Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/95E0184C7A1E11EF920F13A5762E951A.roa
File: 95E0184C7A1E11EF920F13A5762E951A.roa (raw, json)
Hash identifier: m499IEA1quzAXsjF2SbgfAGweM93BFktmig3zgZpWEc=
Subject key identifier: F9:A3:7D:11:BC:7D:4E:E4:15:E1:26:6B:88:6C:6E:E1:C5:D2:B7:08
Certificate issuer: /CN=F366A61AAF/serialNumber=31813322C9B9A2BAFD7C7AF5CE0F4FF874D9CDA1
Certificate serial: 62
Authority key identifier: 31:81:33:22:C9:B9:A2:BA:FD:7C:7A:F5:CE:0F:4F:F8:74:D9:CD:A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/95E0184C7A1E11EF920F13A5762E951A.roa
Signing time: Tue 24 Sep 2024 02:42:07 +0000
ROA not before: Tue 24 Sep 2024 02:42:00 +0000
ROA not after: Sun 24 Sep 2034 02:42:00 +0000
asID: 328943
IP address blocks: 102.207.212.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.crl
rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366A61AAF/serialNumber=31813322C9B9A2BAFD7C7AF5CE0F4FF874D9CDA1
Validity
Not Before: Sep 24 02:42:00 2024 GMT
Not After : Sep 24 02:42:00 2034 GMT
Subject: CN=66f226fe-9d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:85:fd:dd:9e:6d:77:1f:a6:50:7f:bb:4f:
7d:03:01:5c:af:20:7d:2d:0d:29:ca:eb:de:bf:a6:
e5:96:ed:98:be:2f:61:33:26:c8:0a:80:81:15:84:
fb:11:cd:72:3d:d8:78:66:b3:50:ea:d3:16:c7:fe:
06:87:b8:ac:50:38:45:eb:5a:a8:88:93:7e:9e:20:
d6:da:aa:fd:a6:e0:44:b0:ec:7e:f9:8f:a3:92:13:
ca:05:8c:0a:0a:af:27:ca:3b:53:c0:32:5a:3e:bc:
d1:4b:bd:8e:79:1c:13:72:ff:4e:08:55:77:aa:57:
07:1e:19:52:8c:76:5c:b5:3e:26:af:f8:23:92:77:
73:3c:ab:ce:c2:89:55:c0:e6:3b:87:f7:ec:be:4d:
4c:4a:d5:14:f5:88:84:9f:92:fb:9f:66:2d:5a:68:
da:a1:ba:45:6a:f3:d6:34:c1:06:be:4c:6c:b6:79:
c7:4f:2c:4a:39:08:e2:ad:8a:91:6c:e1:c1:8e:70:
3a:6a:ba:79:0b:0f:e3:55:1d:ce:01:68:cd:3a:cf:
bb:8a:52:49:9b:0e:c4:93:ae:9e:29:c6:2c:c6:6a:
34:d4:5e:74:5a:20:9a:bd:0b:0d:8a:63:c7:c9:e8:
f0:99:6d:bc:ad:58:95:02:43:6d:ae:fa:80:43:4a:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:7D:11:BC:7D:4E:E4:15:E1:26:6B:88:6C:6E:E1:C5:D2:B7:08
X509v3 Authority Key Identifier:
keyid:31:81:33:22:C9:B9:A2:BA:FD:7C:7A:F5:CE:0F:4F:F8:74:D9:CD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/95E0184C7A1E11EF920F13A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:3e:f3:63:80:03:07:06:6a:cf:5a:54:03:3c:f3:15:25:a7:
90:78:74:68:9c:1f:39:fb:87:ad:6b:59:12:92:96:f7:74:cb:
3f:04:30:e0:85:d0:40:bf:ea:17:e4:59:6e:3e:9d:e1:22:9a:
89:fb:56:e0:13:d1:78:32:61:79:68:3c:15:8e:92:d2:cf:47:
76:14:2d:b5:7f:96:d3:3c:8e:bd:bf:7a:c5:c7:45:e0:68:a1:
a5:a7:51:d3:eb:a6:be:91:54:7c:5d:0b:48:0c:8c:8f:d8:98:
f6:13:84:a3:37:f8:c7:1c:4e:f0:4f:28:e0:1a:11:26:24:85:
2d:07:32:35:4b:48:8b:a8:e2:13:91:ac:69:78:6d:af:bf:fb:
4e:c3:bb:b0:3d:67:6e:49:0e:78:ba:1f:85:b1:e0:05:69:6b:
5a:0b:fa:e4:55:cf:db:ec:ea:30:a0:69:4f:15:cc:1d:d5:b0:
d9:a2:eb:fa:f4:6c:a9:e9:f6:97:71:68:88:66:d3:af:f1:a0:
de:9a:73:ad:01:29:fb:79:6d:33:44:49:7e:69:71:07:81:a1:
bb:5f:ab:90:32:af:06:52:3a:4d:48:bb:ed:03:b7:be:e3:6e:
24:7e:bc:23:bf:df:7b:92:7a:92:c8:e2:0e:92:57:8b:ee:5d:
b8:06:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:19 2024 by rpki-client on console-ams.rpki-client.org