Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/D7EB6984752A11EEB254CC514AD9E6FC.roa
File: D7EB6984752A11EEB254CC514AD9E6FC.roa (raw, json)
Hash identifier: e8Yg1q8uhr1rstOhjFp5SdC4n2JFQo6GzBoRmLQV7es=
Subject key identifier: 73:97:F3:E4:BC:9D:93:22:B5:37:27:FF:AE:32:B0:F5:46:D4:DB:16
Certificate issuer: /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial: 9C
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/D7EB6984752A11EEB254CC514AD9E6FC.roa
Signing time: Sat 28 Oct 2023 00:42:17 +0000
ROA not before: Sat 28 Oct 2023 00:00:13 +0000
ROA not after: Fri 31 Dec 2049 00:00:13 +0000
asID: 328858
IP address blocks: 102.210.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Validity
Not Before: Oct 28 00:00:13 2023 GMT
Not After : Dec 31 00:00:13 2049 GMT
Subject: CN=653c58e9-5fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:d3:de:5a:f6:73:b8:cb:c3:41:e1:38:43:
97:89:1a:5b:28:2a:d3:2d:d3:cd:e7:7e:c5:6e:11:
01:bc:8f:0d:76:40:74:52:3d:de:1f:e3:a2:6a:ce:
0c:98:29:3d:96:74:40:58:ea:c9:95:ce:1c:af:d1:
51:89:02:3a:34:9f:54:55:9c:9b:59:fd:33:73:2c:
e1:9d:9e:6c:8a:d8:32:df:21:ca:19:ce:49:83:56:
8d:93:d0:23:54:83:5a:18:03:60:55:67:eb:83:51:
8b:29:25:89:85:dd:9a:37:98:b0:0f:0e:be:25:2b:
85:26:41:62:58:f7:dd:a8:ec:47:db:56:ac:98:f1:
ef:fd:52:d5:71:78:d1:ef:d6:ce:d8:6f:19:0c:74:
df:a4:8f:7d:47:f3:2c:62:e6:ab:00:43:25:a5:00:
84:0a:82:19:72:2b:7b:c0:15:71:1c:57:a4:89:fa:
29:7d:61:57:de:44:f7:fc:a5:4b:d9:05:de:0d:f9:
6a:29:65:6f:fe:08:4d:07:30:9d:f5:18:1d:78:e2:
0c:0d:cb:73:50:cb:fd:88:90:b6:cb:64:1d:25:ad:
f4:84:11:02:42:56:d8:f8:23:81:5b:15:ba:71:8d:
7f:fc:34:db:69:33:d5:36:99:60:c0:40:78:d1:28:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:F3:E4:BC:9D:93:22:B5:37:27:FF:AE:32:B0:F5:46:D4:DB:16
X509v3 Authority Key Identifier:
keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/D7EB6984752A11EEB254CC514AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:18:a8:f4:2e:a7:1e:bb:d7:eb:9d:4a:c8:e2:3c:f7:90:b1:
f9:9a:6c:05:7d:d7:36:4c:93:45:2e:06:f7:f1:80:a5:84:1e:
02:6b:ae:69:16:44:c4:a6:b8:3d:b3:25:04:04:58:61:b1:a9:
3c:cb:42:c2:51:73:41:84:52:e3:bf:ed:db:29:df:62:d9:b6:
c2:1a:eb:19:fa:83:d4:55:28:87:ea:66:70:ec:04:f8:2a:75:
90:ae:9e:e4:21:b7:16:d5:40:8f:77:29:e9:0f:70:5c:cd:e1:
dc:22:51:87:01:38:53:b7:0b:71:56:8d:1d:f2:ac:be:1d:2d:
c3:35:b7:1b:10:f8:29:a0:46:0b:ef:ed:32:77:b1:fa:84:d1:
91:a9:07:e0:22:12:73:83:cf:c7:64:a6:11:32:f6:ba:4f:96:
4c:09:aa:1b:79:a2:16:4f:05:34:ea:62:3f:aa:d9:52:a6:ec:
ad:10:e3:d5:5d:b6:3c:2f:02:b9:3b:c9:c6:c3:22:2b:f2:53:
0b:eb:fc:a2:7a:3c:4e:0e:34:8e:9d:16:ed:9b:79:d3:e5:da:
ee:9c:f0:36:55:03:e1:15:31:1b:b0:07:3b:41:9a:a9:e7:f8:
de:22:d2:c9:2d:7d:9b:0c:19:5f:07:14:51:b9:d7:14:ca:e8:
bf:15:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:36 2024 by rpki-client on console-fra.rpki-client.org