Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/CB0FA5F6F2BB11EC8A4DDD82F1222468.roa
File: CB0FA5F6F2BB11EC8A4DDD82F1222468.roa (raw, json)
Hash identifier: lxEMymTJPboRJ7EWX4tzQoZnRdc9Q6NShyvK1e1Jd3w=
Subject key identifier: 4B:BB:00:86:22:10:17:BA:2F:E7:92:DE:F8:FE:E5:8D:F7:D6:4C:7F
Certificate issuer: /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial: 038D
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/CB0FA5F6F2BB11EC8A4DDD82F1222468.roa
Signing time: Thu 23 Jun 2022 06:14:52 +0000
ROA not before: Thu 23 Jun 2022 06:14:48 +0000
ROA not after: Wed 23 Jun 2032 06:14:48 +0000
asID: 328631
IP address blocks: 102.22.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Apr 2024 01:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909 (0x38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Validity
Not Before: Jun 23 06:14:48 2022 GMT
Not After : Jun 23 06:14:48 2032 GMT
Subject: CN=62b404dc-f312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:30:9f:0c:86:b4:49:12:da:e3:93:fa:ef:26:
1a:97:f7:ae:f8:e8:ca:22:b3:17:d6:aa:cd:40:0e:
93:b6:25:af:ed:78:e4:4b:b4:69:9c:87:c4:40:54:
96:16:e2:9c:3c:f7:fe:a1:c1:32:2c:ca:db:42:32:
88:23:b3:ad:74:43:32:3b:91:5c:a2:55:07:60:3b:
fe:23:23:e9:15:ea:f0:91:84:59:06:e6:9f:8e:00:
4b:d5:88:a4:0e:8a:9d:82:5d:85:df:19:02:2a:26:
ab:97:c1:a7:10:2b:bf:93:3e:c3:24:e8:29:eb:13:
58:88:d5:88:20:bb:a9:54:a2:d2:90:44:30:db:8e:
45:71:2d:b8:2b:63:89:a3:91:af:6a:b7:ac:ec:a5:
82:1b:2f:f0:8c:af:02:61:ec:dc:6b:89:7c:29:86:
49:1e:6f:34:a8:f8:da:b8:2b:fd:dd:d9:12:e5:df:
66:7e:f8:08:ea:2b:ea:15:a0:8b:8b:4a:e5:dd:23:
8a:56:ef:15:b1:99:63:c6:ec:3a:19:59:05:b1:e8:
a3:f3:0f:f3:3c:be:6a:1f:13:2b:e2:95:ee:7a:2a:
65:50:49:3f:6d:6f:c4:e9:98:d3:6e:be:31:bb:e5:
18:fb:22:ad:5f:f3:92:c4:d7:27:4e:76:b2:1e:06:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:00:86:22:10:17:BA:2F:E7:92:DE:F8:FE:E5:8D:F7:D6:4C:7F
X509v3 Authority Key Identifier:
keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/CB0FA5F6F2BB11EC8A4DDD82F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:33:13:9b:6e:a3:60:44:6d:5e:fe:15:03:22:97:f9:bd:47:
b9:14:48:c1:69:69:90:dd:d1:37:e5:a5:a8:c1:f3:95:5c:d5:
b6:bc:76:78:09:70:f7:2d:f7:62:80:a5:5a:4f:e4:50:f7:c7:
73:2c:61:b9:a7:f6:67:17:70:21:f5:dd:19:2b:41:e1:82:dc:
40:04:47:cb:9c:49:0b:70:34:46:8c:a6:76:65:d8:60:28:d4:
e5:33:26:81:a8:ed:d0:3c:6b:36:98:be:7b:fd:f7:a1:e0:e2:
99:e5:87:63:ae:e1:8b:0a:d3:99:a3:6d:16:6a:6e:18:67:2b:
f6:3f:7c:c5:82:1b:fa:17:1d:25:a3:11:f8:59:ec:9f:e8:b1:
ac:cb:9d:fe:3c:8d:5f:a2:14:19:e7:32:1a:34:b7:ce:9a:ef:
e0:22:8b:bc:5b:1c:a3:7b:24:ca:07:ee:6c:87:9e:d0:21:8f:
9f:33:9f:a6:e5:ee:36:1f:77:eb:9f:df:c4:d5:f0:6d:d4:06:
69:6c:3d:8f:1d:bb:01:80:c9:64:60:77:35:bd:39:9a:f2:d0:
24:22:85:a4:9c:46:19:37:ad:38:84:17:34:51:31:35:76:69:
90:bd:f3:d8:69:d7:0d:e5:72:91:9f:a0:2e:b5:fb:ae:69:b0:
d0:f6:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:41:41 2024 by rpki-client on console-ams.rpki-client.org