Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/8CC62B08B87E11EBAF9A7E6AF8AEA228.roa
File: 8CC62B08B87E11EBAF9A7E6AF8AEA228.roa (raw, json)
Hash identifier: 92mRoDJb/uCNie5wFmUGwLfKgji5VHv1+cWi4LYckXc=
Subject key identifier: 99:47:2F:B9:3D:17:D4:CA:49:23:8F:CB:E4:47:D1:73:A4:D3:97:A8
Certificate issuer: /CN=F3659308AF/serialNumber=5BF8D4B0B51C5A827CE100275F09B3DAA1963E64
Certificate serial: 08
Authority key identifier: 5B:F8:D4:B0:B5:1C:5A:82:7C:E1:00:27:5F:09:B3:DA:A1:96:3E:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/8CC62B08B87E11EBAF9A7E6AF8AEA228.roa
Signing time: Wed 19 May 2021 08:45:23 +0000
ROA not before: Wed 19 May 2021 08:45:17 +0000
ROA not after: Mon 19 May 2031 08:45:17 +0000
asID: 328750
IP address blocks: 102.221.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659308AF/serialNumber=5BF8D4B0B51C5A827CE100275F09B3DAA1963E64
Validity
Not Before: May 19 08:45:17 2021 GMT
Not After : May 19 08:45:17 2031 GMT
Subject: CN=60a4d023-1014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1f:f8:ea:03:76:18:62:1f:b0:7a:27:17:62:
91:53:04:90:7f:6e:f7:7a:8c:1d:7e:c0:bb:9a:41:
34:c5:b4:f4:31:20:44:4e:3c:b3:23:66:24:1b:12:
7a:66:3d:e2:25:1b:5a:2e:e8:39:dd:a9:72:ef:73:
72:11:d3:94:c8:cf:31:65:12:08:82:1e:60:a9:b9:
48:89:b4:01:62:bf:11:3d:e3:ae:b7:5b:67:db:7d:
2e:4d:b3:3c:54:e2:22:9d:0c:33:5b:25:cd:1b:ce:
1a:c6:04:8d:a3:47:ce:ac:a8:82:3f:d2:f4:4a:c1:
9e:fb:c3:b8:b1:b1:e1:4f:8f:f8:ac:db:df:de:a4:
c1:98:ce:88:54:e2:1b:f4:9b:21:68:10:72:c5:e6:
d2:05:f7:8f:3f:9b:d4:a3:12:a1:ca:c4:0d:b2:49:
f7:d1:07:a5:03:05:ad:60:23:a3:db:84:1b:e3:64:
00:e5:7a:f5:f9:56:f9:20:e8:c2:e6:0a:8e:75:33:
e8:6c:0e:9d:cb:2c:25:57:af:de:02:e0:85:13:84:
e7:8a:c7:71:c5:0b:4f:02:8c:c0:42:6c:4f:8c:ce:
0e:46:f6:49:cc:09:c6:39:dd:aa:3c:b6:1a:17:39:
c6:eb:e7:d5:03:7e:ef:63:7f:29:b3:c0:00:1a:10:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:2F:B9:3D:17:D4:CA:49:23:8F:CB:E4:47:D1:73:A4:D3:97:A8
X509v3 Authority Key Identifier:
keyid:5B:F8:D4:B0:B5:1C:5A:82:7C:E1:00:27:5F:09:B3:DA:A1:96:3E:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/8CC62B08B87E11EBAF9A7E6AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:ab:66:a4:48:fd:0c:dc:c1:1a:1e:07:14:0a:87:da:d9:f8:
3b:1f:36:ce:52:fa:23:d7:20:a8:a7:aa:d5:b2:f7:c5:04:be:
94:07:c0:67:d0:3d:30:c4:33:d7:9a:2c:2f:e9:b3:4c:26:c0:
44:25:02:bd:a8:04:97:4c:0c:12:d3:6c:c2:65:c0:c0:cc:d3:
bd:1c:b2:93:f5:aa:b8:f5:40:bd:bd:b7:51:02:4d:63:c8:5e:
71:c2:f1:a0:f2:3e:c0:ca:f8:76:eb:ec:a9:65:e5:57:39:3b:
08:9d:53:22:5d:77:7a:ac:40:5a:b5:6e:f0:9b:bf:1a:af:e7:
b1:a7:f0:8c:07:2c:4c:5a:4d:01:41:f8:a4:b8:2e:5a:82:9c:
b4:c9:11:89:fc:97:ef:57:2b:ff:52:bc:73:59:6d:22:b4:cf:
62:46:32:78:1c:ea:f1:54:04:b0:65:3a:5f:1d:59:d6:21:8c:
a6:12:ed:75:f4:09:ee:cc:b6:5c:a1:b0:dd:be:a0:e2:b7:23:
40:b9:d7:6e:cd:52:f9:1c:56:d7:9d:0d:47:92:89:92:1e:f5:
c4:66:f6:1d:51:05:cb:e0:ac:8f:75:cc:f9:f3:b4:10:35:17:
5e:c1:67:8d:ec:5a:aa:ca:da:34:09:b4:04:35:fa:b7:14:97:
4b:ac:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:46:10 2024 by rpki-client on console-ams.rpki-client.org