Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/98BB02A409D411EE86E7404E4AD9E6FC.roa
File: 98BB02A409D411EE86E7404E4AD9E6FC.roa (raw, json)
Hash identifier: wD24NAe2PvKqRZVgJaLXW1dYsoCcT+RS8+/9lfKzOLs=
Subject key identifier: 65:A7:D8:4A:F7:4E:80:A1:2B:95:9E:CB:A9:AE:93:A7:AA:CE:F3:59
Certificate issuer: /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial: F4
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/98BB02A409D411EE86E7404E4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 10:25:19 +0000
ROA not before: Tue 13 Jun 2023 10:25:15 +0000
ROA not after: Mon 13 Jun 2033 10:25:15 +0000
asID: 329053
IP address blocks: 102.216.28.0/22 maxlen: 23
2c0f:5080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 27 Jun 2024 00:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Validity
Not Before: Jun 13 10:25:15 2023 GMT
Not After : Jun 13 10:25:15 2033 GMT
Subject: CN=6488440f-6bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:10:de:11:58:16:85:55:46:d7:32:c2:5c:
48:3c:4f:5a:c8:9b:18:4d:ad:a6:fe:9f:81:72:a6:
9b:f8:d4:63:c5:fb:3b:78:b3:6b:8d:7e:d9:4a:75:
06:a6:45:e7:d4:7c:5f:1d:25:14:55:9e:f4:90:34:
22:03:7f:42:61:ad:75:15:9d:f4:1d:f3:2c:af:1c:
8a:b0:b8:d0:79:ee:1e:d2:47:dd:3e:58:fb:86:b4:
d3:c9:ee:ec:35:25:47:f3:e5:70:09:f2:9c:55:12:
2a:e7:b4:25:ec:7a:df:93:35:07:87:d0:74:9b:e7:
58:f6:bd:e8:09:be:8e:95:8d:3d:ec:30:ce:b5:f1:
4a:9b:b7:c1:3c:8a:17:77:c7:11:d5:6b:4a:6a:57:
e4:14:4e:ed:c2:ab:1f:40:67:10:ae:23:40:fb:33:
ed:82:10:bb:1a:27:94:24:24:2b:b0:ac:db:ae:16:
38:77:fd:da:5f:96:6d:fd:7c:e5:b1:d8:70:e0:ce:
a5:5c:1e:4e:25:6b:f7:4b:52:1b:7d:19:27:25:2d:
d5:ce:24:56:84:e8:da:a6:ff:52:02:a4:e4:12:a1:
1b:07:34:46:fb:72:42:93:e7:6c:76:1a:0f:bf:b8:
48:43:ad:a5:fd:07:cd:6e:fb:11:a3:53:c2:c0:ba:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:D8:4A:F7:4E:80:A1:2B:95:9E:CB:A9:AE:93:A7:AA:CE:F3:59
X509v3 Authority Key Identifier:
keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/98BB02A409D411EE86E7404E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.28.0/22
IPv6:
2c0f:5080::/32
Signature Algorithm: sha256WithRSAEncryption
75:b8:28:f3:ac:65:71:36:99:74:ee:fb:22:83:00:db:7f:23:
11:9b:8a:41:97:b9:01:ea:87:6a:5f:65:e3:8e:db:aa:d8:97:
8a:60:e9:04:cb:ac:d6:a3:81:92:ac:b0:e1:2b:64:f2:2e:82:
74:4c:0b:b6:6b:cc:74:5b:96:54:93:9c:95:57:b2:5d:70:c4:
3e:8b:bd:61:70:98:92:16:6b:67:41:00:c5:36:8f:66:ae:44:
8c:3c:e0:17:38:f5:e8:4f:5a:47:95:ee:9a:af:22:b7:51:e4:
12:53:60:18:c5:a2:66:b6:c0:5a:47:6b:e9:70:24:5d:a9:09:
96:41:78:90:9e:5b:fc:0d:fb:94:ef:58:a2:6f:8c:50:c7:04:
0d:9b:b8:87:bc:ca:56:44:0a:1f:1d:6d:7e:54:a1:0c:62:74:
3e:4c:f9:96:21:b9:04:42:eb:cc:87:65:ea:68:ec:b4:da:21:
82:6f:92:10:e8:6f:44:52:b7:c7:26:50:bb:ee:67:b5:a5:44:
1a:d2:cc:d2:05:fc:65:5b:48:21:78:1c:c1:5c:45:fe:fa:d8:
b8:ce:fb:12:72:f8:7b:75:bf:1b:95:18:eb:bc:c9:46:d7:7b:
94:8f:e6:7c:b4:07:87:31:97:83:7d:fb:84:fe:74:55:db:7e:
d1:42:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 02:52:15 2024 by rpki-client on console-fra.rpki-client.org