Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/971C03BE6E9011EEBC47C1344AD9E6FC.roa
File: 971C03BE6E9011EEBC47C1344AD9E6FC.roa (raw, json)
Hash identifier: FEtfb6h/Qjj5+1EDaqJAUTaRNW+izq+4MGEPVm7WQu4=
Subject key identifier: 67:EC:EA:BA:5D:E6:8E:48:6B:04:36:E3:9D:6C:2C:E0:18:34:EE:D3
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 038E
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/971C03BE6E9011EEBC47C1344AD9E6FC.roa
Signing time: Thu 19 Oct 2023 15:02:58 +0000
ROA not before: Thu 19 Oct 2023 15:02:55 +0000
ROA not after: Wed 19 Oct 2033 15:02:55 +0000
asID: 37645
IP address blocks: 102.210.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Oct 19 15:02:55 2023 GMT
Not After : Oct 19 15:02:55 2033 GMT
Subject: CN=65314522-03cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:14:02:5e:38:11:cf:14:77:53:d0:71:f8:
f1:d5:a9:26:c5:3a:e6:c9:18:39:c8:79:9c:c7:9b:
2e:21:a6:8a:37:1b:24:0e:6c:79:a2:97:10:98:0f:
a3:bc:28:5d:e9:40:e4:45:f2:1b:9a:51:53:38:73:
ba:2d:6a:eb:fa:50:37:4b:65:f2:4b:7f:0d:e6:6b:
8a:fc:5b:0a:d0:8f:20:e5:75:71:43:fb:56:1c:8f:
9f:6e:9e:59:91:7a:ef:6e:1c:d6:fd:3f:21:5e:af:
aa:f7:4a:54:50:50:d7:b5:e1:8a:64:e9:6c:63:d1:
b0:11:c1:ca:c3:b0:8d:5a:6d:88:82:59:a3:8b:25:
f6:11:a9:1a:18:45:32:60:db:ed:10:9c:7e:7c:52:
df:84:86:e1:4b:0c:b1:2b:ce:e1:a8:6e:11:f7:4f:
2b:60:cd:9e:32:a6:6b:2f:5f:a0:ba:f2:a1:57:be:
4b:2b:79:fd:d9:59:9a:08:ab:30:d7:43:ec:56:4f:
24:15:b7:a5:b2:7e:fd:d9:c3:44:0b:5b:89:fb:f4:
ed:2a:71:81:2b:70:f4:79:ab:34:01:71:a6:8a:58:
82:c0:d3:4d:68:22:cc:2e:36:1a:26:c2:96:a3:e3:
f1:c4:b5:7d:3c:cc:2f:3b:bd:40:90:15:68:7e:4f:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EC:EA:BA:5D:E6:8E:48:6B:04:36:E3:9D:6C:2C:E0:18:34:EE:D3
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/971C03BE6E9011EEBC47C1344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.228.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:e7:f2:b8:57:64:e7:38:73:63:9b:6f:e8:31:f5:7b:45:0a:
15:a0:04:8c:20:61:25:e0:a8:70:08:04:33:36:de:8b:37:a4:
fd:a2:49:4c:10:94:37:e8:0d:4c:c5:df:8d:f6:e0:a5:1a:8f:
de:d1:34:03:e4:b6:a4:9a:37:1e:e9:5e:1b:dc:df:d5:c5:b2:
ec:f4:cb:8f:53:24:c7:29:0a:1e:97:a3:f7:ff:a9:1a:3f:76:
d0:63:bd:24:96:8f:25:05:76:fa:a3:45:e5:26:c3:73:0e:0b:
bf:84:3d:55:38:36:7a:89:1d:ad:45:fd:06:bb:d1:17:3d:6b:
f5:e8:37:50:a4:4e:ed:67:4a:a0:5b:92:0e:6a:21:a2:65:8f:
8d:7c:a3:1d:73:4f:ec:fc:46:8f:31:37:4c:18:3d:1a:f2:36:
ab:1e:0b:d9:d2:ad:92:ca:0d:df:3c:98:3b:ff:d1:fa:9a:f2:
10:98:0b:20:99:e7:a8:e0:e4:14:37:b4:8a:fa:6c:d0:cb:2b:
58:23:6e:34:58:eb:f2:64:9e:ae:54:41:cf:a3:3d:e3:0d:4a:
a0:b6:d4:e8:9f:81:8b:c4:ab:2e:c6:b3:1a:71:a4:ed:76:e2:
af:25:48:2b:8c:88:1a:ec:a2:cc:3b:ea:ac:6a:cc:64:a9:62:
6d:b5:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org