Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/08C2A7B08D2211EFA3F3A590762E951A.roa
File: 08C2A7B08D2211EFA3F3A590762E951A.roa (raw, json)
Hash identifier: /W7x1gMw+PX9qEIYGCXIXc/ZffSooeQbZyijHs4xL7k=
Subject key identifier: 9B:94:B1:22:C3:7F:E4:50:EB:9C:41:AD:86:AA:D3:49:67:68:40:7F
Certificate issuer: /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial: 0349
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/08C2A7B08D2211EFA3F3A590762E951A.roa
Signing time: Fri 18 Oct 2024 07:24:39 +0000
ROA not before: Fri 18 Oct 2024 07:24:35 +0000
ROA not after: Sat 18 Oct 2025 07:24:35 +0000
asID: 328660
IP address blocks: 102.223.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Validity
Not Before: Oct 18 07:24:35 2024 GMT
Not After : Oct 18 07:24:35 2025 GMT
Subject: CN=67120d37-c86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:d5:6c:77:b0:61:37:2f:18:6e:28:32:56:
7b:33:bb:1d:64:81:52:79:92:6d:aa:96:7b:29:53:
82:e2:c3:2d:d8:00:5d:b5:3f:dc:70:d6:ac:f4:aa:
bc:b8:73:7c:57:f8:99:bd:87:95:c7:0e:7e:dd:08:
06:b6:8b:16:2b:42:bd:f1:4c:d8:4d:5d:3c:43:db:
a5:96:c3:dc:03:f9:7f:f8:30:59:ee:b5:7c:25:a9:
a7:d4:66:23:79:5e:db:7c:2f:fd:06:50:9d:f9:4c:
7c:05:2b:16:b3:f9:c0:e5:83:c0:8d:a9:39:da:75:
86:77:7a:ef:12:13:8f:13:a5:fa:b3:28:fa:cf:43:
dd:37:74:4a:71:2b:15:9c:14:b2:92:78:ca:05:db:
db:77:ef:fb:50:ce:e3:ab:bb:96:18:4d:3a:e6:80:
95:7a:53:94:fc:d3:93:03:b0:45:a5:de:5d:1a:d1:
8a:62:b5:0e:4c:d8:9a:11:83:94:a6:d2:2b:49:50:
7d:6a:c6:e2:e2:7d:55:72:e6:b2:f3:f8:2d:42:17:
ed:d1:1b:66:19:c6:9e:89:39:e7:57:61:75:15:f9:
c4:26:20:4a:f4:d8:c7:c0:33:fd:6c:8d:10:91:aa:
be:0d:28:31:60:e9:4d:ae:ff:5c:1a:41:f9:ed:80:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:B1:22:C3:7F:E4:50:EB:9C:41:AD:86:AA:D3:49:67:68:40:7F
X509v3 Authority Key Identifier:
keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/08C2A7B08D2211EFA3F3A590762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.229.0/24
Signature Algorithm: sha256WithRSAEncryption
18:28:95:62:2d:77:98:53:40:90:b7:0b:73:63:ab:e1:c5:fd:
ba:fa:85:3f:02:29:03:1e:cd:a7:d8:32:be:e1:71:f2:2b:fe:
ef:45:50:e3:1c:8f:c5:fa:54:e8:b3:e0:75:97:df:55:41:d3:
ff:b3:93:16:1f:ac:ca:06:d0:ad:4c:2a:fe:05:c8:b1:38:ae:
43:aa:1d:92:10:54:d7:56:1f:9c:a9:b7:d8:99:b3:2a:e8:2a:
19:7b:2b:b9:d8:4d:fa:17:24:a8:05:d5:8a:fb:73:41:ea:79:
7f:56:1f:16:c2:5e:e7:d5:64:a4:35:d3:c5:47:1d:94:b6:e7:
53:45:b3:6b:59:b5:75:62:4c:94:6a:40:02:25:d4:8b:39:17:
14:c4:ce:bd:33:4b:3c:86:84:d5:ca:a0:e0:f7:b9:cb:e4:92:
c7:c5:c0:f7:9d:6c:ae:33:02:1b:65:66:9d:bb:aa:1f:a6:e9:
c5:d3:09:07:b3:99:ce:bb:74:6f:f5:cd:21:cc:df:7b:1d:45:
64:10:1d:6f:48:49:1a:19:9f:a5:f7:c6:e8:43:b9:a3:53:a0:
90:ad:0c:01:37:fb:a8:34:28:5c:2b:3e:ce:4f:bf:83:ac:30:
5e:c4:05:82:2c:e7:e1:7d:e1:8b:eb:23:7f:9b:15:7e:05:9d:
6f:85:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org