Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/5AD2351EF62211ECA5384CCEF1222468.roa
File: 5AD2351EF62211ECA5384CCEF1222468.roa (raw, json)
Hash identifier: O2TbmJ0oluer0UrOj7dugRw2nzmfuIBjrJGzVgObtfc=
Subject key identifier: 67:06:54:E1:0B:E7:7E:91:27:FB:AA:91:83:72:AC:8D:55:ED:44:B5
Certificate issuer: /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial: 08
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/5AD2351EF62211ECA5384CCEF1222468.roa
Signing time: Mon 27 Jun 2022 14:06:35 +0000
ROA not before: Mon 27 Jun 2022 14:06:32 +0000
ROA not after: Sun 27 Jun 2032 14:06:32 +0000
asID: 328915
IP address blocks: 102.218.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Validity
Not Before: Jun 27 14:06:32 2022 GMT
Not After : Jun 27 14:06:32 2032 GMT
Subject: CN=62b9b96b-e0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:49:f7:de:37:ff:3f:f8:f5:4a:70:22:f8:
e4:2e:c1:67:ba:ef:9b:89:11:da:ea:06:f3:8a:de:
c5:14:bd:b2:47:79:1c:b7:cc:24:27:18:5d:0e:1a:
63:de:3b:cc:0e:0a:5a:67:bc:40:7a:87:f0:29:87:
98:1c:12:51:a3:1c:1b:eb:dd:e0:93:18:d3:1d:46:
2d:4b:c1:2e:c4:e5:d3:98:03:2b:c4:79:dc:24:60:
64:61:5f:e2:10:b1:37:f1:a3:3c:05:51:40:10:17:
24:14:41:9c:d0:4a:83:0d:13:f9:ae:3f:30:30:04:
a4:74:61:05:8f:55:d7:63:cf:72:f2:f4:01:16:6c:
eb:f4:83:d1:0d:36:ee:e5:2e:c2:d7:fc:62:72:17:
52:d7:17:83:2e:1f:e6:54:ad:a3:b2:60:84:55:5a:
4a:0a:39:01:15:fc:3d:90:dc:78:0d:69:df:d7:62:
a5:e0:6c:9a:60:98:2f:b1:7f:8f:60:63:ce:35:94:
f0:26:ca:c9:fb:77:9e:5b:79:81:ed:ce:b9:b1:51:
08:58:96:7e:72:92:8e:70:5e:b2:83:ec:aa:27:ef:
cb:64:c6:28:9c:cf:41:bd:f8:68:8f:7d:dd:8c:85:
64:a4:96:d3:42:87:ce:23:9e:3f:c2:94:54:d7:87:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:54:E1:0B:E7:7E:91:27:FB:AA:91:83:72:AC:8D:55:ED:44:B5
X509v3 Authority Key Identifier:
keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/5AD2351EF62211ECA5384CCEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.205.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2f:3b:20:b0:92:27:48:31:2a:e8:87:30:71:f2:2d:0a:cb:
f9:12:53:b4:19:13:c1:64:bd:10:17:f3:1e:e2:25:ec:e3:06:
b6:7b:76:ef:7b:57:a7:d1:7f:10:05:1d:2f:2e:d6:71:60:d3:
e5:db:e2:f2:8c:58:17:ae:b4:9f:dd:0c:db:f1:fc:70:a6:a7:
d0:ac:fc:f5:55:ea:f6:f6:a9:e0:57:aa:10:b0:0d:98:1d:fb:
39:43:91:fc:ea:8a:bc:04:d2:b6:3c:f0:b7:1c:bd:15:3a:6d:
32:b8:58:da:89:20:c3:be:ab:9d:11:87:ef:6b:a0:76:94:5f:
0f:dc:80:3d:55:19:29:9d:b4:b7:da:5e:12:41:ad:09:37:91:
73:5f:d3:f4:ac:a2:27:2f:e1:fa:57:4a:b4:ab:24:a3:e8:1e:
6c:df:ca:dd:a0:cf:98:03:15:f8:ea:f4:38:57:39:e4:c6:59:
73:78:8a:2d:76:f0:61:d9:5f:55:33:fd:5e:9e:10:85:50:3a:
e1:82:26:a6:59:6d:62:b2:7b:f7:c5:67:7b:d8:e2:32:9a:a5:
04:54:1c:3c:86:65:92:43:c2:85:bc:84:63:bd:a0:ea:2e:5e:
ea:89:92:a6:ee:92:16:08:b1:ac:b3:38:7c:78:f4:5c:bd:ff:
29:50:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:35 2024 by rpki-client on console-ams.rpki-client.org