Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/14D14DF4BC1211EE9F256B8C775412E6.roa
File: 14D14DF4BC1211EE9F256B8C775412E6.roa (raw, json)
Hash identifier: G0rVIWv0ZhhjYOQXOO/y9xbORs3FLthAc8WqD626SHI=
Subject key identifier: 42:BA:87:6A:92:A4:F5:95:C1:81:E9:42:41:A6:D8:0B:C4:70:91:54
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 0213
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/14D14DF4BC1211EE9F256B8C775412E6.roa
Signing time: Fri 26 Jan 2024 06:13:54 +0000
ROA not before: Sat 27 Jan 2024 06:13:51 +0000
ROA not after: Fri 31 Jan 2025 06:13:51 +0000
asID: 328271
IP address blocks: 102.22.208.0/21 maxlen: 21
102.22.209.0/24 maxlen: 24
102.22.210.0/24 maxlen: 24
102.22.211.0/24 maxlen: 24
102.22.212.0/24 maxlen: 24
102.22.213.0/24 maxlen: 24
102.22.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Jan 27 06:13:51 2024 GMT
Not After : Jan 31 06:13:51 2025 GMT
Subject: CN=65b34da2-cac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:94:33:dd:de:e0:6e:a1:fb:70:9c:6d:8b:
a7:b7:af:96:52:89:54:3f:d6:49:a2:67:39:c8:48:
20:ab:2e:c8:e9:3c:e9:77:f0:9f:f8:12:e2:6c:c6:
dd:49:d4:0d:67:3e:2f:c4:23:08:48:b1:74:ed:9c:
3a:34:e2:05:f9:14:34:b4:cb:5d:eb:33:c9:48:f6:
19:e6:c6:57:b5:d4:1b:30:7d:a9:31:bb:f5:19:a8:
e1:dc:69:43:bc:6f:af:2d:e6:45:7f:a2:12:33:05:
f6:39:48:c6:60:0f:86:31:39:49:ec:ce:ee:69:73:
3d:be:92:fe:7d:53:f9:b6:34:5b:b3:dc:b8:a5:33:
01:00:84:33:e3:fc:5c:b6:2f:84:6c:f4:d3:b8:19:
4b:cd:8e:dc:2f:53:1d:7d:c0:e1:3c:f4:04:7a:d3:
fc:40:85:32:dd:8d:78:66:c8:7b:7e:b0:17:38:e2:
aa:b5:c8:c2:f8:ac:04:c6:10:31:31:6e:91:1b:0b:
8d:7b:cd:9b:e2:36:6c:cd:43:d6:59:28:5a:ca:64:
45:ad:5c:8f:60:7a:de:fc:24:a9:62:95:fe:f5:bf:
1a:67:51:9f:79:ca:51:6c:a2:34:90:7c:c4:03:85:
31:e4:cd:20:8a:dd:cf:fe:0e:43:7c:8b:bd:4e:c2:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BA:87:6A:92:A4:F5:95:C1:81:E9:42:41:A6:D8:0B:C4:70:91:54
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/14D14DF4BC1211EE9F256B8C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.208.0/21
Signature Algorithm: sha256WithRSAEncryption
97:a9:73:fa:fe:6d:ea:ad:35:6a:e2:cc:e8:74:2d:46:11:ec:
38:23:21:51:73:3d:d2:c6:4b:6f:82:37:ec:1e:1f:18:24:4f:
df:16:35:e0:da:b3:c1:80:a1:9d:ab:e7:08:7d:4d:93:0a:30:
de:7f:d2:a4:31:3a:80:30:1b:41:82:de:bb:4f:f3:ef:3e:08:
2a:7a:6b:7f:a4:d0:e0:1d:d8:2d:44:cd:36:d5:f8:44:0a:41:
28:82:d2:7d:8c:55:12:f4:33:1f:30:47:46:90:cf:56:e9:19:
ea:7d:86:2d:5b:08:9f:92:9e:af:05:2d:86:5d:4c:c1:71:43:
47:78:55:2b:aa:8e:11:b5:c8:d5:33:5a:2e:cc:af:95:fb:76:
8c:e3:fd:6a:5b:1b:25:48:4d:54:75:f8:b8:40:5c:2a:07:9c:
01:4e:b1:af:dd:88:d3:fb:a4:d6:99:48:91:40:d5:63:42:d2:
95:e7:51:e0:13:2b:54:b2:e1:aa:de:a6:1a:84:84:7f:2a:09:
2e:98:cd:67:68:b3:9e:a0:35:0c:d4:d2:8a:31:eb:d8:2d:54:
5e:a4:fc:c3:d2:3c:f0:35:25:d2:44:fd:51:eb:28:9d:b8:3d:
2e:a1:0d:b1:1a:e4:61:ad:b2:ff:b5:92:71:cd:2b:f4:d0:7d:
b6:fa:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org