Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/85DF150A4A0111EDBC8B019BF1222468.roa
File: 85DF150A4A0111EDBC8B019BF1222468.roa (raw, json)
Hash identifier: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=
Subject key identifier: 53:08:9E:AB:F2:93:DC:76:35:38:CE:E0:C9:25:06:62:F1:CA:9E:38
Certificate issuer: /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial: 49
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/85DF150A4A0111EDBC8B019BF1222468.roa
Signing time: Wed 12 Oct 2022 07:43:12 +0000
ROA not before: Wed 12 Oct 2022 07:43:08 +0000
ROA not after: Fri 31 Dec 2032 07:43:08 +0000
asID: 328888
IP address blocks: 102.214.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Validity
Not Before: Oct 12 07:43:08 2022 GMT
Not After : Dec 31 07:43:08 2032 GMT
Subject: CN=63467010-a434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:db:84:a0:8a:ff:05:71:fd:97:1e:e3:32:
a3:1b:78:2b:b2:79:43:3d:8a:5a:0a:5a:a3:37:2f:
ef:ed:5b:0f:6c:fe:ba:f0:7d:12:74:b5:52:7b:2e:
d9:5b:38:36:51:38:9e:87:30:e5:a5:ca:3a:c8:ff:
20:7d:b1:56:d7:07:dd:bb:13:c1:2a:3a:fd:e5:2d:
05:25:7e:57:32:e5:f6:7a:df:eb:81:b7:07:34:af:
89:84:77:d0:9d:c3:ce:05:f4:34:8b:b7:10:1e:1d:
55:90:58:8e:1b:4e:24:9f:68:a7:bb:01:25:c7:58:
07:b4:40:9f:71:7c:b0:c5:f1:89:58:62:30:99:cd:
93:49:03:dc:7f:2c:c9:ef:b6:19:36:be:31:a6:1b:
cf:85:f7:60:0b:91:9f:7a:b0:c4:d8:6a:79:6e:a5:
cc:98:2f:f3:8c:e2:e8:b4:d2:f7:0a:e3:22:9a:97:
82:be:2f:5e:11:1d:fd:8f:44:ca:63:d1:16:b7:36:
9b:c7:77:aa:01:74:39:89:e6:88:b5:36:4f:f4:89:
58:16:37:a7:81:dd:2b:3a:ab:0a:95:ef:f9:1c:fc:
b8:21:2b:54:88:c1:64:be:32:8f:8c:33:30:ae:ce:
f9:58:3a:90:df:3c:93:71:70:0d:23:cf:70:51:b8:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:9E:AB:F2:93:DC:76:35:38:CE:E0:C9:25:06:62:F1:CA:9E:38
X509v3 Authority Key Identifier:
keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/85DF150A4A0111EDBC8B019BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.20.0/22
Signature Algorithm: sha256WithRSAEncryption
24:18:e8:05:93:e8:71:a4:2a:dd:7b:bd:2d:9d:3f:67:d2:16:
5f:ee:9e:a1:93:aa:93:25:d2:4b:e1:6a:de:7c:32:91:cc:de:
cd:a7:c2:37:a2:ea:70:f3:69:c7:1d:45:39:a2:d3:36:4c:d3:
ca:a3:9f:b9:30:17:09:82:d8:26:9d:5f:e9:46:67:8a:58:3b:
85:26:20:59:7a:79:9c:66:96:08:fe:bc:c6:64:12:14:38:78:
4f:95:7f:af:17:6d:b6:14:6c:a8:7c:0d:5d:4c:8b:d6:f4:50:
9b:59:29:ca:43:8d:28:e0:a3:80:3c:dc:a8:e2:77:31:b0:b9:
b8:72:22:da:53:1b:58:66:11:89:1d:91:13:b7:cc:db:30:e4:
2d:85:c5:c5:13:c2:49:e3:d6:59:04:35:76:c6:dd:03:15:f8:
1a:4b:ba:56:71:0c:18:12:45:1a:23:e8:83:a9:21:c4:bb:bc:
32:3c:ee:7e:88:4f:c5:06:81:f2:f4:2e:fc:3d:88:38:c3:7f:
f4:ad:71:42:8e:b2:c7:83:9b:90:eb:ab:5f:93:4d:92:7a:78:
ef:d1:25:3e:37:e0:c6:cd:b9:e7:53:bb:86:67:4d:ae:74:82:
37:ee:20:c7:00:19:41:ba:69:c3:f0:33:c9:69:4e:02:b3:5d:
57:b9:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org