Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/01377E6A28E011ED98714A9AF1222468.roa
File: 01377E6A28E011ED98714A9AF1222468.roa (raw, json)
Hash identifier: kv9gBSWAxtZWttDDG4h7uV6DcGJ4pX4CmpP9tFCJNXc=
Subject key identifier: BF:8C:8B:91:7F:97:73:E5:89:26:5D:2E:94:6E:3F:56:08:EE:51:5A
Certificate issuer: /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial: 02
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/01377E6A28E011ED98714A9AF1222468.roa
Signing time: Wed 31 Aug 2022 03:50:08 +0000
ROA not before: Wed 31 Aug 2022 03:50:04 +0000
ROA not after: Sat 31 Aug 2024 03:50:04 +0000
asID: 328334
IP address blocks: 102.134.88.0/24 maxlen: 24
102.134.89.0/24 maxlen: 24
102.134.90.0/24 maxlen: 24
102.134.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Validity
Not Before: Aug 31 03:50:04 2022 GMT
Not After : Aug 31 03:50:04 2024 GMT
Subject: CN=630eda70-8f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:ff:72:89:d4:a7:ba:6b:38:f4:5b:97:8c:
5b:cd:b8:a7:80:ad:86:3b:a9:92:aa:84:58:9c:36:
f6:4c:d4:20:8a:e2:7e:87:0c:ad:c4:6a:60:c9:24:
a9:56:c6:ef:3c:8c:a8:72:c5:13:5e:39:8c:04:a0:
8e:d2:22:c0:b5:c8:ab:b7:77:02:fc:87:b9:8a:c3:
12:1d:b5:e9:18:16:c9:e4:59:1f:94:69:13:93:15:
86:f1:36:03:22:d8:e1:bd:b8:dd:74:de:a9:a7:0f:
0a:bc:b6:68:10:ce:86:ac:9e:7c:40:b8:80:0f:a9:
26:3f:3a:16:7b:71:9c:8b:fd:9f:da:0e:a1:d8:2d:
fe:19:79:e9:47:4c:8a:74:f2:43:e7:4b:65:9d:0d:
ae:eb:cd:12:f4:07:f4:81:06:62:f0:1f:9e:a9:bc:
30:4e:3a:8a:02:51:99:f0:3c:b4:30:10:01:6d:79:
c2:14:81:26:01:75:1e:a4:27:b1:e5:09:ca:de:75:
46:ac:ec:cc:f5:29:fa:25:45:f2:30:b6:d9:b5:e4:
95:38:12:ba:77:58:19:c6:b3:a1:f2:7f:0a:d0:e8:
21:c6:99:d6:ef:fa:8a:69:29:7b:1a:f4:a6:19:6c:
c8:60:d0:8e:86:08:d0:80:a6:d5:3d:e4:21:30:40:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:8B:91:7F:97:73:E5:89:26:5D:2E:94:6E:3F:56:08:EE:51:5A
X509v3 Authority Key Identifier:
keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/01377E6A28E011ED98714A9AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.88.0/22
Signature Algorithm: sha256WithRSAEncryption
95:03:ba:c5:dd:e4:61:01:f6:05:fd:74:77:ba:b6:bc:18:50:
49:8b:b3:4b:ce:7a:97:13:f8:78:65:98:f3:30:20:ef:c4:b8:
1a:d4:fc:c3:da:7b:35:a1:81:a6:a0:25:cc:d9:fd:00:dd:2d:
9c:14:d1:6e:11:4f:17:e0:be:d6:dd:7d:d2:6f:7b:50:43:70:
11:f9:6f:da:99:a0:a6:7b:37:d3:a1:76:af:7a:84:14:91:99:
a9:76:ed:4a:94:2d:b4:2e:90:9e:65:ab:b3:c1:1f:b3:62:2d:
92:e5:8b:20:07:bd:8b:c0:1d:fb:34:67:26:3d:2c:35:e6:e1:
28:80:a0:d2:c9:f2:dd:72:12:75:54:bc:25:fd:c5:bb:04:c2:
02:03:44:3e:9b:03:6b:fc:73:87:c9:5a:ec:05:e2:63:6a:98:
f9:9c:f7:8f:18:58:22:a1:a6:07:f4:e7:55:5f:3e:c0:b5:3d:
69:6c:1b:78:42:0a:e2:11:ad:d1:26:bb:92:a5:26:72:02:1a:
ef:47:48:9c:0e:dd:15:10:5f:ee:a2:3e:2f:e7:ee:da:e8:2c:
55:98:f8:3c:53:2f:0a:f4:b9:ec:79:01:8b:69:63:38:ee:a3:
bd:71:a7:ae:f9:58:c5:53:3c:86:14:9d:e3:c3:47:1d:bb:84:
15:d4:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:31 2024 by rpki-client on console-fra.rpki-client.org