Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/3F101946015F11EFB16E3011017001B1.roa
File: 3F101946015F11EFB16E3011017001B1.roa (raw, json)
Hash identifier: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=
Subject key identifier: DF:86:4D:2C:EC:D8:66:3B:27:ED:81:3C:E0:EB:A5:E0:FB:1C:33:11
Certificate issuer: /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial: 02
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/3F101946015F11EFB16E3011017001B1.roa
Signing time: Tue 23 Apr 2024 10:50:06 +0000
ROA not before: Tue 23 Apr 2024 10:50:03 +0000
ROA not after: Sun 23 Apr 2034 10:50:03 +0000
asID: 328628
IP address blocks: 102.67.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Validity
Not Before: Apr 23 10:50:03 2024 GMT
Not After : Apr 23 10:50:03 2034 GMT
Subject: CN=6627925e-0265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:43:ab:e4:d1:90:8a:25:f3:67:74:34:7e:
e4:9f:76:fd:11:88:f7:17:e5:4c:ed:3d:4d:ef:e2:
60:c6:1a:dd:72:b1:86:2a:f9:30:bb:ab:be:be:d6:
48:83:7a:d5:13:2b:ac:c1:08:18:18:7d:4b:6a:50:
e1:38:b3:56:ca:9e:04:3e:9a:fc:99:33:eb:4b:32:
89:0b:9d:27:19:55:e6:2c:17:6a:12:9d:be:63:b1:
3d:af:15:67:55:3a:5a:15:ed:ff:12:fa:d4:db:3f:
57:1a:03:53:96:29:90:95:a3:c2:bf:57:06:ba:79:
56:67:10:c9:b0:03:f9:8f:2d:5c:45:85:5d:d9:8d:
5e:5d:ab:ec:e5:47:7c:22:7a:e6:53:8a:bf:c5:8e:
30:cc:21:c4:cb:76:0c:db:af:45:7b:92:f6:c1:cc:
55:b4:38:86:39:a5:8a:63:3e:04:b2:db:36:0b:61:
f4:9a:28:d9:5b:6b:d0:77:42:d1:61:94:5e:23:91:
03:56:05:39:09:a0:ec:1a:4b:de:c5:54:7c:d9:ed:
db:07:f2:f6:38:09:d1:9a:88:7c:ab:d3:9d:7f:41:
8a:a1:ac:04:cf:6f:30:90:af:f2:ad:e5:ca:ae:0a:
36:4f:a8:24:ee:16:46:db:7b:b2:04:08:45:5c:c8:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:86:4D:2C:EC:D8:66:3B:27:ED:81:3C:E0:EB:A5:E0:FB:1C:33:11
X509v3 Authority Key Identifier:
keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/3F101946015F11EFB16E3011017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.144.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:12:ea:a9:4c:79:bb:ab:99:6d:b4:3a:22:eb:90:cd:a6:7d:
35:0a:c3:ad:68:47:5e:e7:82:5e:6c:17:3f:cf:ce:73:9c:5f:
bc:e6:b6:c6:41:91:e4:bc:fe:4a:e1:ed:de:fc:62:e6:41:fa:
70:60:07:43:7b:25:00:33:1b:23:65:3a:16:06:cf:e0:81:69:
83:29:65:4a:1d:47:f1:23:1d:d2:9e:1a:e3:bd:d9:63:d4:9d:
fb:b5:c4:c6:c8:16:36:39:a3:11:cd:1b:69:21:b1:51:9d:56:
62:b8:ac:79:b9:0f:a5:d0:90:9a:0d:ac:46:26:32:69:ed:c1:
73:d8:a0:22:53:04:8a:94:1c:a5:2f:78:f0:fc:d8:79:94:c9:
3e:16:e5:a3:3f:07:5c:9e:48:aa:14:8e:a2:e0:5e:2d:51:6a:
8b:86:ad:34:e1:36:a1:ca:d4:22:7d:bb:e5:60:11:ff:70:b3:
7f:89:b9:c0:f9:1b:0c:f8:d3:a6:7f:f9:ab:88:ee:e6:da:c5:
cd:5e:80:d4:f7:8a:35:da:78:2b:06:3a:c9:e8:a2:3a:a5:a3:
9b:80:db:68:71:06:f2:ec:c2:ae:b6:e3:ed:74:1a:3c:cb:aa:
58:53:b9:74:12:95:53:c2:f4:30:de:38:f6:ae:e6:03:8e:86:
bb:1f:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org