Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E631AAE263E211EFB8CD0280762E951A.roa
File: E631AAE263E211EFB8CD0280762E951A.roa (raw, json)
Hash identifier: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=
Subject key identifier: A2:0E:86:05:F6:E4:3D:94:7A:8F:40:C6:77:C5:63:41:A3:76:83:6E
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 04BA
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E631AAE263E211EFB8CD0280762E951A.roa
Signing time: Mon 26 Aug 2024 19:39:25 +0000
ROA not before: Mon 26 Aug 2024 19:39:21 +0000
ROA not after: Thu 31 Aug 2028 19:39:21 +0000
asID: 328840
IP address blocks: 102.208.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 26 19:39:21 2024 GMT
Not After : Aug 31 19:39:21 2028 GMT
Subject: CN=66ccd9ed-14cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:0e:6b:51:89:54:ed:1f:ac:3d:dc:6e:e8:
8a:76:70:5e:37:64:44:d8:9e:c6:05:3a:f2:85:18:
73:d3:82:c6:e7:1a:35:62:fb:93:7c:9a:a5:6b:17:
78:d1:4b:90:6c:79:44:3b:eb:ba:23:19:88:da:1f:
90:13:5a:99:24:b1:a0:e3:ae:1e:f2:f3:04:a6:24:
12:a3:d0:50:33:5e:f2:fd:4f:80:41:a0:3b:42:0f:
e7:c8:ff:27:66:d9:2f:09:f2:4c:61:14:34:3c:fa:
58:18:b9:be:58:3b:14:90:cb:61:4a:50:ad:08:c6:
19:00:63:05:9e:d4:f1:f5:df:4c:0a:5f:93:16:13:
88:c0:3e:6f:a8:df:b0:11:1a:c1:1e:2d:33:df:15:
3f:39:e5:bd:fd:ac:2b:49:a7:c9:c4:df:ca:a3:a4:
93:88:20:bd:05:cd:35:bf:57:df:14:3b:9c:15:cd:
d3:12:31:00:45:fe:b5:ff:18:e1:76:48:10:a6:68:
fa:34:e5:7c:b9:4a:86:8e:92:4e:aa:d3:36:12:f2:
85:78:c0:68:d1:97:9f:ea:a4:af:32:0f:42:c3:42:
dc:79:0f:ec:e6:b2:2a:f5:88:4f:cd:12:ec:29:45:
44:ae:b0:88:88:5c:6c:ff:9d:38:aa:35:42:4d:b1:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0E:86:05:F6:E4:3D:94:7A:8F:40:C6:77:C5:63:41:A3:76:83:6E
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E631AAE263E211EFB8CD0280762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.104.0/22
Signature Algorithm: sha256WithRSAEncryption
35:95:f8:e8:7e:94:99:18:13:54:69:39:43:d7:6b:6c:8f:9e:
69:46:62:b9:e8:37:8d:c8:2d:c0:d8:87:67:3f:91:a3:b2:7e:
a8:0b:2b:a6:23:e9:b9:88:9c:bf:6d:10:da:cc:eb:1d:c9:0b:
37:27:3c:65:61:b0:a4:e8:89:67:0d:20:a6:ae:08:26:cf:52:
4f:1b:6d:48:09:fa:79:5c:75:86:f5:b7:5d:3e:5d:0b:48:ac:
90:73:14:48:95:bc:4f:68:77:87:4c:bb:bd:55:f3:c3:f1:4b:
88:06:cd:b2:bb:fb:dc:ac:fa:c9:33:84:02:8c:56:c3:b6:0d:
9b:d1:aa:6c:4f:18:0b:93:d5:c5:6a:87:7b:ce:ce:9b:b8:54:
82:30:b3:60:4a:cb:6a:bf:ab:fd:8b:d3:85:a3:a2:70:48:40:
9f:93:06:a8:02:b8:19:1d:cc:e7:b2:50:7d:25:1b:16:e4:02:
74:72:e3:e0:88:b2:28:7b:c4:8d:5b:d4:3d:b6:65:ef:ba:5e:
1f:85:e0:3c:a7:4d:d6:e9:bb:ed:d4:28:ad:1f:6e:27:b0:4e:
9f:41:3b:5b:d6:70:db:f9:fb:33:c4:b6:1b:a3:42:c3:7d:df:
55:a5:3f:db:d3:2b:35:8a:7f:9c:28:b8:f9:87:36:be:ea:27:
09:1e:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:48:39 2024 by rpki-client on console-ams.rpki-client.org