Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/3824F918D4D911EBACDD633EF8AEA228.roa
File: 3824F918D4D911EBACDD633EF8AEA228.roa (raw, json)
Hash identifier: L3vH2zmIsjZ03q0URRZICrpO1MOA0mkvPARr/jfeppg=
Subject key identifier: E9:C0:0E:E0:A1:7A:30:3B:EB:27:D9:58:33:C6:6F:76:E6:3C:65:CC
Certificate issuer: /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial: 24
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/3824F918D4D911EBACDD633EF8AEA228.roa
Signing time: Thu 24 Jun 2021 10:44:58 +0000
ROA not before: Thu 24 Jun 2021 10:44:53 +0000
ROA not after: Wed 30 Apr 2031 10:44:53 +0000
asID: 327750
IP address blocks: 102.222.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Validity
Not Before: Jun 24 10:44:53 2021 GMT
Not After : Apr 30 10:44:53 2031 GMT
Subject: CN=60d4622a-d286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:b4:6d:b7:44:fa:41:5c:d6:ad:70:82:a5:
c0:07:d0:59:b3:c1:06:6b:0e:11:c4:3f:35:2c:6e:
94:f5:6c:ef:5c:59:7f:7c:8b:80:2a:d2:5d:11:d9:
50:e6:81:40:1e:e7:c6:6a:8c:a8:d7:36:d1:e7:05:
f3:b4:b9:56:a5:f5:16:a8:07:4f:eb:e5:7d:fb:e9:
ce:08:24:e2:97:8f:15:75:d4:47:9d:e3:3b:06:5c:
c2:89:7f:c9:25:be:38:bd:35:fa:a6:50:90:f9:a3:
f1:63:28:d9:d7:2e:5d:56:64:7f:08:29:64:a8:a7:
07:30:fb:5c:21:1b:7e:3f:d5:f2:ea:bf:41:d8:05:
96:9e:e7:f6:51:cc:b4:d1:15:9a:06:f2:d1:93:f8:
a9:9c:e3:5e:17:e6:81:ad:21:4d:41:17:7e:ad:e2:
aa:84:7c:2b:4c:58:0c:59:9a:73:65:f1:13:54:e6:
47:7c:21:14:7d:c3:57:4a:e6:de:d6:31:96:22:1b:
44:83:07:78:ba:12:8e:c1:eb:7a:6f:bb:ee:94:e0:
7d:ca:93:58:ce:cc:7e:f4:7f:85:75:f8:78:7b:28:
89:e7:e3:3f:de:b5:f4:2c:a0:17:f6:d8:2c:46:05:
78:1a:1f:92:fe:70:0d:7a:66:71:59:fd:d1:81:11:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:0E:E0:A1:7A:30:3B:EB:27:D9:58:33:C6:6F:76:E6:3C:65:CC
X509v3 Authority Key Identifier:
keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/3824F918D4D911EBACDD633EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.132.0/22
Signature Algorithm: sha256WithRSAEncryption
56:40:9b:ec:37:23:34:5c:b2:bf:61:68:c5:76:eb:0f:70:2f:
49:ad:1c:65:4f:0b:2f:c8:3a:41:80:b8:10:81:d7:11:73:88:
2a:05:61:3c:5d:fb:e2:c1:ed:b8:c1:42:67:9d:b3:77:d6:3a:
5f:b1:d9:91:b5:3f:3f:f3:98:57:9b:f3:5c:2f:ea:8b:25:4a:
75:73:19:ce:a3:0b:b7:0b:2c:38:fc:3f:49:c0:e3:79:21:d9:
ee:d3:ce:1b:cc:5f:d4:ec:c0:5f:b9:e4:76:d2:00:07:d0:23:
16:91:bf:9e:65:45:7b:82:3d:74:b7:18:f2:dd:8a:c7:6f:ad:
d0:5f:4b:16:06:e2:df:c3:35:ff:02:91:4e:b1:61:78:1e:ca:
4a:8b:8c:de:68:61:9c:50:88:d2:cc:f2:27:3d:3b:a3:91:3a:
d4:79:b4:83:e4:fa:bf:46:a6:d3:37:25:d9:4e:12:c6:dc:86:
f3:b9:35:8b:9a:46:42:c8:03:a6:0b:0b:22:1f:eb:97:cc:a3:
44:cc:01:a0:67:a6:f0:f7:34:a8:17:69:41:fa:9f:c1:64:da:
33:3c:46:c8:cb:4a:fa:53:3a:4c:ef:c1:d4:5a:25:d2:86:ef:
17:45:95:85:5d:30:40:2b:f0:70:1e:ba:88:36:e2:08:34:21:
dc:78:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:18 2024 by rpki-client on console-ams.rpki-client.org