Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/8CBD7AB6CB7811EEB21DC966775412E6.roa
File: 8CBD7AB6CB7811EEB21DC966775412E6.roa (raw, json)
Hash identifier: 7LTqBOZdvx1x400JTuLrmGfbiQtHV4MfHLi7uJCZUpg=
Subject key identifier: 89:A2:C2:D6:57:88:1D:E8:A4:8F:29:12:99:50:CB:71:48:28:4F:69
Certificate issuer: /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial: 019F
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/8CBD7AB6CB7811EEB21DC966775412E6.roa
Signing time: Wed 14 Feb 2024 20:35:11 +0000
ROA not before: Wed 14 Feb 2024 20:35:08 +0000
ROA not after: Fri 14 Feb 2025 20:35:08 +0000
asID: 329027
IP address blocks: 102.223.156.0/22 maxlen: 23
102.223.156.0/24 maxlen: 24
102.223.157.0/24 maxlen: 24
102.223.158.0/23 maxlen: 23
102.223.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Validity
Not Before: Feb 14 20:35:08 2024 GMT
Not After : Feb 14 20:35:08 2025 GMT
Subject: CN=65cd23ff-0952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:ae:63:62:9d:82:bf:6e:68:bf:a4:77:00:
43:30:ca:7d:45:09:6e:8c:e2:08:a2:23:75:6d:06:
23:7e:72:0f:15:8c:b4:1d:ae:5a:4b:ea:c0:ea:28:
2c:b8:6e:60:1c:87:cd:01:8c:a7:b3:ab:46:d3:d7:
fd:50:ef:68:32:30:d3:18:d2:52:3d:0e:72:99:59:
44:8e:ed:47:4d:9b:1b:1d:0f:b4:86:fe:a4:4a:29:
a0:f7:93:b7:8a:b1:13:f2:e5:ac:af:bd:08:ed:44:
d3:1a:fa:6c:8f:4a:1b:28:8e:e6:f0:a2:5e:f6:2a:
7d:3b:bf:44:04:a6:38:e3:58:22:ba:43:d7:4e:75:
19:17:3a:73:da:ae:99:ba:4b:0b:6a:da:f0:c9:35:
89:41:39:25:d6:20:32:be:d7:af:0e:d9:fd:f9:45:
b2:fe:95:8e:cc:51:41:73:a5:b3:d0:a7:2c:0b:c3:
33:b2:a2:70:9b:6f:58:82:91:d4:e5:5e:e8:50:f6:
f3:6d:80:e6:e2:cd:e5:2d:bd:4d:17:df:93:95:f6:
f6:63:cf:20:8e:a9:2e:ea:4d:78:e7:28:e7:d5:9b:
85:15:51:3a:fa:f1:66:e8:ce:b5:e8:57:13:c7:b8:
11:83:5e:36:6d:62:4c:bd:fb:b2:a4:61:72:7d:81:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A2:C2:D6:57:88:1D:E8:A4:8F:29:12:99:50:CB:71:48:28:4F:69
X509v3 Authority Key Identifier:
keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/8CBD7AB6CB7811EEB21DC966775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.156.0/22
Signature Algorithm: sha256WithRSAEncryption
03:6f:e9:40:25:2f:9f:6b:4b:a4:1f:d6:39:76:c5:06:4e:10:
7c:0d:24:e6:7c:72:34:a3:61:8b:e0:d8:52:7b:05:fa:37:47:
85:43:a6:72:8e:b0:10:f3:88:8c:5c:44:e9:2a:26:99:68:1f:
87:45:07:9b:4e:41:c5:02:11:6b:22:29:07:31:85:e4:0c:17:
a6:ac:11:25:43:f7:eb:fc:68:0d:07:6a:f3:96:3c:62:4e:f8:
ed:ef:5c:cf:28:26:9a:8e:d5:54:0b:fc:c4:08:dc:a4:c3:78:
45:93:cb:8e:13:6f:76:0d:d7:ab:8f:be:3a:57:cc:be:9b:39:
9a:50:86:9c:4d:a6:91:cc:0e:d6:82:1a:ca:40:f0:b6:8d:c0:
76:3a:97:95:af:89:5b:16:5c:96:9f:8b:43:60:fe:74:f3:ab:
fc:42:5f:ae:9d:27:e0:75:e3:db:62:6f:a5:a8:ba:cc:05:c0:
bf:a2:7e:a3:3f:d3:5b:33:44:98:20:40:bf:1e:3d:40:0d:45:
d7:1c:95:47:80:67:1c:26:93:50:cc:b8:5e:4b:4d:bb:34:73:
75:1b:08:78:76:c5:4b:38:37:4b:e7:88:93:29:18:de:6b:a4:
d0:2d:0a:ef:ac:cd:f1:e1:88:91:66:84:33:79:58:63:45:18:
03:de:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org