Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B2ABC5C08DA911EC804C33E45A40D577.roa
File: B2ABC5C08DA911EC804C33E45A40D577.roa (raw, json)
Hash identifier: IDD186STTmdWGeqHCysVf0QPkT7GBsIIrvPyxHmrdtc=
Subject key identifier: B6:90:02:96:72:82:43:19:DF:76:06:61:8B:D7:BB:0B:30:1C:E0:FB
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: EA
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B2ABC5C08DA911EC804C33E45A40D577.roa
Signing time: Mon 14 Feb 2022 15:20:53 +0000
ROA not before: Mon 14 Feb 2022 15:20:47 +0000
ROA not after: Sat 14 Feb 2032 15:20:47 +0000
asID: 37645
IP address blocks: 102.216.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Feb 14 15:20:47 2022 GMT
Not After : Feb 14 15:20:47 2032 GMT
Subject: CN=620a7355-5424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:05:c6:f0:51:bb:23:81:e0:b8:8a:f8:8a:
93:f5:21:aa:38:97:7b:cd:50:da:cd:4d:01:b6:28:
9f:c2:2b:c3:6e:72:89:af:3c:43:24:34:a1:5d:34:
b4:56:ef:cf:af:d3:d6:ee:30:f7:69:7b:4a:1e:44:
19:9b:a2:49:7b:2c:4e:5a:32:0d:03:82:63:51:76:
ed:08:2b:2e:68:e0:5d:86:9a:d6:ec:df:58:cb:13:
b1:c3:b6:b6:db:31:4c:e7:11:fc:0b:d3:88:aa:32:
e8:7d:75:39:97:56:a5:54:4c:4c:20:cf:1e:65:da:
86:4b:82:ea:aa:77:a3:71:f7:1e:ca:79:f1:c6:18:
d8:61:ca:88:92:81:bc:83:14:e9:a6:89:ec:42:7e:
5c:2a:3e:57:dc:8b:12:85:dd:fb:f6:b1:56:f3:0c:
e8:75:51:9d:28:41:d2:8e:2c:32:51:18:e6:40:fa:
ed:8a:ec:6d:75:a1:d0:d3:66:75:23:9b:42:5b:b2:
48:66:80:fd:e5:a0:ea:9a:3b:9c:ca:6c:7d:ac:1f:
01:24:b8:4c:dc:74:dc:22:b3:04:ea:f7:c0:4c:ee:
35:49:e3:ca:de:86:06:4f:72:37:8e:86:ca:d3:f6:
3e:a1:b7:24:02:b4:47:4d:a1:9c:10:43:26:48:bb:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:02:96:72:82:43:19:DF:76:06:61:8B:D7:BB:0B:30:1C:E0:FB
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B2ABC5C08DA911EC804C33E45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:06:1c:e4:de:ed:d1:10:a0:d4:71:ac:b1:f4:77:ca:06:32:
56:64:70:b2:9b:2e:31:85:e0:ec:e1:a4:ff:c6:0c:d9:db:df:
2d:af:b9:23:7c:2d:fd:37:d2:c2:8a:b2:80:9c:aa:bc:37:51:
67:35:bd:72:15:7c:47:46:51:76:35:79:3c:ca:6e:32:47:65:
82:db:77:dd:d8:88:c1:e1:39:54:1f:ca:a4:5c:18:1a:e1:eb:
33:48:dc:71:e4:90:80:ff:d5:09:b9:80:57:7b:e3:b1:ff:f6:
95:b4:af:f5:04:4d:f0:f9:1c:86:37:90:7b:99:f6:f2:a5:4f:
2f:16:68:ff:12:67:91:0f:da:d3:9d:11:5a:1e:c0:5b:09:40:
03:ab:7c:7c:95:33:36:29:00:30:9e:a2:86:00:a9:d8:17:e3:
fb:37:30:9f:06:9d:b4:24:12:d4:37:87:e3:20:7b:34:3c:66:
aa:f8:23:bb:7e:fd:fc:2d:c1:1b:a2:58:dd:00:85:2f:32:9d:
a7:76:8e:8c:7a:00:14:b4:20:cb:4d:49:3a:13:21:f2:8f:ef:
f1:51:8c:9f:c1:ea:3f:b9:d2:2d:08:45:44:14:02:05:f4:39:
78:4a:59:78:74:e2:09:30:23:58:bc:95:61:7a:6d:7e:8a:a7:
dc:94:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:04:16 2024 by rpki-client on console-fra.rpki-client.org