Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/A6CF9D8AAA1C11EEB9ABF954775412E6.roa
File: A6CF9D8AAA1C11EEB9ABF954775412E6.roa (raw, json)
Hash identifier: 84w5dXq+cic3Xi8F7+1KmbYwvKGSm/iIJ1eYJxxPsPc=
Subject key identifier: E3:E2:20:01:50:33:D2:34:D0:8E:E4:3E:25:A5:79:29:3A:A0:27:97
Certificate issuer: /CN=F364E67CAF/serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Certificate serial: 0737
Authority key identifier: 37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/A6CF9D8AAA1C11EEB9ABF954775412E6.roa
Signing time: Wed 03 Jan 2024 09:44:13 +0000
ROA not before: Wed 03 Jan 2024 09:44:10 +0000
ROA not after: Sun 05 Feb 2034 09:44:10 +0000
asID: 37002
IP address blocks: 102.213.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAF/serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Validity
Not Before: Jan 3 09:44:10 2024 GMT
Not After : Feb 5 09:44:10 2034 GMT
Subject: CN=65952c6d-ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:3b:c9:10:46:c4:b8:9d:a8:a6:71:d1:a1:
76:18:66:58:07:16:fa:79:02:27:e8:e9:3c:a4:4d:
c4:c0:9b:a0:d8:6a:0b:59:ba:92:5d:cb:c4:5d:3f:
f8:25:24:b2:b2:0b:cb:01:f8:44:cd:28:5e:09:b4:
ea:6a:0c:18:c0:5d:5b:e2:28:90:20:70:07:7b:1a:
31:93:e9:d8:47:7e:7b:f8:63:fb:ef:0b:5b:b5:df:
59:67:4d:db:4d:1e:cf:9b:f3:bf:a7:3d:62:73:af:
64:f7:b3:78:c3:8a:61:b2:3b:d9:40:e8:f5:66:5c:
b7:7d:e0:3f:21:2b:ef:3d:08:77:f8:96:5e:85:be:
64:c2:9b:86:e7:0d:63:2f:52:e7:56:3a:aa:d3:65:
83:29:24:15:fd:25:29:4f:87:ef:1e:64:eb:e2:49:
2e:99:be:4e:3d:e6:f6:2b:01:23:c3:8a:2a:10:ec:
6f:05:7c:1a:75:6c:41:0f:b9:69:b9:7c:7f:cd:91:
fb:f5:6d:6f:22:f8:75:19:9b:36:7f:0e:05:56:c0:
82:19:bc:47:94:97:9d:56:9a:68:9f:ea:25:b5:62:
b8:34:0b:ee:8e:b4:ae:80:d9:03:3e:3b:12:b8:e7:
ae:68:53:3e:19:44:6d:9c:17:52:3f:1e:01:be:b8:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:20:01:50:33:D2:34:D0:8E:E4:3E:25:A5:79:29:3A:A0:27:97
X509v3 Authority Key Identifier:
keyid:37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/A6CF9D8AAA1C11EEB9ABF954775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.8.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:d8:07:3b:de:21:8f:7d:07:cb:6d:36:66:b9:1a:cd:e0:b4:
30:9c:a8:28:dd:2f:bc:20:46:57:b3:e3:d4:a0:a7:8b:da:28:
06:5e:f5:25:bb:6b:49:55:26:56:c6:8b:ed:99:48:8e:02:50:
4f:8e:92:b5:b8:ea:7e:ff:51:95:56:9d:01:2d:6a:e3:a8:4d:
92:8e:cd:0a:7c:d0:e1:7d:26:0d:fe:8e:88:f8:4c:57:c8:11:
0b:bb:69:a6:f2:e4:e1:5c:7e:dd:09:b3:45:37:3c:f4:15:d0:
73:16:21:8e:76:12:4e:98:e9:d6:5d:50:98:f8:4f:27:f6:e5:
aa:86:24:e5:94:63:63:9b:f9:38:92:a3:34:6d:ac:43:b0:d2:
a0:d6:06:93:e3:df:5c:3b:26:27:b4:45:a6:00:d5:d2:4d:e2:
10:20:4b:8b:50:d1:0c:c0:2c:57:04:63:66:0e:49:b6:43:71:
08:9a:c7:49:d8:fa:cc:a9:97:ab:02:ea:61:a3:00:8f:4d:55:
8e:03:08:a9:3e:aa:11:91:4b:6e:d7:6e:fa:31:ed:05:7a:e6:
86:b1:03:fc:1a:a1:27:eb:c7:57:bd:86:52:86:c6:01:44:ac:
c2:cc:9c:29:2f:77:5d:d6:ef:ef:46:bd:e4:80:aa:c6:9e:a4:
d5:63:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org