Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/C0F8837027AE11EEB3D5C11B4AD9E6FC.roa
File: C0F8837027AE11EEB3D5C11B4AD9E6FC.roa (raw, json)
Hash identifier: U9lrbioleJrfDazSStxWONg+gePpOFN84WZgOOuwefs=
Subject key identifier: B3:4C:D3:14:A6:B8:92:1F:0C:AC:2C:01:AC:28:EB:E9:7A:34:F4:7E
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 032D
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/C0F8837027AE11EEB3D5C11B4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 10:10:01 +0000
ROA not before: Fri 21 Jul 2023 10:09:56 +0000
ROA not after: Thu 21 Jul 2033 10:09:56 +0000
asID: 37645
IP address blocks: 102.211.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Jul 21 10:09:56 2023 GMT
Not After : Jul 21 10:09:56 2033 GMT
Subject: CN=64ba5979-2d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:17:ba:52:8f:3c:00:d5:d5:88:5c:7a:de:26:
3d:70:32:e0:e0:85:53:c3:e3:70:6a:5c:13:c1:62:
d9:13:19:b3:10:3b:c1:12:5e:a7:55:32:76:d2:f6:
78:b1:8f:85:a6:16:56:44:ce:08:eb:f2:5e:a7:31:
c0:d4:7c:ac:ed:dc:45:51:4c:35:2d:b1:65:ca:28:
35:83:a6:0e:2d:43:bc:d2:9b:89:8c:89:a9:e1:38:
62:8c:ef:b0:6e:cc:5b:9b:94:8c:27:27:9a:46:0e:
5c:49:66:c0:d4:88:95:48:01:45:72:8b:51:0d:62:
51:63:62:d1:4a:e5:21:4f:59:c5:d3:21:36:76:02:
fa:3a:db:37:82:06:9c:5a:b2:7b:90:08:69:5d:a1:
06:9a:91:6a:02:d3:80:89:0e:0b:4e:49:55:a5:71:
38:49:26:c6:b9:82:ab:a6:32:87:a0:d6:15:aa:37:
c4:d2:48:f1:8e:25:d0:85:92:5d:2a:b3:db:0c:17:
db:d0:da:34:fb:e7:ed:51:31:0b:30:d1:e1:45:24:
bc:14:76:e9:d8:53:bc:e4:38:c3:a6:0a:57:91:27:
33:da:4b:b7:b4:f9:a8:1e:4f:d6:f6:34:77:e2:be:
ee:5e:3f:e1:9c:9a:7c:3c:c9:6a:22:5a:c0:f5:c0:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4C:D3:14:A6:B8:92:1F:0C:AC:2C:01:AC:28:EB:E9:7A:34:F4:7E
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/C0F8837027AE11EEB3D5C11B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.200.0/22
Signature Algorithm: sha256WithRSAEncryption
45:b5:07:c7:cd:29:bc:0a:43:bf:38:a5:36:10:2b:b0:19:49:
fa:1f:d5:23:ab:ad:c1:0a:db:9c:f4:16:b3:1d:39:2a:92:e5:
20:db:98:fa:a7:76:87:0b:36:85:e0:e4:03:05:38:91:5b:ce:
09:a2:a5:c6:5a:37:18:82:88:6d:49:24:d4:47:b1:ff:c9:56:
72:dd:28:b0:cd:38:09:cb:d0:2b:90:fa:ee:a7:e6:7e:18:d4:
43:71:da:22:e1:da:09:2a:c8:c4:16:1e:ab:86:f5:e3:eb:47:
66:63:db:d9:4d:04:05:c4:41:4b:4d:5c:d9:ba:e5:01:13:91:
ad:6c:e0:3a:4d:fb:8c:9f:89:b0:cf:9b:26:b7:4c:9d:95:a3:
4f:ad:e5:f2:e0:13:47:68:c1:56:21:75:0a:11:18:86:48:bb:
3d:e9:7f:53:2e:8a:59:1b:df:b3:2a:f2:75:55:6d:07:24:5e:
44:58:f5:07:33:ba:30:49:b4:0f:17:61:aa:ff:b4:17:b0:02:
6a:98:e8:43:f1:39:f4:c1:ee:b5:d3:6d:5c:07:aa:15:35:4e:
60:97:d9:8e:72:6f:5b:46:5a:08:a6:26:52:ae:d6:8e:ef:17:
63:a2:8e:40:a7:68:5c:9f:e7:a3:3b:99:b0:f9:6e:30:7b:a5:
b4:7f:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:59 2024 by rpki-client on console-ams.rpki-client.org