Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/4A7BCEDE833411ECA330C8B25A40D577.roa
File: 4A7BCEDE833411ECA330C8B25A40D577.roa (raw, json)
Hash identifier: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=
Subject key identifier: 5A:1F:DA:C8:3B:C2:A0:51:88:77:01:68:92:2D:BA:5C:D2:E7:84:DE
Certificate issuer: /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial: 02
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/4A7BCEDE833411ECA330C8B25A40D577.roa
Signing time: Tue 01 Feb 2022 07:55:15 +0000
ROA not before: Tue 01 Feb 2022 07:55:12 +0000
ROA not after: Mon 01 Feb 2027 07:55:12 +0000
asID: 29286
IP address blocks: 102.68.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Validity
Not Before: Feb 1 07:55:12 2022 GMT
Not After : Feb 1 07:55:12 2027 GMT
Subject: CN=61f8e763-7ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:9a:a4:24:42:1d:ce:d3:99:a9:c8:da:00:
ff:ad:d1:16:06:41:7a:c9:1a:ab:5f:fb:61:eb:b1:
93:78:04:87:79:82:dc:f4:ab:ce:6a:f8:8a:6e:a0:
96:fa:15:84:3e:b3:58:ca:d1:ec:68:6d:64:be:51:
fc:90:1c:3e:5e:63:c5:06:f2:bb:00:9b:9e:d6:30:
b6:82:2b:eb:bd:a6:02:34:c7:c4:75:df:22:75:38:
2a:83:76:dd:dd:aa:5c:bb:eb:fa:64:bc:d3:8a:47:
6a:8a:9a:13:62:4d:ae:27:8b:db:bc:07:b1:9a:1a:
de:04:2f:d1:70:a4:5c:44:d2:1d:ca:f7:f0:4d:b8:
c5:85:3c:5b:76:33:e9:f1:bc:62:7f:8d:60:67:62:
ae:e4:81:25:c7:1e:6c:84:aa:9c:8f:89:70:14:83:
c7:0e:d8:68:15:e7:7d:70:d9:b6:17:67:5b:2c:4a:
52:d1:7b:10:6a:b0:bf:c0:12:01:5d:b4:61:0d:9e:
2f:66:0e:f0:6b:f2:5a:56:b6:28:a8:0f:0e:54:40:
bf:69:06:6c:fb:b2:df:35:be:75:ac:bc:6d:b2:a6:
37:6e:17:5b:3e:cd:92:49:bf:21:e6:f8:03:d0:30:
2c:7a:f0:9b:30:d3:b0:a6:c2:f0:47:a8:c0:2d:2d:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1F:DA:C8:3B:C2:A0:51:88:77:01:68:92:2D:BA:5C:D2:E7:84:DE
X509v3 Authority Key Identifier:
keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/4A7BCEDE833411ECA330C8B25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.50.0/24
Signature Algorithm: sha256WithRSAEncryption
73:30:eb:91:f6:7b:9c:1c:d1:ec:0b:0d:2d:30:35:23:1f:1f:
a0:63:cb:a8:74:02:3c:b2:56:df:47:98:6c:ee:8a:55:a2:f8:
7a:74:5b:5f:7b:d3:a7:5a:67:ed:9d:07:d1:d0:44:7c:ea:1f:
1e:28:86:ac:7d:18:6c:a0:9e:2c:3b:9a:be:c3:c1:76:b8:ac:
1a:d2:d2:18:f1:46:9d:47:92:cc:ba:88:69:0c:8d:4f:c4:25:
5b:61:70:a8:5b:13:b0:69:32:2c:c9:30:76:f8:fe:3c:10:61:
9d:94:c2:16:08:e3:4b:63:25:4d:f7:d6:6c:5c:82:13:cc:4f:
76:11:a3:45:53:7a:75:dd:3c:14:12:7f:59:69:e3:23:8e:30:
24:2c:f5:12:29:8e:d8:5b:b2:05:dc:b1:8b:34:9d:cd:bb:f8:
1a:84:0b:45:6e:35:39:bd:40:70:ce:5f:bb:e3:f9:2c:78:55:
f2:8a:12:da:eb:4b:51:17:65:2c:32:d7:f0:2c:b0:1c:b6:8f:
3e:c8:1a:1d:55:f6:4a:3f:dd:1d:8b:58:9d:13:b3:89:fc:2a:
b8:ef:cf:9c:90:ae:a2:85:9d:50:7b:17:56:86:0d:f5:21:33:
b8:d4:1a:4d:a8:46:7c:2a:22:14:76:d7:55:cd:56:2e:d5:68:
b5:4a:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:15 2024 by rpki-client on console-fra.rpki-client.org