Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/92299E2E7FBD11ED9D3ACAB1F1222468.roa
File: 92299E2E7FBD11ED9D3ACAB1F1222468.roa (raw, json)
Hash identifier: t5cNCYmmhks6Yd5Kz0D6RtA9Ommnk+zOhjF4JOeg6yI=
Subject key identifier: B9:EC:FC:C1:DB:3A:94:DF:81:CB:46:A9:74:AC:56:26:41:63:A7:8B
Certificate issuer: /CN=F36312D2AF/serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Certificate serial: 020D
Authority key identifier: 31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/92299E2E7FBD11ED9D3ACAB1F1222468.roa
Signing time: Mon 19 Dec 2022 16:52:50 +0000
ROA not before: Mon 19 Dec 2022 16:52:46 +0000
ROA not after: Tue 31 Dec 2024 16:52:46 +0000
asID: 37236
IP address blocks: 41.79.240.0/22 maxlen: 24
102.213.128.0/22 maxlen: 24
102.218.120.0/22 maxlen: 24
154.119.224.0/19 maxlen: 24
2c0f:f010::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.mft
rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36312D2AF/serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Validity
Not Before: Dec 19 16:52:46 2022 GMT
Not After : Dec 31 16:52:46 2024 GMT
Subject: CN=63a096e1-34a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:67:cf:66:4e:50:f2:b0:27:76:8f:4c:ad:
e4:0c:7b:46:89:3f:c5:db:3b:43:c9:82:3f:6b:07:
65:6e:d5:40:c1:73:4d:42:f4:0e:87:17:25:89:b7:
79:e8:35:ac:1c:02:d7:55:76:14:81:a8:28:85:98:
d6:1c:67:82:19:02:53:6e:d0:4f:55:95:30:79:0f:
0f:fc:56:bf:ad:53:b8:96:78:e8:61:ca:c2:79:39:
cb:2e:e1:a3:88:ff:2f:bb:3b:34:c2:15:74:32:37:
e9:54:24:11:f1:67:07:eb:44:d1:46:e3:99:f5:ce:
ef:63:d9:75:79:bd:f6:66:9f:94:78:8d:2b:d3:10:
dc:12:a0:36:3d:26:4f:a5:80:27:54:f1:8d:81:36:
77:6c:2c:f3:ac:c4:f4:48:e7:ad:7d:6c:13:25:cb:
1a:ca:f6:c9:71:c7:c3:8e:11:66:7b:fb:88:f5:e5:
db:b2:25:34:69:56:7a:8b:b5:a6:38:08:4a:c5:12:
c8:4e:33:87:16:ad:04:9b:2c:dc:70:11:3e:26:24:
e9:ba:64:f4:7c:78:3e:a3:44:24:51:bb:0a:46:e1:
95:e6:a8:95:46:41:88:57:02:2a:2c:45:42:4e:53:
59:65:ee:63:16:9c:93:ba:9e:78:3c:41:ef:6e:ae:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:FC:C1:DB:3A:94:DF:81:CB:46:A9:74:AC:56:26:41:63:A7:8B
X509v3 Authority Key Identifier:
keyid:31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/92299E2E7FBD11ED9D3ACAB1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.240.0/22
102.213.128.0/22
102.218.120.0/22
154.119.224.0/19
IPv6:
2c0f:f010::/32
Signature Algorithm: sha256WithRSAEncryption
0e:ee:29:ff:5c:6d:4d:46:18:fa:00:84:c0:cb:c6:66:f3:ae:
49:f9:7a:84:76:90:6c:12:e3:db:1d:37:78:fb:79:da:df:aa:
0b:7a:6f:fa:8a:26:b8:fc:ba:58:3b:89:89:83:62:e3:1f:a8:
e1:2b:be:fb:7e:f7:78:67:ac:bf:ec:1f:ef:1f:b5:bd:a2:42:
7f:9e:92:91:df:9a:df:24:2f:4a:de:7e:49:ba:d1:4d:6c:9a:
fa:d6:5a:43:7f:2d:5d:94:73:72:c4:38:25:59:c5:5b:9c:aa:
47:f4:8f:00:6d:4e:ca:c9:03:9c:61:f0:da:50:0c:01:d7:34:
cb:90:53:89:c2:d2:94:6e:f4:01:99:56:32:fa:8a:f3:e1:6f:
17:4e:67:a6:d7:35:f1:5f:1d:0d:fb:e3:66:e2:fe:70:41:74:
10:ab:7c:40:c4:11:61:15:87:bb:f5:c3:f3:41:53:49:93:34:
1e:e8:c5:97:b7:62:a9:dc:40:2a:4d:a3:a5:5c:cf:d0:9e:f4:
97:c6:c3:93:c1:40:70:59:f5:4d:d9:62:43:93:45:2a:36:f3:
ac:cc:af:09:24:19:43:94:99:eb:32:f7:65:63:44:4b:56:d7:
94:7d:c2:38:9e:8a:b2:82:d6:aa:8f:92:e9:73:ae:6b:4b:6b:
c4:27:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:39:24 2024 by rpki-client on console-fra.rpki-client.org