:91:6e:5b:52:7b:e5:0c:54:74:
fc:c3:53:a7:c7:55:98:a5:e1:ca:00:61:61:4e:64:
2f:e7:d1:c9:8f:65:0c:f4:c2:ce:f7:36:bd:c0:76:
06:f7:d7:8b:72:4f:3c:44:ee:c2:48:df:77:90:49:
96:58:e7:ca:1c:3f:72:c1:5e:2d:68:35:c1:ef:69:
8e:4c:3f:5e:e8:f7:4d:c2:6f:d6:06:08:33:72:65:
11:13:11:f9:db:ff:27:a6:7a:c2:ad:42:1a:5c:13:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:30:46:2C:10:49:66:3E:5B:32:1B:CB:FD:1B:A0:FB:69:3E:13:A3
X509v3 Authority Key Identifier:
keyid:6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/B816586EA91811ED9C6B08FAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:0a:09:b8:11:b7:b8:86:15:a8:b4:a8:ce:25:d4:93:f5:cc:
2c:8e:f2:bf:e0:17:49:32:d6:06:aa:35:15:63:5b:1a:33:7e:
99:db:33:0b:9d:f5:9f:db:c4:f0:8d:df:be:a7:d0:2f:41:af:
65:15:dd:e5:39:6d:91:f1:fc:3b:31:0c:b4:91:b3:4c:9a:83:
f4:52:f5:4e:37:1f:cc:d6:9c:6d:b7:9a:61:b0:57:7f:2f:ee:
d1:7b:a4:c2:17:e2:46:10:f5:fa:39:cf:5e:64:9c:f7:2d:4d:
d7:1e:6c:e5:69:a1:80:80:e4:a2:6e:78:bd:6c:53:42:45:24:
96:5f:b4:05:1c:b7:48:9b:e8:24:91:7b:41:67:ed:8f:95:88:
17:f9:1a:21:eb:8b:9f:ef:4e:09:6c:3d:ed:42:fc:ba:c0:8d:
46:2c:07:2c:90:a3:df:55:b1:33:3b:92:e9:ce:85:97:b6:bb:
a8:bc:6c:44:8e:f4:ad:e1:e4:1b:9b:f9:83:bc:49:a8:de:84:
03:e8:35:46:2c:98:e4:4f:9b:b3:1d:f9:24:f9:2d:37:19:c2:
f3:79:24:1e:3a:4f:12:08:7e:64:6f:1d:f0:93:86:e0:c6:a3:
ad:60:aa:77:18:c9:ef:a8:51:78:a6:73:ff:cd:97:78:97:37:
db:0f:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:52:45 2024 by rpki-client on console-ams.rpki-client.org