Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/D183ECC8085B11EFB55C9B09017001B1.roa
File: D183ECC8085B11EFB55C9B09017001B1.roa (raw, json)
Hash identifier: 0wIzN3h+rbMY0RCClFPjyEoqaeNOqCrB7nmVrP7H1cQ=
Subject key identifier: CC:30:E9:15:77:03:23:DD:10:F5:5D:CD:3F:AB:F4:AD:1A:02:1F:56
Certificate issuer: /CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Certificate serial: 02B4
Authority key identifier: 0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/D183ECC8085B11EFB55C9B09017001B1.roa
Signing time: Thu 02 May 2024 08:13:12 +0000
ROA not before: Thu 02 May 2024 08:13:09 +0000
ROA not after: Tue 02 May 2034 08:13:09 +0000
asID: 328178
IP address blocks: 102.210.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Validity
Not Before: May 2 08:13:09 2024 GMT
Not After : May 2 08:13:09 2034 GMT
Subject: CN=66334b18-a249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:9c:fb:61:ff:f6:5c:41:0f:86:6d:d6:4b:
78:4b:de:c7:b4:df:a3:ba:7f:67:05:2d:8f:6c:f6:
c5:11:2c:f7:ee:f1:c2:e0:91:72:ad:c9:18:3c:a1:
79:e4:a7:fc:06:1a:95:1a:eb:66:96:e6:0a:33:75:
3a:1b:9b:d7:cc:ca:69:8f:d1:ab:a6:04:e4:fa:0f:
92:4a:5c:d7:72:e8:06:ec:3b:00:94:a3:0d:1c:a9:
84:66:6a:6a:e4:4b:9d:0d:e0:0b:1f:8d:6e:09:35:
06:7b:eb:76:2d:72:5e:68:ad:e3:8a:cb:f7:4a:bd:
a7:00:53:13:7a:ed:6f:a4:ab:bf:76:85:b9:ea:1c:
43:c3:e1:df:1b:95:c2:a4:d6:e2:22:84:6d:82:a3:
f5:2c:c4:45:74:23:0b:3e:bc:13:cd:0a:19:56:21:
bb:10:cf:aa:df:a2:63:a2:56:cd:6b:53:43:67:3f:
73:5c:d9:d2:b0:2d:b4:11:ba:b8:f2:2b:f0:aa:53:
fc:d5:5d:db:54:b5:da:4f:2b:5c:8f:29:dc:d7:d0:
ce:c6:9b:0c:2a:54:08:aa:f8:d2:e7:e1:e4:a5:32:
02:5c:b5:cd:4e:67:2e:af:dc:77:c9:d5:e7:04:d4:
9e:fd:6a:22:e3:d4:18:5e:1f:22:3a:d8:4f:f0:e5:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:E9:15:77:03:23:DD:10:F5:5D:CD:3F:AB:F4:AD:1A:02:1F:56
X509v3 Authority Key Identifier:
keyid:0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/D183ECC8085B11EFB55C9B09017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:b4:d6:95:c9:a9:23:5c:e3:f9:cc:3e:55:93:79:71:86:79:
03:3e:0c:9d:90:39:f3:c4:17:26:8a:5e:c7:16:c3:dd:44:02:
5e:dc:d2:ea:44:e8:42:d2:ad:99:72:f0:3f:c7:12:63:e2:f4:
91:fd:03:74:d4:4e:3c:98:44:9e:ee:a5:a5:ef:14:4f:a6:41:
5b:2d:9d:8e:8b:7d:88:0f:46:3f:bd:b7:b9:87:26:32:4f:8e:
90:7a:63:74:03:1b:7e:98:7e:71:f3:34:03:06:c6:67:35:0c:
ba:5e:42:c1:ba:7c:5a:ba:85:2b:2f:3f:6e:96:28:9d:1a:ae:
6a:81:50:cb:8b:78:f2:aa:1c:1b:5a:ca:d3:b3:f1:05:00:69:
f5:25:8b:45:b0:66:b1:84:57:7a:4b:a5:0c:d8:0b:db:ca:49:
a8:ac:c7:5f:8f:ee:7d:2c:11:9e:80:72:34:63:62:01:32:20:
4f:54:84:2e:e5:15:81:e2:6f:d2:6b:27:4f:e5:4d:97:48:ec:
7c:4c:0d:b9:af:f2:df:ab:e8:94:91:83:f1:b3:d8:57:68:a6:
45:cb:9d:da:68:d5:cf:f1:2b:84:68:74:5b:cf:66:37:6c:5a:
44:ba:a9:da:90:c9:c5:8e:4f:a9:3d:66:2f:35:6b:d0:2d:3f:
03:ad:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:33 2024 by rpki-client on console-fra.rpki-client.org