Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/18EDE088BF6311EE99EADF92775412E6.roa
File: 18EDE088BF6311EE99EADF92775412E6.roa (raw, json)
Hash identifier: DMAyg/1TpBA37dpUkOJbmTQhKfDvssYWs4tQ4EWAWxY=
Subject key identifier: B2:83:11:10:22:57:D3:72:6E:54:91:43:A0:B9:87:81:98:C9:5C:EB
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 021D
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/18EDE088BF6311EE99EADF92775412E6.roa
Signing time: Tue 30 Jan 2024 11:31:24 +0000
ROA not before: Wed 31 Jan 2024 11:31:20 +0000
ROA not after: Fri 31 Jan 2025 11:31:20 +0000
asID: 328271
IP address blocks: 102.210.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Jan 31 11:31:20 2024 GMT
Not After : Jan 31 11:31:20 2025 GMT
Subject: CN=65b8de0c-ee14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:6a:1f:6f:ac:46:ff:2a:5b:76:c8:6d:b5:
fe:2b:dc:20:97:82:52:3e:27:2e:09:1d:2c:56:f5:
46:49:16:0c:b5:51:2e:ec:7e:99:82:55:a5:ed:fb:
54:95:05:f9:54:81:35:e9:da:57:b0:5f:75:18:f7:
e6:ea:20:71:f7:cd:e1:41:c3:c8:a3:5d:49:40:69:
d0:e3:a8:b2:5e:b0:ce:2b:85:ab:e7:ad:ed:29:85:
c7:0f:f6:2a:ce:4f:c9:37:bc:81:6e:12:12:41:0f:
08:90:50:b8:5d:48:a9:01:d7:0c:ca:83:47:e4:41:
f4:aa:5a:5b:6f:52:bb:b2:e3:88:44:da:f3:60:ec:
d9:41:2b:fc:0e:43:a0:6c:4f:da:a5:1a:a3:68:db:
ff:14:1f:84:bf:a0:57:9e:1f:80:ca:f6:e1:14:b2:
72:39:e3:c6:a3:4d:17:ef:9e:0e:4c:a4:47:68:45:
af:fe:15:41:68:56:5d:68:8a:fe:49:44:49:2d:75:
a1:de:aa:44:39:2a:6a:9c:b2:f6:fb:32:f3:1b:b5:
4e:d6:c6:df:cb:32:d5:5a:48:64:d4:5b:33:a9:cb:
8c:67:42:d8:be:43:d2:82:a7:98:a4:a5:e5:47:e4:
3a:57:56:eb:83:ec:48:5f:ef:47:cf:de:2e:73:2b:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:11:10:22:57:D3:72:6E:54:91:43:A0:B9:87:81:98:C9:5C:EB
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/18EDE088BF6311EE99EADF92775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.56.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b0:10:8a:f7:b3:c9:b1:7a:3c:db:f7:4e:d6:b3:09:b2:1f:
ef:2e:27:11:a5:1f:2c:63:b1:ce:1c:9e:54:09:eb:90:c4:2c:
b1:ea:89:cc:44:98:5f:6e:49:6a:d2:73:c5:82:55:b4:33:ca:
8f:6f:7d:c2:99:6c:a6:25:44:88:1f:e8:62:ef:b0:77:6d:1e:
70:f6:d0:9b:f7:ec:49:d6:44:c7:18:c8:9f:f1:6a:b5:0e:5e:
3d:c8:51:32:a5:a4:88:3f:69:be:b8:47:d8:1c:42:e7:1b:f5:
77:6c:c1:0e:03:97:be:cb:78:ad:53:2f:71:a5:11:72:00:53:
ac:c0:d7:5b:1f:92:94:d3:ad:0e:40:e6:16:10:b4:12:77:ed:
00:45:87:01:47:be:6d:8e:e9:bf:9a:98:b5:23:de:78:63:fd:
1c:e5:fc:42:44:e8:2d:12:d8:ef:a4:26:75:34:b5:58:e8:3c:
7f:f7:7e:74:69:f8:d9:be:39:2b:ad:b5:d1:8c:62:c7:15:54:
4a:5f:c8:be:ad:2e:bf:ec:65:11:7f:d6:ed:8c:01:09:be:e9:
23:bf:ac:d5:87:8a:e5:dc:80:30:18:53:ee:20:2a:90:a5:e8:
52:c8:f7:4b:9a:99:cb:6f:d2:86:fe:11:fb:ac:cf:83:b6:e9:
b5:2b:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org