Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/B6F83C207D4111ED99A5A8DEF1222468.roa
File: B6F83C207D4111ED99A5A8DEF1222468.roa (raw, json)
Hash identifier: Z4JFecH0Pxw3ortmqmh93AEMH7ET0Xm0pVB1yg4vYI0=
Subject key identifier: C4:18:D7:EE:F3:D0:B6:3D:F8:F0:0C:8A:B1:A8:AE:E8:E4:C2:41:C1
Certificate issuer: /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial: 06
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/B6F83C207D4111ED99A5A8DEF1222468.roa
Signing time: Fri 16 Dec 2022 13:01:12 +0000
ROA not before: Fri 16 Dec 2022 13:01:08 +0000
ROA not after: Tue 31 Dec 2030 13:01:08 +0000
asID: 329174
IP address blocks: 102.213.241.0/24 maxlen: 24
2c0f:2d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E4C8AF
Validity
Not Before: Dec 16 13:01:08 2022 GMT
Not After : Dec 31 13:01:08 2030 GMT
Subject: CN=639c6c17-c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:22:a2:ef:64:85:c5:50:9e:3b:7e:bd:fc:
5e:6e:1a:c5:3c:8f:f4:e2:71:5b:a3:77:75:2a:49:
0c:6f:83:99:cc:32:24:a8:b5:70:cd:fc:01:55:67:
8a:26:3b:4b:39:a5:13:9a:b8:d1:0b:54:b5:61:35:
78:85:53:fa:4b:fe:85:11:c5:48:53:f8:7d:0f:bc:
78:6e:82:46:76:60:80:60:4f:f6:17:14:dc:49:3d:
9b:34:88:ac:a2:0c:55:8c:37:c8:5f:34:e7:a7:96:
84:5b:e8:87:a8:91:3e:25:be:73:4b:4d:51:a3:91:
62:9e:6e:a8:31:40:35:02:10:37:2f:1a:1e:26:4b:
08:00:1a:f1:ef:a7:d6:3f:a5:0c:fe:51:9c:c6:24:
4c:9f:13:07:7f:25:88:fa:a6:d7:97:75:ca:b9:d4:
b6:72:df:ac:45:c0:41:ea:f5:89:c6:c2:9c:3d:9a:
be:f8:c1:0e:ae:11:58:6e:c2:38:3e:b8:e3:5f:6f:
d3:98:a6:ad:9b:13:45:c3:55:2c:7f:f4:da:df:70:
c0:d7:b8:43:06:99:01:5b:55:06:b6:dd:b1:eb:80:
2e:28:62:c6:c2:fd:cf:34:ad:be:72:0b:74:c2:80:
3e:92:3f:e0:9a:25:34:41:b6:4a:6b:92:97:9b:b9:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:18:D7:EE:F3:D0:B6:3D:F8:F0:0C:8A:B1:A8:AE:E8:E4:C2:41:C1
X509v3 Authority Key Identifier:
keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/B6F83C207D4111ED99A5A8DEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.241.0/24
IPv6:
2c0f:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
19:fa:f1:40:ff:33:ae:f0:61:ea:c1:67:c6:95:18:ad:ea:c1:
3f:84:6e:4e:67:95:aa:52:63:7c:37:6e:70:f3:8a:cd:60:dd:
d3:d2:bc:13:27:1f:a0:bc:8f:2e:b4:50:20:e6:cf:f4:f0:9f:
dd:bc:cc:d1:e6:73:5a:15:00:b7:35:f9:f9:c8:db:d0:5f:94:
e9:77:27:62:e5:5f:ba:96:54:9f:30:96:f9:d6:c1:f8:a4:5c:
2f:90:d1:7b:4c:a2:47:fa:25:2b:08:94:ba:01:1a:5b:41:71:
45:3d:5d:b2:ae:2a:24:fc:e2:89:91:57:47:df:8a:51:ca:79:
62:93:bb:d1:62:b5:28:58:79:b6:7b:5b:a2:9f:ba:3e:1b:31:
a3:43:a9:90:b7:1c:86:fb:7f:4a:c1:d3:fc:a6:95:0f:09:60:
c8:09:fe:db:c4:54:d3:05:9a:20:84:91:61:50:b7:03:ea:40:
08:3a:43:23:bb:80:09:a4:cf:34:1c:e4:8b:89:98:b9:8e:43:
88:55:58:10:e3:ad:8d:53:c5:9b:1c:50:cd:cd:fa:6d:92:9a:
5a:96:b9:29:f0:d9:75:91:4d:e7:58:0b:f2:4d:82:66:9f:be:
92:ca:9b:b4:51:f1:b2:3c:e8:38:59:1a:fe:81:c0:89:b6:be:
46:bf:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:51 2025 by rpki-client