Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/06B9D42AF61611ECAF0145A7F1222468.roa
File: 06B9D42AF61611ECAF0145A7F1222468.roa (raw, json)
Hash identifier: ZkZi5c3qAfrGNQ9aUVW0NJoTh+2Y56khQsoX1Uod1CU=
Subject key identifier: 40:13:54:F0:9A:71:A9:F6:5A:95:AB:2B:F6:89:5D:5E:9F:8C:74:3F
Certificate issuer: /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial: 01BA
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/06B9D42AF61611ECAF0145A7F1222468.roa
Signing time: Mon 27 Jun 2022 12:38:20 +0000
ROA not before: Mon 27 Jun 2022 12:38:17 +0000
ROA not after: Sun 27 Jun 2032 12:38:17 +0000
asID: 328843
IP address blocks: 102.220.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 00:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Validity
Not Before: Jun 27 12:38:17 2022 GMT
Not After : Jun 27 12:38:17 2032 GMT
Subject: CN=62b9a4bc-bf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:ad:b2:dc:e3:ee:0e:89:bc:13:f2:e3:28:
3b:b1:5c:a9:cd:3d:d7:de:ca:b0:50:ca:f0:50:7c:
9a:34:39:6b:d8:fb:d5:32:cd:91:57:58:38:38:ea:
05:e0:71:44:e7:a1:85:bf:e5:bb:c1:28:93:ba:5b:
95:7f:a2:3d:00:5c:1f:e5:c7:57:41:d8:13:a0:6e:
b0:e1:59:cb:8a:0b:86:36:1a:36:5a:9f:2b:1d:e1:
20:f2:b1:02:ed:cb:89:00:41:39:71:a7:fe:36:17:
4e:39:6e:58:b7:47:cd:fc:1e:c5:12:56:c2:75:ed:
29:6f:a7:7a:96:3b:93:3c:09:9f:82:e8:bf:49:db:
03:d8:6d:ab:1e:55:95:f7:c4:53:aa:b5:c7:cd:ca:
79:aa:3c:0b:08:94:26:39:77:8d:83:29:66:dd:25:
70:3e:c0:b9:b5:91:90:46:21:7e:cc:08:3c:f2:06:
42:bc:aa:ec:2b:b1:29:6b:8b:e2:d6:22:d0:3d:e8:
bd:cf:9d:c2:ad:7a:cc:39:9c:d2:c0:ff:0a:35:3a:
67:dd:82:25:23:8f:82:90:67:11:48:d4:6d:ff:23:
6f:93:e0:4c:12:e2:4e:38:59:12:f1:9d:9b:da:a1:
99:ee:38:f8:93:f6:7f:11:cc:fb:e8:19:db:c6:67:
38:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:13:54:F0:9A:71:A9:F6:5A:95:AB:2B:F6:89:5D:5E:9F:8C:74:3F
X509v3 Authority Key Identifier:
keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/06B9D42AF61611ECAF0145A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.49.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e6:f1:56:65:e2:fb:18:03:bb:de:a9:19:8c:18:6a:84:6d:
b2:d4:1a:db:1c:04:88:f2:a3:21:87:c4:18:02:25:01:b6:90:
30:a1:ad:de:89:c5:a4:49:48:07:5b:a7:77:f6:2c:01:c5:16:
76:d9:eb:67:14:07:1e:ec:63:2f:d0:4f:bf:d8:0d:bd:e1:2d:
9f:4e:c4:23:43:b9:b6:80:cf:5b:99:aa:0c:07:01:ce:0a:67:
76:28:fe:4b:2a:19:0e:3b:ed:38:4d:b2:da:ab:94:da:6e:e3:
8d:5b:7e:05:8d:6b:42:db:70:16:77:16:4f:da:27:b6:71:ea:
53:0b:b1:20:79:dc:95:93:63:12:4c:e5:e6:30:24:bf:8b:ee:
43:f1:33:e2:3f:ed:21:81:32:f3:c8:9a:41:f4:59:3a:39:fa:
cd:39:4f:3f:97:46:da:25:9e:4b:04:96:bb:5e:a3:bc:ef:5b:
5b:79:25:88:e7:3a:af:96:79:87:4b:7c:a7:27:97:2c:af:9c:
51:72:66:a8:ee:fe:cc:15:bb:ff:78:1c:7c:74:bd:c3:67:93:
2a:85:95:d2:81:cc:b4:d3:a6:0b:fb:f1:3e:79:28:1e:1b:e3:
0b:6c:91:92:82:02:f9:e5:51:a7:0e:a4:34:2f:93:85:15:9f:
ee:d7:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 02:55:24 2024 by rpki-client on console-fra.rpki-client.org