Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/C90FF62AA8CA11EBBB067F7DF8AEA228.roa
File: C90FF62AA8CA11EBBB067F7DF8AEA228.roa (raw, json)
Hash identifier: 7gE3ZmR31Vf8XT8pHiCTn2tBLPm5HPmYasDasMsyy0g=
Subject key identifier: AF:39:F4:92:44:2A:C8:88:58:B2:97:D4:51:E6:DA:35:72:4A:20:A7
Certificate issuer: /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial: 02
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/C90FF62AA8CA11EBBB067F7DF8AEA228.roa
Signing time: Thu 29 Apr 2021 09:10:48 +0000
ROA not before: Thu 29 Apr 2021 09:10:42 +0000
ROA not after: Mon 29 Apr 2030 09:10:42 +0000
asID: 328843
IP address blocks: 102.220.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Validity
Not Before: Apr 29 09:10:42 2021 GMT
Not After : Apr 29 09:10:42 2030 GMT
Subject: CN=608a7817-ac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:02:48:c2:50:b3:9a:09:16:7a:b2:77:9a:
c7:1e:75:3c:e8:14:f6:f4:33:c7:95:ea:a6:be:11:
c7:9a:ef:42:2f:86:7e:50:d1:7d:02:4d:24:02:77:
41:06:50:eb:51:09:c0:a1:f7:90:6e:62:ec:f2:4f:
77:06:49:44:80:69:f3:22:2f:3b:68:20:f7:20:58:
e7:a7:17:93:1d:43:eb:ed:c8:2d:b2:c1:23:0a:1c:
f5:b2:92:20:3c:7d:66:51:55:f9:39:76:db:4c:b3:
23:54:01:0a:07:95:ce:5a:12:05:02:6c:40:bf:30:
9e:b2:ae:0e:30:80:4d:66:79:dd:8f:6d:09:5f:ad:
41:bd:1e:9d:c2:23:b0:18:a8:e0:cb:90:35:cd:b7:
42:97:7b:52:35:32:b1:c7:f8:d7:49:02:57:0e:21:
dc:46:b4:bd:31:46:7d:f4:4c:e3:aa:28:f2:b9:6c:
d1:f2:c4:1d:6b:5c:f1:11:80:07:71:67:57:87:93:
21:0c:83:0f:83:3b:91:11:b3:71:c8:58:de:1c:d7:
e8:a1:62:da:ae:ab:40:8f:23:45:a7:1f:a5:28:58:
00:36:30:42:24:6a:a0:5d:3c:57:cb:86:9c:ad:44:
44:2c:93:b8:60:d9:75:74:26:1b:86:e6:fa:41:8e:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:39:F4:92:44:2A:C8:88:58:B2:97:D4:51:E6:DA:35:72:4A:20:A7
X509v3 Authority Key Identifier:
keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/C90FF62AA8CA11EBBB067F7DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:43:a7:50:27:89:af:46:8d:f2:b8:20:89:c4:4d:e3:ee:0c:
50:cc:f7:86:f2:55:9c:32:35:96:96:a4:c4:df:bb:4c:01:5b:
df:4a:3e:5b:d7:06:31:da:1c:2f:42:96:bb:17:0f:b4:25:85:
cf:d6:87:87:f5:7e:3a:a1:0b:76:5d:fa:5a:33:33:ef:ce:ec:
0a:9a:78:e2:bf:02:8f:1c:e0:dc:d6:21:0a:c3:39:fc:72:ad:
cc:95:21:b6:47:27:80:5c:bc:13:01:89:9c:32:29:e3:31:42:
c8:23:42:c4:9a:49:f6:6d:20:53:4e:75:c4:f8:10:8f:ac:49:
89:ec:e1:48:db:13:f9:9a:6f:04:f3:00:ed:f9:d7:56:11:ae:
fb:45:38:a5:45:99:ae:38:05:0a:9b:f8:6f:4d:14:78:9a:d6:
83:a3:a5:a2:ef:4b:24:ab:e4:ee:5b:09:71:76:a4:a1:7a:33:
f5:d6:20:3b:03:5e:18:49:80:5b:d9:ea:8e:7d:8d:8e:19:1c:
46:a6:3b:be:d9:d2:0f:24:6f:c0:5b:ee:32:4e:b0:29:51:85:
dc:71:16:56:d1:25:f8:3a:8c:ff:39:73:e2:30:00:06:ac:ab:
04:24:48:ef:fc:c9:c2:8f:ba:2a:dc:d7:66:ab:34:f6:c7:ac:
a2:98:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org