Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/322E59C89B8511ECA6E8B6A05A40D577.roa
File: 322E59C89B8511ECA6E8B6A05A40D577.roa (raw, json)
Hash identifier: BnWYJ3FTlStYEMUn5ujbi/xmcBESttAp1iVk0y8JFFk=
Subject key identifier: 55:F8:A6:ED:2A:08:DF:46:B6:B1:9F:6E:8A:6B:CB:3E:BC:62:27:E4
Certificate issuer: /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial: 0805
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/322E59C89B8511ECA6E8B6A05A40D577.roa
Signing time: Fri 04 Mar 2022 06:34:52 +0000
ROA not before: Fri 04 Mar 2022 06:34:45 +0000
ROA not after: Thu 04 Mar 2027 06:34:45 +0000
asID: 327983
IP address blocks: 102.216.124.0/22 maxlen: 24
2c0f:f338::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Validity
Not Before: Mar 4 06:34:45 2022 GMT
Not After : Mar 4 06:34:45 2027 GMT
Subject: CN=6221b30c-e60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:86:73:2c:ae:7f:ae:74:ed:f6:99:c9:ee:
fb:37:bf:a2:47:63:ce:74:fa:8d:12:df:85:20:8b:
47:45:62:53:3d:b8:79:08:40:7f:07:4e:b1:6a:17:
7e:49:95:1c:9c:b2:3a:7d:f2:40:5c:88:d5:0f:22:
b9:bc:5d:69:e4:5a:f5:77:2f:7e:3e:31:2c:04:2d:
ef:8e:53:30:1d:82:b8:66:89:71:09:ba:40:e0:82:
2c:2f:de:84:76:fb:df:ad:75:69:2b:75:b1:3a:fa:
43:e3:1c:53:9b:8c:5d:6f:2f:a7:2f:1a:31:3a:d2:
be:8d:58:22:0f:b7:af:1f:73:03:e1:18:79:72:cb:
07:95:a7:86:f9:80:b9:e0:94:bb:53:7d:7f:45:91:
6f:f9:70:12:f7:e4:6c:95:d1:a7:f4:48:42:03:5c:
45:cc:0b:d9:9d:81:49:2e:81:12:30:72:ff:69:db:
3c:6e:14:4c:50:b9:1f:21:fd:b3:18:62:e9:ee:fe:
cf:f3:b4:b0:a7:8b:37:6d:4b:87:76:97:35:ee:ac:
67:fa:c9:b6:74:b2:d3:25:ab:88:de:d7:9c:13:ad:
dc:27:f4:f0:54:cc:91:37:96:b5:d4:cd:0b:7a:2b:
4b:43:21:de:09:e5:52:c2:a6:65:37:29:04:8a:75:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F8:A6:ED:2A:08:DF:46:B6:B1:9F:6E:8A:6B:CB:3E:BC:62:27:E4
X509v3 Authority Key Identifier:
keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/322E59C89B8511ECA6E8B6A05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.124.0/22
IPv6:
2c0f:f338::/32
Signature Algorithm: sha256WithRSAEncryption
0c:9a:fa:1c:57:2c:a9:80:d8:8c:db:89:e5:2f:cb:d6:3d:b4:
0d:32:a0:5b:53:05:91:b0:0b:98:30:96:b9:95:e4:c4:fc:94:
df:0a:16:ad:4c:4b:c3:07:85:ab:d8:f9:d6:8b:be:9b:0f:61:
ff:41:4c:60:4c:60:2b:7f:b0:11:ee:b4:37:eb:b5:53:84:df:
5d:41:bf:d1:1b:e2:3e:6a:04:46:67:88:2a:ab:b1:3a:a8:4a:
64:3b:88:80:a4:32:51:d0:7f:9c:a5:65:96:1a:de:ad:af:e5:
23:c3:51:0f:76:4a:41:34:5c:db:ee:9a:27:e5:86:89:67:23:
72:7f:22:05:ae:92:77:91:55:98:bf:cb:4c:24:c5:fc:92:3b:
48:6f:10:8d:1d:d0:76:96:69:cc:c4:a0:6a:74:f6:9f:c7:cc:
8c:21:a7:7a:5b:41:7f:74:1a:45:92:19:ae:56:a9:48:16:f5:
27:8b:5c:99:66:a8:c1:22:14:f5:38:d3:00:10:97:6e:47:15:
7c:af:a4:c3:a1:f7:4e:f4:4a:6d:68:83:3e:ed:00:4c:b9:b8:
3a:9f:b8:b9:c1:33:12:44:0d:c3:9d:9d:2b:df:52:c4:cd:10:
fb:3f:42:95:8f:2c:50:9d:7f:7b:fe:b2:7f:68:cb:1b:93:a5:
ee:99:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:07 2024 by rpki-client on console-ams.rpki-client.org