Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/4540A8D0EFEA11EDA6943F894AD9E6FC.roa
File: 4540A8D0EFEA11EDA6943F894AD9E6FC.roa (raw, json)
Hash identifier: YdysxgceL5KQtLTnwMeNCOiB4lPOcf1FskePKjG3oJk=
Subject key identifier: 2C:AF:F4:E1:93:65:6E:04:64:D3:CF:E4:0C:CE:EF:46:A0:4C:A8:C1
Certificate issuer: /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial: 0102
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/4540A8D0EFEA11EDA6943F894AD9E6FC.roa
Signing time: Thu 11 May 2023 10:54:58 +0000
ROA not before: Thu 11 May 2023 10:54:54 +0000
ROA not after: Tue 31 May 2033 10:54:54 +0000
asID: 329097
IP address blocks: 102.215.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Validity
Not Before: May 11 10:54:54 2023 GMT
Not After : May 31 10:54:54 2033 GMT
Subject: CN=645cc982-4fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:81:8c:bc:ec:7d:a2:1f:6b:9d:e5:8a:59:
24:e4:fb:6f:0c:98:7b:04:36:68:49:32:a9:a5:70:
b1:e4:2f:ad:1f:02:1c:f7:10:1a:e8:ae:2c:cb:db:
b5:32:80:6f:1b:00:af:ea:07:38:37:f6:ce:36:ff:
96:5d:43:05:68:22:46:fd:a8:db:8f:8c:5d:b5:10:
04:57:7b:5d:34:c5:10:b7:db:e9:46:f8:6d:9e:77:
c3:b6:f8:f3:28:eb:cb:bd:3e:f0:22:73:55:4a:00:
08:c6:66:5a:b9:5d:2b:42:9e:c7:9e:2e:f2:29:61:
02:0b:cd:7b:cf:1d:cb:6b:22:12:f3:52:b0:70:48:
2e:4b:d5:00:5e:2c:a3:71:2e:0d:89:22:55:6c:aa:
dd:a5:fa:03:7f:c8:1e:9c:10:e4:2c:d3:fd:2f:b5:
44:a7:f7:21:0b:b9:d7:1e:95:0f:ef:25:ce:16:23:
79:e8:54:c8:69:44:59:d6:7d:18:51:89:cb:41:eb:
e7:c3:ec:25:64:52:94:3a:0a:a3:38:c8:45:d0:6e:
47:fb:f3:72:35:eb:83:0b:54:23:b3:af:7e:1e:d8:
a1:32:1b:65:50:bc:dc:c0:ab:84:88:57:fc:61:26:
ef:3f:27:76:46:5d:b1:90:9b:c8:a3:f1:87:b7:e2:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:F4:E1:93:65:6E:04:64:D3:CF:E4:0C:CE:EF:46:A0:4C:A8:C1
X509v3 Authority Key Identifier:
keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/4540A8D0EFEA11EDA6943F894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.37.0/24
Signature Algorithm: sha256WithRSAEncryption
64:76:15:b3:03:2d:da:f1:1e:4b:a8:64:00:ec:c5:40:ca:fe:
51:40:45:e2:3b:b7:d5:c7:9f:ea:a3:8c:e7:6c:d6:af:f3:c2:
71:ae:2e:6d:b8:f9:27:8d:ca:34:7d:dc:42:a6:f7:e7:63:73:
42:14:2c:81:27:0c:c7:aa:1d:ad:8c:aa:94:43:3c:74:83:b5:
83:3f:92:48:7d:89:18:b0:54:83:13:ce:ca:c1:77:83:35:f8:
1a:af:6b:94:9f:41:c5:e3:dd:47:b1:c2:a5:5e:1d:c9:60:e2:
b2:44:9f:c7:ad:06:8a:90:5d:8a:31:3b:dd:19:33:e8:2e:d1:
95:57:20:ef:94:c4:87:ca:87:58:af:bf:d8:b1:cb:d1:6e:8a:
d8:63:b8:3a:64:3f:9c:22:11:aa:8f:29:3a:3a:6c:89:ee:8c:
8e:e0:8c:7a:a5:68:10:c7:9e:83:4e:d9:08:64:d3:53:39:54:
ea:3d:ed:80:44:80:7e:9b:c8:d0:29:2c:45:e5:ce:89:bc:9a:
b3:7c:30:d5:6e:7a:f0:af:f5:e4:04:3f:a3:67:7e:2d:6d:8a:
60:a8:d5:50:69:e4:a7:9d:3d:fd:5c:df:72:f6:1a:b8:a6:b7:
a2:55:b0:14:15:29:ef:c6:e2:7b:e4:a9:98:71:ff:e3:91:5a:
24:d2:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:43 2024 by rpki-client on console-ams.rpki-client.org