Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/21659E62F61611EC8A629FA7F1222468.roa
File: 21659E62F61611EC8A629FA7F1222468.roa (raw, json)
Hash identifier: K3H0Xpb9HfTwe5/8TDcO+IS8XACso1/jjmZZmVkGtBc=
Subject key identifier: B7:EE:68:99:1D:36:C3:14:02:43:3F:D8:D1:C3:3C:E0:BB:FC:AB:A7
Certificate issuer: /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial: 01BC
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/21659E62F61611EC8A629FA7F1222468.roa
Signing time: Mon 27 Jun 2022 12:39:05 +0000
ROA not before: Mon 27 Jun 2022 12:38:55 +0000
ROA not after: Sun 27 Jun 2032 12:38:55 +0000
asID: 328843
IP address blocks: 102.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Validity
Not Before: Jun 27 12:38:55 2022 GMT
Not After : Jun 27 12:38:55 2032 GMT
Subject: CN=62b9a4e9-075a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:74:1b:af:a4:01:54:42:d6:ff:4a:86:df:
2b:70:89:63:95:f3:de:3e:47:c5:56:13:59:77:8c:
e6:41:fc:e7:72:b8:d7:74:eb:e6:7d:89:04:28:8b:
6a:39:84:c4:d9:97:3b:12:e6:dd:cf:06:ac:47:19:
6c:42:b7:18:c7:62:77:74:0f:dc:b8:13:85:40:57:
14:83:e4:64:32:55:d7:5c:15:9d:46:15:ae:85:3a:
73:ab:c5:3b:e7:f3:38:cb:2b:6d:e0:4b:31:bd:88:
a7:b4:53:25:0c:d3:e5:ee:5e:28:be:94:c5:b5:7e:
f5:95:55:db:14:ec:47:7d:1c:75:f1:35:ca:94:41:
55:69:40:f9:04:f5:3d:10:4c:b4:3f:c8:a5:39:56:
eb:a1:04:84:70:a5:f1:97:46:c0:f9:aa:2e:80:59:
1f:cd:9f:4c:0b:84:ca:04:24:b5:bf:cf:5b:96:0c:
d8:63:bf:97:18:5d:d8:c8:71:9e:e0:b8:97:e6:05:
10:4d:72:8c:c7:8f:0f:78:90:4d:40:66:cf:97:b5:
72:7e:e6:06:47:cd:04:05:7c:58:16:6e:b8:08:db:
95:ab:ac:e6:8a:04:1f:34:01:20:9c:86:87:c1:81:
8d:ec:5c:b5:97:8c:bc:40:8d:16:0c:3f:ad:99:d8:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:68:99:1D:36:C3:14:02:43:3F:D8:D1:C3:3C:E0:BB:FC:AB:A7
X509v3 Authority Key Identifier:
keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/21659E62F61611EC8A629FA7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:06:55:ea:ad:a8:f1:dd:d3:53:2f:af:c5:ff:c1:1a:cb:ea:
07:39:ed:3e:06:4a:01:50:ef:33:f0:b4:40:13:f3:e0:c1:e2:
70:09:8a:63:37:88:68:bb:24:00:fd:81:c5:5c:89:55:1e:e3:
fa:81:f8:6f:74:ea:45:9c:5f:8d:5e:08:e3:b9:1e:c6:49:07:
f1:4d:d7:9f:de:5a:06:59:6b:0f:a8:11:d7:83:65:71:45:7a:
8b:ff:90:20:2b:eb:74:28:ec:aa:56:e2:eb:0f:c9:9c:98:79:
02:a2:55:9e:77:ec:8c:3f:a3:71:6f:73:27:bf:54:8d:d4:74:
cf:55:ef:72:92:07:eb:c8:ae:9c:71:54:8e:01:59:06:ef:60:
90:c0:8d:6c:24:c1:cc:a9:59:e6:8c:f2:dd:dc:e3:cc:67:19:
10:31:25:8c:ed:a6:cf:86:ee:fd:37:2f:a2:72:57:19:04:6f:
5d:78:ed:43:f3:b9:23:63:67:81:f5:a1:6a:f0:cf:15:f7:e9:
80:10:20:ed:59:52:b7:03:9a:05:12:d4:ca:93:10:71:50:6c:
45:c8:73:b0:aa:84:a8:3d:11:a3:4d:18:63:da:b5:aa:10:ed:
7a:e1:fe:86:20:cf:c4:78:c2:60:b6:cf:dd:39:7e:c3:4e:95:
41:34:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org