Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/A4A1D2764B2511EF8EF8344D762E951A.roa
File: A4A1D2764B2511EF8EF8344D762E951A.roa (raw, json)
Hash identifier: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=
Subject key identifier: 65:4C:FD:E6:67:99:6C:A9:77:1B:D5:21:87:5A:B2:3A:3D:39:46:0A
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 0494
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/A4A1D2764B2511EF8EF8344D762E951A.roa
Signing time: Fri 26 Jul 2024 08:04:12 +0000
ROA not before: Fri 26 Jul 2024 08:04:08 +0000
ROA not after: Tue 31 Jul 2029 08:04:08 +0000
asID: 328840
IP address blocks: 102.208.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Jul 26 08:04:08 2024 GMT
Not After : Jul 31 08:04:08 2029 GMT
Subject: CN=66a3587c-f4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:e7:d7:37:ca:08:cb:d3:e9:e3:05:b6:9f:
a0:e4:f5:c5:9a:d4:9d:6b:41:de:56:cb:71:a7:59:
5d:e5:81:9c:47:b7:12:d5:91:09:b6:a2:0c:c8:82:
d5:1d:74:55:14:49:d7:f0:f7:bb:71:f5:97:7b:6b:
22:d1:0e:6a:86:c6:b5:9a:7d:ca:a6:c1:49:fc:a4:
f1:c9:84:41:20:98:8e:78:ef:88:60:50:2e:03:a9:
b7:f0:c4:68:e6:58:06:8b:21:cf:69:92:e0:9c:f0:
bf:07:55:b6:8a:9a:d3:15:2f:10:ca:de:a3:39:4c:
c3:c6:35:2e:53:9a:1f:ab:2e:d0:2f:3b:69:2f:93:
d7:aa:03:ab:50:80:8b:80:52:e9:ac:f6:99:ae:a0:
75:88:f5:44:de:e3:54:61:21:62:39:32:91:53:ee:
2f:37:62:2c:2e:f6:39:1f:f2:88:0c:e7:7d:a6:6c:
96:ed:83:11:ea:30:c7:89:6f:cc:0d:8c:47:6a:13:
a1:5e:c8:25:99:8f:50:d4:5f:c5:01:d6:92:ab:50:
f3:f0:fd:6e:3b:6b:73:36:8e:ad:a2:0c:a3:e1:f1:
90:c8:e1:76:e0:9e:3c:63:10:33:a0:3b:13:5b:82:
48:a9:64:0f:57:4a:6d:23:47:c5:c5:99:b7:b7:ff:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4C:FD:E6:67:99:6C:A9:77:1B:D5:21:87:5A:B2:3A:3D:39:46:0A
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/A4A1D2764B2511EF8EF8344D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.104.0/22
Signature Algorithm: sha256WithRSAEncryption
36:de:16:cf:2b:6b:1d:4c:1e:e7:b1:aa:06:0a:be:a5:61:ef:
9d:c4:48:ee:4d:79:44:fd:32:cf:9f:13:c4:38:9d:bd:7b:ab:
32:69:f7:c3:92:e8:e5:81:4f:c1:cb:7f:09:d8:f6:83:ed:fe:
2e:70:3e:c8:f7:9b:22:a8:e5:8f:9c:20:18:51:1e:4b:80:75:
1b:6c:fd:e6:fb:8c:77:c5:e0:fb:db:a4:50:bf:02:58:b8:83:
c3:88:0a:bb:b7:44:62:17:a6:d3:6e:78:5c:20:29:39:ee:76:
1c:74:d4:b3:28:96:af:f9:00:91:69:fd:6a:ac:91:d8:cb:94:
40:77:67:12:e4:ac:18:64:56:98:72:d8:14:54:5a:e3:65:12:
c2:1a:ef:06:15:4d:1c:47:ab:0c:a1:31:e1:7d:7e:32:3d:b2:
ba:21:20:7e:aa:e9:00:31:24:c0:f8:ba:7d:f7:11:51:4a:3b:
74:7d:cb:ab:1b:9a:5e:98:89:7a:98:50:5e:89:e5:c8:f2:23:
d8:bf:f6:d7:5c:c2:5e:ed:59:3a:dd:27:bf:26:fb:03:8e:97:
d1:45:76:95:70:9b:f2:a3:b7:e9:29:a2:b9:a0:70:a8:16:fe:
f1:0e:ce:bf:5f:85:cd:dc:f0:1a:9a:d5:83:50:c5:b1:85:d5:
62:db:91:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:48:39 2024 by rpki-client on console-ams.rpki-client.org