Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/89BEE5CE14B411EDB752D0F4F1222468.roa
File: 89BEE5CE14B411EDB752D0F4F1222468.roa (raw, json)
Hash identifier: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=
Subject key identifier: 71:44:30:B2:17:DA:4B:6C:17:CE:38:9A:8F:1C:AF:DA:EB:F2:E7:16
Certificate issuer: /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial: 02
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/89BEE5CE14B411EDB752D0F4F1222468.roa
Signing time: Fri 05 Aug 2022 11:48:36 +0000
ROA not before: Fri 05 Aug 2022 11:48:31 +0000
ROA not after: Fri 31 Dec 2032 11:48:31 +0000
asID: 328888
IP address blocks: 102.219.8.0/22 maxlen: 24
2c0f:1500::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Validity
Not Before: Aug 5 11:48:31 2022 GMT
Not After : Dec 31 11:48:31 2032 GMT
Subject: CN=62ed0393-a9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:ce:a1:c1:5f:b0:aa:96:b7:a5:37:f0:02:
1a:ee:a2:73:f2:c9:53:d1:58:51:54:fe:42:0a:52:
ca:ba:94:e1:0a:6e:a1:b7:aa:10:4b:29:1a:e3:e5:
2f:99:1a:77:0e:3f:97:a0:4b:ee:92:fb:1b:f0:00:
4b:07:9c:9e:b5:b4:a9:3d:a5:16:d4:56:41:8f:ed:
91:5e:7b:fd:a5:89:12:fd:1f:bf:f5:0d:3d:fa:97:
da:56:f9:0b:f2:3a:76:c3:e1:5a:4c:ec:20:47:e0:
8f:68:ed:ed:bb:51:14:89:41:cb:71:4a:ca:09:b2:
fb:b3:47:42:07:f5:59:fb:39:42:13:36:90:2f:db:
c1:b0:b2:4f:94:08:59:69:74:59:dc:7b:47:08:99:
01:f5:80:b3:85:a7:70:4f:a6:d9:e1:37:af:ab:fb:
43:01:0f:74:18:2a:41:f1:d1:ae:6b:b8:e3:d4:d4:
76:01:48:c2:a9:8b:32:e8:fa:f3:0e:27:a4:a9:db:
4f:d8:e4:e8:b1:18:99:5f:fb:9e:fe:e2:e2:5b:89:
04:e4:7d:36:ec:5b:8a:f0:9d:17:1e:5c:e8:05:25:
66:56:64:1c:e2:de:79:34:50:a8:af:55:c7:d3:60:
95:63:4e:c0:c4:db:73:41:5e:21:56:dc:da:fe:03:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:30:B2:17:DA:4B:6C:17:CE:38:9A:8F:1C:AF:DA:EB:F2:E7:16
X509v3 Authority Key Identifier:
keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/89BEE5CE14B411EDB752D0F4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.8.0/22
IPv6:
2c0f:1500::/32
Signature Algorithm: sha256WithRSAEncryption
e3:54:a9:d8:6d:ee:70:1b:c1:7d:e7:e3:4d:c0:6f:6c:6b:e8:
79:ed:54:38:50:28:ce:83:c7:ad:c4:be:a9:5f:fa:80:99:87:
7e:27:7c:0d:89:94:02:f8:39:d6:6c:26:7d:dd:55:8b:05:9c:
ac:91:45:99:6e:f2:21:5c:04:ef:f9:b2:77:7d:23:6e:b1:47:
29:2f:01:44:45:00:69:47:3c:f0:33:a5:0b:6c:8f:08:6c:a1:
72:8c:72:39:5c:d9:c6:f0:f9:86:62:2d:ff:05:ce:31:01:c3:
a5:cf:db:e4:12:7c:b0:4e:ad:d3:9a:88:dc:c8:2b:46:91:e5:
c9:31:61:1f:7b:25:2c:bf:96:4b:1d:1b:7f:59:23:a6:d2:1d:
d0:1b:cf:53:ba:97:f3:37:fa:ca:1d:5d:e6:6d:84:a9:6b:9a:
ab:bd:26:78:59:b7:39:26:dc:35:81:89:b3:a5:bb:b1:00:d8:
ca:13:bc:45:cd:e1:9b:3b:02:b8:16:0d:3e:e8:c1:dc:ba:73:
c2:87:48:70:06:d2:bc:5a:ac:4a:74:39:f5:84:d0:b9:d2:6e:
4f:74:6a:2e:d4:4e:93:09:16:4c:07:45:69:35:ac:0c:85:ec:
3e:76:e6:62:97:ad:cc:88:13:f4:62:08:de:cb:df:26:03:5d:
a8:32:f3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org