Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/7F80E364058F11EFB71B1335017001B1.roa
File: 7F80E364058F11EFB71B1335017001B1.roa (raw, json)
Hash identifier: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=
Subject key identifier: A2:1A:46:43:75:0F:ED:0A:6C:19:2D:EA:45:D1:CB:EF:F2:A0:2B:C0
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 15
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/7F80E364058F11EFB71B1335017001B1.roa
Signing time: Sun 28 Apr 2024 18:45:35 +0000
ROA not before: Sun 28 Apr 2024 18:45:32 +0000
ROA not after: Sun 31 Dec 2028 18:45:32 +0000
asID: 328586
IP address blocks: 102.22.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 27 Jun 2024 00:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: Apr 28 18:45:32 2024 GMT
Not After : Dec 31 18:45:32 2028 GMT
Subject: CN=662e994f-214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:3d:9f:f5:2c:d5:ac:45:ee:5b:e4:7a:cf:
4b:78:56:77:c3:8e:c9:cf:ca:17:97:0b:5d:62:14:
86:37:4f:97:85:77:7f:43:c6:8f:6a:ab:88:53:37:
9d:11:20:2c:df:81:30:e8:68:53:ad:fb:3f:03:74:
65:f3:07:f8:6d:f8:86:50:61:f3:4a:4a:2b:f1:a6:
1f:cd:22:ac:43:fe:2b:f6:f1:12:50:fa:82:7d:ad:
53:5e:b8:78:3a:dc:ab:83:5b:b8:7d:78:21:8e:98:
af:b6:65:1a:6a:77:12:b4:d9:f4:fe:cf:99:b1:79:
a7:ff:76:c4:cf:e4:60:f7:ea:d6:d8:f3:de:3f:79:
4c:c5:f6:a5:0d:2f:e0:e0:0a:d6:4e:12:8d:46:f3:
94:4a:36:ea:ff:52:a1:a2:68:3d:39:9a:c5:85:77:
f8:81:75:51:1b:34:06:57:b8:5f:65:2d:5f:04:b8:
38:09:34:07:bc:c8:ea:34:c9:ab:f4:e3:57:7b:53:
3f:60:b1:79:85:a3:df:04:df:a6:39:0f:49:bc:3c:
7f:cd:d7:76:2d:28:a5:8d:cb:f5:cd:b5:0e:f0:f7:
a0:59:8b:a9:b6:fa:0c:61:d4:1f:98:eb:31:ba:93:
22:9c:16:e7:1f:5e:b1:8e:de:7a:71:0d:77:f1:61:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:46:43:75:0F:ED:0A:6C:19:2D:EA:45:D1:CB:EF:F2:A0:2B:C0
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/7F80E364058F11EFB71B1335017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.233.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e2:eb:54:df:c0:d3:9f:3a:fd:57:e2:aa:b9:b6:9f:5c:a4:
c5:34:e2:77:ac:cf:48:e4:ec:3a:da:68:13:62:57:23:3e:3f:
e8:09:42:1d:f8:84:dc:43:c8:f8:56:2f:cb:6b:19:cd:4a:96:
d8:3f:99:71:ac:14:b8:e6:70:fe:fd:23:4e:c4:63:79:99:6a:
0a:8e:9e:02:cb:89:72:7b:67:10:dc:be:7d:13:95:38:f2:17:
36:df:cb:2e:a9:91:9c:04:db:9a:ea:8e:2a:3b:29:ac:2f:48:
b0:06:31:45:a4:cf:17:32:6d:52:4c:40:0c:46:06:9b:32:09:
68:1e:01:39:14:69:f3:5c:5b:6c:c7:15:00:53:02:1a:df:8f:
9f:20:a3:33:17:de:de:39:fc:86:1c:91:af:a6:7c:bb:39:3f:
5a:aa:aa:ce:bb:dd:91:26:df:d5:b7:c3:b8:22:3e:86:0c:57:
8d:7c:a3:2a:55:3e:1e:bb:b1:1f:c0:5e:df:9a:2d:7b:08:07:
b2:0a:6d:f3:e2:2a:89:b1:b7:41:14:19:16:36:6b:3e:c1:79:
b0:14:eb:32:e1:18:07:c9:60:5e:cd:7b:25:74:69:97:cb:8b:
17:5d:2c:5b:9b:1d:e2:64:3e:b2:de:05:81:00:26:8b:76:35:
5b:2c:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:04:18 2024 by rpki-client on console-fra.rpki-client.org