Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/FF8E457C741D11EF8D538675762E951A.roa
File: FF8E457C741D11EF8D538675762E951A.roa (raw, json)
Hash identifier: 6X3NUQA2g5a3P3oPEfsVXoEnHkdqMcSAGwMmrV+SpqU=
Subject key identifier: 2F:5A:36:C5:D3:EF:2B:F4:41:B9:4D:8D:71:8F:66:98:41:05:FB:2A
Certificate issuer: /CN=F3658A3FAF/serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
Certificate serial: 02
Authority key identifier: BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/FF8E457C741D11EF8D538675762E951A.roa
Signing time: Mon 16 Sep 2024 11:22:46 +0000
ROA not before: Mon 16 Sep 2024 11:22:43 +0000
ROA not after: Sat 16 Sep 2034 11:22:43 +0000
asID: 328963
IP address blocks: 102.212.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3658A3FAF/serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
Validity
Not Before: Sep 16 11:22:43 2024 GMT
Not After : Sep 16 11:22:43 2034 GMT
Subject: CN=66e81506-2145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:87:4c:37:12:c0:5d:3a:99:73:fb:3b:b9:
27:58:69:63:8c:ea:b7:7f:df:d3:22:81:b1:47:56:
40:a1:8a:b9:39:ce:ae:be:3c:e1:92:92:00:88:3a:
71:c6:8b:9c:a4:fc:67:4e:c6:52:c7:21:50:96:21:
80:cb:fe:14:4e:76:2e:32:a3:34:cd:19:7f:1d:a7:
d1:32:28:ce:c8:b8:ec:77:bd:ca:93:d5:72:13:6e:
2c:4f:27:a3:0e:cd:1a:19:fb:81:d6:60:51:74:f7:
42:59:1f:86:6a:49:f4:79:71:e9:6e:18:f8:c4:0b:
c3:83:5b:f1:3e:c5:53:13:86:47:6b:e5:0c:79:66:
d9:38:b0:0f:13:ea:02:12:9b:ce:fc:fa:2b:ae:c8:
2a:85:e9:f3:bf:63:97:ca:99:f5:d2:3d:58:e6:8b:
88:cf:ac:cb:86:08:4f:8d:c5:c2:2f:1d:13:58:93:
c6:35:50:4f:35:2a:d0:fc:2c:36:dd:f3:a1:c4:62:
5b:e2:65:34:c7:a7:2a:fd:cd:cf:f5:37:14:6b:f5:
ac:08:c1:1e:62:e2:08:0a:37:0a:9b:15:e2:39:43:
64:2e:14:5c:31:06:06:f5:cd:1a:ee:1b:e3:67:e0:
84:e4:91:40:23:8d:40:db:99:57:29:ef:17:6b:ff:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5A:36:C5:D3:EF:2B:F4:41:B9:4D:8D:71:8F:66:98:41:05:FB:2A
X509v3 Authority Key Identifier:
keyid:BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/FF8E457C741D11EF8D538675762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.164.0/22
Signature Algorithm: sha256WithRSAEncryption
63:48:5a:c0:aa:56:f5:d4:3f:94:1a:1f:fa:9d:37:05:5f:c6:
dd:af:e1:d4:55:e5:23:16:3c:17:9c:58:6d:e1:f4:52:2b:be:
4d:8e:7c:38:26:71:ab:7f:2d:49:17:60:63:5f:53:01:7c:c0:
c6:11:35:e5:87:b9:9c:82:75:6a:89:e5:0e:82:9b:7a:57:68:
57:b1:ee:45:b8:ee:59:91:6b:8d:b6:9a:91:ad:b7:e2:d3:14:
e8:c2:eb:cd:d0:cf:d5:32:60:44:ec:8b:0e:e7:74:ae:cc:ec:
2a:bd:07:0d:f9:90:fe:df:94:b6:4f:5f:41:87:2b:c6:1c:cf:
0b:82:1b:99:68:b0:48:0e:0c:5f:23:86:11:0a:32:41:4d:ad:
af:ee:76:28:29:99:4d:31:25:3d:be:ad:e2:e9:df:de:f1:5d:
b5:a8:78:d6:90:bf:06:6e:3f:f9:90:a2:71:c5:fc:c4:24:53:
51:d8:df:23:91:c1:c8:ca:32:72:c5:33:8a:54:91:2b:56:26:
fc:88:22:f7:d7:eb:64:c4:d1:24:9c:fa:3a:83:85:cc:57:34:
b1:1b:6a:51:07:93:98:f9:53:85:42:88:87:0b:9d:47:f6:f8:
30:d9:df:dc:e5:93:9e:cd:c2:01:af:58:3b:1f:d4:41:63:15:
95:ff:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:18 2024 by rpki-client on console-ams.rpki-client.org