Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B539B9C439CE11EDA2E2E4CCF1222468.roa
File: B539B9C439CE11EDA2E2E4CCF1222468.roa (raw, json)
Hash identifier: L8tv2tXp84t94j7so0pE6pjeZqF4W79+avnFF/AtOjc=
Subject key identifier: 74:32:4C:AA:66:34:42:5F:10:BC:E2:DA:79:E0:29:B7:07:ED:7C:AA
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 01D8
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B539B9C439CE11EDA2E2E4CCF1222468.roa
Signing time: Wed 21 Sep 2022 16:59:08 +0000
ROA not before: Wed 21 Sep 2022 16:59:02 +0000
ROA not after: Tue 14 Sep 2032 16:59:02 +0000
asID: 37645
IP address blocks: 102.216.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Sep 21 16:59:02 2022 GMT
Not After : Sep 14 16:59:02 2032 GMT
Subject: CN=632b42dc-a309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:7e:9c:85:f0:14:9e:c2:d6:09:b8:bc:b7:
bf:f8:f3:b4:c2:0a:37:88:de:1c:7b:f0:2c:3d:72:
36:4d:f1:cb:cf:ff:c1:01:f3:bf:2e:f2:30:5f:1f:
8e:e6:0c:c9:8a:a0:a8:ad:f0:58:29:f2:e2:c3:c6:
25:c6:64:a2:4f:c3:b2:17:d5:ce:9e:01:7c:f1:0d:
a6:7b:6a:41:47:7f:48:d6:93:d3:7e:f4:27:ad:a8:
f3:1f:2a:cf:18:41:e9:f9:8b:c2:e2:5f:51:97:3e:
72:bd:86:af:37:de:d2:a0:d9:c8:ff:bd:0f:f5:87:
ce:a0:62:8d:99:f6:e5:fa:77:fb:67:1b:c7:20:ac:
fd:a5:ed:a0:40:5d:00:1b:ee:a7:f3:8a:bd:da:5b:
d2:93:6b:d9:86:9f:72:33:d8:62:ad:cd:89:ab:4d:
6c:fe:cd:25:3e:34:3c:19:1b:96:c0:d8:bb:15:76:
0a:5b:0c:19:cb:8e:41:43:70:35:65:9f:53:1e:c3:
0f:12:28:c5:95:cb:f5:31:5b:81:2a:12:ac:77:50:
e0:da:04:34:ef:a5:e5:d7:3f:3b:eb:a4:96:7f:5e:
e2:73:ac:e0:6c:cc:7b:55:52:82:c1:ff:a6:e7:27:
ac:03:95:96:1d:81:21:f7:94:df:f5:af:1a:7e:3c:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:4C:AA:66:34:42:5F:10:BC:E2:DA:79:E0:29:B7:07:ED:7C:AA
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B539B9C439CE11EDA2E2E4CCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:2f:40:0b:3c:f6:5a:ec:f3:0a:0a:a3:f9:3d:a1:62:94:67:
a0:91:63:0f:19:74:ad:00:2a:fa:ee:21:1c:7f:ff:b5:e1:e6:
c5:8c:a9:90:b1:ae:6d:7e:88:b5:75:e5:7a:3d:be:b9:74:37:
7a:39:90:45:4a:96:49:c6:38:d1:75:c2:95:87:ac:54:47:b2:
71:76:ea:cc:7e:73:29:ea:c8:3e:5d:8c:04:ec:58:5d:58:4c:
f1:88:8a:5b:47:25:a4:16:50:3a:8d:df:6b:22:04:e7:f9:14:
54:b2:95:a3:9a:87:71:f3:44:c1:1f:7f:f5:20:41:41:95:73:
18:28:51:3e:ec:27:d6:f0:cb:ca:68:b7:e0:a5:be:12:1c:52:
5b:64:96:f0:c2:8c:38:1e:4d:d9:9c:ad:df:15:1b:e2:28:01:
ea:a5:7b:f5:35:f8:43:e3:90:3f:9d:a7:3a:ac:f0:4b:6b:34:
d7:3a:a6:0b:9b:6a:cb:95:25:0f:cc:04:b0:8b:15:ed:8d:bf:
d0:eb:f7:b7:4b:7d:d6:11:8f:c7:e7:f1:75:a3:6c:1b:3b:04:
19:c3:06:48:f0:01:d6:87:d6:d4:2b:95:0d:77:ab:e3:71:14:
e2:2d:6d:dc:61:e9:56:d0:ac:48:0d:69:81:dc:a0:49:ff:db:
3d:b3:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:04:16 2024 by rpki-client on console-fra.rpki-client.org