Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/970F1E641FEA11EE99947F624AD9E6FC.roa
File: 970F1E641FEA11EE99947F624AD9E6FC.roa (raw, json)
Hash identifier: 0Kn857c5JBdTYzWFmA6vGDiE64UxZrMNDZC0t8mHU/g=
Subject key identifier: D6:07:96:44:0F:D3:49:D1:0B:7C:42:2B:A4:47:DC:BE:58:53:A9:F1
Certificate issuer: /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial: 032B
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/970F1E641FEA11EE99947F624AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:58:11 +0000
ROA not before: Tue 11 Jul 2023 12:58:07 +0000
ROA not after: Wed 30 Apr 2031 12:58:07 +0000
asID: 327750
IP address blocks: 102.212.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Validity
Not Before: Jul 11 12:58:07 2023 GMT
Not After : Apr 30 12:58:07 2031 GMT
Subject: CN=64ad51e3-a98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:17:fc:c5:80:57:30:78:39:1b:ed:4c:bc:
93:e4:d8:d9:e1:31:dd:39:49:49:18:23:1f:fe:66:
2f:9d:5a:65:f2:ff:d7:7d:85:c3:59:64:fc:38:8b:
97:be:b9:b5:97:26:83:fd:fa:51:b8:9f:7d:fe:f6:
9c:fa:da:54:1e:14:02:ad:b8:a6:5c:fb:4c:d4:c7:
18:52:e9:5a:8e:2f:d4:a4:32:a7:60:de:6e:84:f9:
29:aa:10:16:ca:98:1c:3c:58:53:c3:9e:b3:be:f3:
9f:d7:85:5f:a6:37:b1:48:ca:34:b5:61:cf:18:d3:
47:2b:60:30:8e:b6:1c:5c:ec:d0:52:6d:68:3a:62:
28:f9:38:23:41:0e:a3:bf:a1:6a:9c:de:75:c9:bb:
91:fc:b5:b6:42:fc:fa:32:19:f6:18:f6:70:bc:12:
c4:47:11:fd:88:46:69:6e:7c:e9:3e:e1:34:9c:a1:
f9:f1:a1:cf:34:fb:b0:0a:93:e5:d2:e9:67:41:b4:
46:20:18:b1:32:90:3d:97:f7:5f:0b:05:ca:be:3c:
ea:ff:28:c6:f5:02:41:25:2f:4d:9f:0d:ea:ab:03:
09:82:e8:48:93:c7:b8:3f:02:b9:f3:24:c7:8c:36:
d5:c0:f2:fa:55:ec:5a:c4:79:c0:79:f8:35:d1:cc:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:96:44:0F:D3:49:D1:0B:7C:42:2B:A4:47:DC:BE:58:53:A9:F1
X509v3 Authority Key Identifier:
keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/970F1E641FEA11EE99947F624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.200.0/22
Signature Algorithm: sha256WithRSAEncryption
90:0f:1d:1f:c5:5d:7a:c8:e6:1c:f2:9f:bf:1a:3e:74:32:7a:
11:f3:7f:fd:d4:bd:fc:c4:c6:f2:db:36:d1:28:d0:ef:36:63:
78:cb:44:0b:6d:b3:d9:ba:a9:ab:91:93:c2:c8:bc:04:98:72:
1d:c5:e4:07:85:14:eb:d0:e7:9a:fc:40:bc:6e:6a:0f:d0:d5:
b7:f9:c2:1b:1f:a4:ab:15:03:35:2a:f1:ba:50:96:99:5e:a3:
c0:af:10:16:4e:f5:1a:83:1e:f1:d4:5f:1d:f8:eb:e6:a0:e5:
ed:ee:d5:91:eb:10:61:1e:6d:ab:6b:20:24:f3:3c:f1:ab:6a:
4c:30:1d:0b:2e:95:0e:be:64:60:61:b9:5a:22:d7:12:53:9a:
60:96:f9:72:8e:b3:87:08:c3:70:2e:40:49:85:55:57:bf:1f:
ff:cc:1a:e6:30:84:7a:6d:7e:95:f7:20:07:26:e1:25:b9:f1:
81:7b:0a:8e:2b:95:53:6b:6d:2e:e7:4f:b9:1e:b6:b1:0b:91:
16:86:9b:5a:7e:07:8b:d7:a6:0b:f1:13:ee:5f:9c:c1:29:55:
fd:9c:ba:69:1f:00:42:14:c3:1d:fb:f4:c3:d3:39:e7:50:a3:
03:ba:52:8e:6e:57:2e:2c:66:28:3e:7c:e6:b1:bd:83:90:ce:
ee:12:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org