Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/257E7698B37211EEB0C977C6775412E6.roa
File: 257E7698B37211EEB0C977C6775412E6.roa (raw, json)
Hash identifier: HUEECPLEWEM+MkAN8yggvarjqD/P6tImn9NujT0igaw=
Subject key identifier: E8:42:78:07:5C:A7:B3:94:48:D5:18:13:83:0A:26:64:DB:A2:5D:36
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 02
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/257E7698B37211EEB0C977C6775412E6.roa
Signing time: Mon 15 Jan 2024 06:48:53 +0000
ROA not before: Mon 15 Jan 2024 06:48:50 +0000
ROA not after: Fri 28 Feb 2025 06:48:50 +0000
asID: 329360
IP address blocks: 102.210.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 27 Jun 2024 00:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Jan 15 06:48:50 2024 GMT
Not After : Feb 28 06:48:50 2025 GMT
Subject: CN=65a4d555-b00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:e1:b3:9a:f8:8e:08:ed:79:c9:f7:1f:ac:
ef:eb:fc:37:db:ae:e2:9b:ed:72:41:44:77:a6:73:
1b:80:e0:58:d7:1f:2b:93:1a:fc:26:5e:dd:f9:2e:
b8:0f:0b:09:97:92:a9:31:21:79:20:74:62:88:c9:
04:e8:72:1d:43:f4:6d:3a:67:56:85:0f:09:4b:c4:
16:ad:10:01:4b:cc:7f:3a:31:5e:97:0f:fd:67:55:
9f:88:3e:eb:f2:28:87:b2:a5:03:be:91:a1:f0:28:
ae:97:8c:13:cd:b1:45:bb:0c:7d:54:4f:f8:8e:10:
92:f1:14:ad:91:cb:13:3e:c7:67:64:3d:f7:c5:0d:
38:8a:5a:10:4b:d0:56:65:12:59:44:38:e5:e5:f5:
65:56:6f:b2:0c:e2:e8:01:d2:a3:66:86:a2:16:64:
62:e0:41:a5:1e:25:b8:fc:83:a6:10:88:9f:2a:43:
83:6a:19:67:a2:25:7d:dd:28:43:6d:1d:8a:e5:5f:
aa:94:6d:ae:6f:26:a9:30:2d:fe:68:0d:16:e2:f7:
64:b2:a2:85:27:56:24:36:ae:b5:b2:12:25:f9:ad:
52:41:f2:b4:2a:8f:d9:d1:19:dc:2b:00:ef:87:78:
00:89:d1:bd:9b:5d:58:ee:f2:85:01:16:b5:b8:c7:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:78:07:5C:A7:B3:94:48:D5:18:13:83:0A:26:64:DB:A2:5D:36
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/257E7698B37211EEB0C977C6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:60:7a:0f:4c:28:87:b7:42:90:02:b6:48:65:82:ac:8c:cc:
41:a8:95:0e:23:89:8c:be:89:09:1c:f4:82:24:08:f9:37:00:
d0:5e:e0:b2:53:2f:30:8b:73:de:cc:a5:11:aa:39:13:0a:7d:
9b:d8:65:9d:69:98:01:0d:1a:aa:d7:36:90:6e:e3:01:98:3d:
cf:db:e4:29:1c:33:31:34:46:27:ea:99:c4:51:be:4d:d1:2a:
28:db:01:c0:f8:4f:41:28:e2:03:c6:07:94:4d:a8:52:52:7c:
a1:02:bb:99:c3:4d:0b:a0:c7:1f:1d:e1:97:76:27:b7:09:22:
5b:27:92:71:19:39:2d:bf:1f:08:13:30:54:94:17:96:d3:07:
38:94:95:a9:be:6b:e4:76:ef:30:6b:a1:19:62:44:2d:4d:77:
56:7f:ae:e5:88:bf:0f:e9:26:47:91:a8:b2:b7:4a:4d:ad:fd:
71:4e:8b:88:50:4f:4b:43:42:5b:d9:da:62:51:9b:1c:42:11:
62:bf:0c:7a:30:e8:e3:12:e7:49:cb:60:21:54:44:46:25:63:
4d:28:a6:69:b2:cb:41:ff:92:32:b6:f6:2d:f2:48:26:13:61:
ca:6b:41:ee:b5:4e:e1:89:90:96:03:04:a5:e4:07:38:8a:f3:
2f:08:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:04:04 2024 by rpki-client on console-fra.rpki-client.org