Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/101079CE3C7711EC8C3E4239D8A014CE.roa
File: 101079CE3C7711EC8C3E4239D8A014CE.roa (raw, json)
Hash identifier: jB0xIl80rdfHsMSZYfYO09Z2DJcH9xvEYlOsAEua2i8=
Subject key identifier: 7D:CE:2C:A9:FE:12:71:D0:12:E2:9D:E3:73:43:9E:D8:B3:B9:BD:C7
Certificate issuer: /CN=F36A2CA0AF/serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
Certificate serial: 020E
Authority key identifier: A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/101079CE3C7711EC8C3E4239D8A014CE.roa
Signing time: Wed 03 Nov 2021 07:24:21 +0000
ROA not before: Wed 03 Nov 2021 07:24:16 +0000
ROA not after: Sat 01 Nov 2025 07:24:16 +0000
asID: 37211
IP address blocks: 102.218.68.0/22 maxlen: 22
102.218.68.0/24 maxlen: 24
102.218.69.0/24 maxlen: 24
102.218.70.0/24 maxlen: 24
102.218.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2CA0AF/serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
Validity
Not Before: Nov 3 07:24:16 2021 GMT
Not After : Nov 1 07:24:16 2025 GMT
Subject: CN=61823925-1dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:a2:7d:6b:5a:a8:ba:5d:49:3c:af:a0:68:
4e:a9:ad:99:01:03:70:a2:eb:08:bd:ba:ce:ba:52:
1e:8f:a2:61:b5:16:bc:ab:b8:95:be:a9:84:91:ee:
8d:12:3a:56:96:96:04:52:02:7e:36:42:ef:9a:13:
d2:b5:7d:c1:d1:0e:b6:cc:e9:6d:39:0f:8e:24:32:
12:f4:ed:89:6a:4f:23:57:39:8d:52:93:30:9c:e4:
4d:12:c4:2b:e3:25:82:13:94:7c:e9:a9:49:83:1c:
7a:be:b4:ce:8c:5e:03:8e:00:56:ec:7e:0b:91:20:
03:08:3c:85:30:54:36:b7:1b:8a:88:1d:5b:9b:eb:
da:42:77:a2:e6:35:7b:f4:53:a2:10:ab:e5:5a:96:
df:d1:c4:47:f7:e1:3d:59:97:4b:54:60:bf:88:0d:
1e:c5:85:b1:cd:ef:72:a2:ef:e0:dd:4a:34:e3:6d:
1f:f7:0c:1a:d7:fb:ce:cd:4a:df:a7:7c:60:d6:4a:
0a:05:e8:36:f7:72:5e:1d:a6:81:64:f3:eb:3e:fb:
f1:e7:35:b9:ac:ce:0c:d7:97:c2:86:f0:27:3b:7d:
9c:7d:dc:e0:c8:ed:5c:a8:79:c3:2d:79:ec:1d:18:
95:01:ba:0a:fc:25:9e:b8:c3:78:c2:c6:f0:87:f2:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:2C:A9:FE:12:71:D0:12:E2:9D:E3:73:43:9E:D8:B3:B9:BD:C7
X509v3 Authority Key Identifier:
keyid:A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/101079CE3C7711EC8C3E4239D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.68.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:83:84:29:7e:75:e8:72:59:9b:63:30:32:26:17:c1:7b:8d:
c0:1f:e9:b1:b6:0c:72:c9:87:fb:33:5f:75:66:f6:e7:fd:06:
e3:8e:dc:5d:48:96:37:db:55:1b:32:d9:45:b6:43:87:57:2c:
f3:49:e2:d2:81:6c:bd:bf:7d:f2:93:7f:81:d0:33:a8:de:4f:
d2:43:ad:ac:bb:48:6a:10:ed:44:30:d2:ab:25:07:96:18:77:
2e:63:3e:ea:0c:0d:f4:8c:09:a0:a9:45:ee:0d:95:87:2d:cb:
c0:6a:4f:eb:84:63:74:91:74:40:c2:a7:fa:64:58:27:c0:78:
45:a9:46:1b:d2:11:ff:07:2c:fa:99:43:03:b3:66:05:de:f2:
8e:b3:cd:e3:fa:6e:2a:53:5d:d6:17:10:db:c8:3e:68:5f:2d:
a5:f6:35:1f:a0:1b:1a:3d:75:d0:c0:b5:59:3f:06:5f:38:26:
4f:f0:87:61:f9:cb:0c:23:d0:04:0b:b3:5f:c1:a5:15:39:eb:
2c:ff:5d:8f:3f:f0:a9:69:88:0f:ac:ef:77:95:c8:a4:94:93:
d5:d5:ab:df:1d:a2:da:eb:ab:ad:73:37:ef:09:0e:b1:a0:d7:
93:2b:73:61:97:e4:dc:4e:8a:8d:d2:92:c6:14:1f:4c:35:49:
c1:0b:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:46:14 2024 by rpki-client on console-fra.rpki-client.org