Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/7BEB350A8D3511EF9966CE8B762E951A.roa
File: 7BEB350A8D3511EF9966CE8B762E951A.roa (raw, json)
Hash identifier: J2do9oXrbWZqCVDzO7Z/I9RW5gLWKYKJI087mgBbpHk=
Subject key identifier: A6:9D:EB:2B:84:29:A4:D5:51:55:CC:DF:FF:61:D1:C9:25:AC:48:48
Certificate issuer: /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial: 035F
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/7BEB350A8D3511EF9966CE8B762E951A.roa
Signing time: Fri 18 Oct 2024 09:43:52 +0000
ROA not before: Fri 18 Oct 2024 09:43:49 +0000
ROA not after: Sat 18 Oct 2025 09:43:49 +0000
asID: 328660
IP address blocks: 102.223.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Validity
Not Before: Oct 18 09:43:49 2024 GMT
Not After : Oct 18 09:43:49 2025 GMT
Subject: CN=67122dd8-0d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:44:d4:d3:ce:69:b2:bc:62:f4:56:be:41:
18:dd:8b:19:ca:eb:67:e3:d8:f1:20:71:f4:d5:07:
d7:5f:f8:04:20:fa:98:d8:25:fd:3e:10:1c:e4:75:
3e:b1:41:83:19:64:bb:aa:24:1e:19:ae:0c:b5:a8:
12:14:7b:b4:93:fd:04:3e:f3:25:45:a4:0f:02:a6:
43:5e:e7:f6:4d:f7:50:54:16:7c:de:00:e6:d1:a4:
2c:a8:52:9e:aa:86:fe:46:83:df:04:7a:58:a0:14:
e1:a9:d8:4b:20:50:bf:01:a6:ac:29:53:d4:f9:66:
d5:7b:b9:db:dd:25:f4:a3:aa:39:2c:b8:a0:d8:98:
ff:c1:34:5d:aa:07:a8:3e:01:dc:b2:05:0b:c7:69:
19:ff:48:28:45:74:a4:69:9f:07:09:f4:db:bb:6d:
b0:3c:9f:de:a8:be:58:ca:d6:d8:73:8e:99:b3:98:
7d:ba:bf:49:25:a0:24:ea:67:45:77:e9:e9:1e:c6:
25:ec:07:ab:86:86:28:6f:c6:45:d7:70:3c:55:b1:
3e:84:dd:a7:c7:f7:e2:4a:42:bc:19:8a:f2:b8:3a:
a0:75:cd:db:d0:71:af:99:41:d4:41:d2:d4:e1:29:
d3:a0:71:08:98:8b:0b:e4:4e:71:4b:7b:8a:0e:e6:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9D:EB:2B:84:29:A4:D5:51:55:CC:DF:FF:61:D1:C9:25:AC:48:48
X509v3 Authority Key Identifier:
keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/7BEB350A8D3511EF9966CE8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:9f:fc:ac:2b:db:9c:79:ba:6c:82:43:af:88:ff:7c:74:f4:
d2:da:fe:42:23:51:01:1e:1d:9f:c7:d2:b8:1c:c3:0c:1a:ac:
3f:a0:b4:c3:0b:05:e3:69:17:61:c4:63:07:07:70:09:b4:6f:
8a:e2:1b:78:64:b2:7f:79:b9:bf:d5:15:cd:d9:c7:a2:71:31:
6b:2e:d6:4b:d4:4b:92:88:92:f3:ad:3b:de:06:4a:6b:a0:bb:
35:11:7a:f5:7a:4b:0a:2b:00:e0:6a:a7:b4:e7:3d:c4:57:64:
29:f0:9f:ff:42:d9:9b:a2:6a:8a:03:8e:fa:21:b4:a8:b7:d2:
c8:b1:da:d5:2e:70:97:85:89:7f:b3:81:02:e6:56:35:4d:5c:
61:f8:51:4b:59:11:16:81:de:1e:dc:c3:c8:64:23:7b:8c:5b:
79:43:25:3f:24:bf:7d:55:6a:28:d5:80:ee:7d:6d:bc:a0:0b:
83:61:97:d6:59:ec:f4:71:2c:9e:c5:82:9d:a5:7c:47:74:76:
95:13:2f:f0:21:e3:60:45:95:0c:73:0d:ef:36:e4:85:a0:2e:
97:d3:fc:54:c2:c3:f4:8a:6b:0f:d5:c8:44:19:2b:eb:3a:b8:
bf:5c:2f:3c:b9:e7:9a:ed:46:3c:a3:4c:85:4d:58:ed:b2:4e:
64:5b:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org