Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/6ADD5F36276611ED8496B7E5F1222468.roa
File: 6ADD5F36276611ED8496B7E5F1222468.roa (raw, json)
Hash identifier: Qk4QPoBO37F+c6CTxiNXDVmzwT1MOwmXYJMKBjJSlEg=
Subject key identifier: 4F:37:C2:BB:78:E2:36:2E:86:F6:39:AD:8B:12:45:92:2F:EF:13:86
Certificate issuer: /CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Certificate serial: 35
Authority key identifier: AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/6ADD5F36276611ED8496B7E5F1222468.roa
Signing time: Mon 29 Aug 2022 06:47:15 +0000
ROA not before: Mon 29 Aug 2022 06:47:09 +0000
ROA not after: Sun 29 Aug 2032 06:47:09 +0000
asID: 328758
IP address blocks: 102.221.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Validity
Not Before: Aug 29 06:47:09 2022 GMT
Not After : Aug 29 06:47:09 2032 GMT
Subject: CN=630c60f3-5709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:5e:bb:c1:aa:01:cb:30:01:aa:31:9f:15:
f4:94:92:a8:69:6c:c4:89:6a:fc:35:c2:1d:f5:6a:
c4:8d:e4:c7:01:b5:cd:9a:80:b8:e7:e5:b2:69:0a:
90:1b:1e:ed:e3:4d:f8:8e:30:fa:79:27:ce:a4:0d:
9c:76:7a:75:f5:c0:79:de:ae:b9:b6:2d:f2:7a:39:
06:d8:31:17:b1:fe:98:0e:6d:80:52:1f:22:77:e1:
aa:8b:fb:40:3c:0b:b6:04:1e:10:7c:c8:5d:2b:ae:
5c:64:53:31:7a:8f:ba:7d:0d:99:71:da:ca:42:30:
96:97:50:69:cd:fb:0a:1c:2f:ca:b0:b1:fa:37:c5:
83:84:7f:1a:b4:ae:c8:3e:60:87:da:86:0b:a4:58:
c0:f8:cb:1c:06:66:df:d6:2e:12:20:0d:7d:d8:aa:
e3:a9:ad:72:7c:22:de:1e:40:1e:a9:99:c9:83:46:
21:0a:5c:d3:bc:96:47:ab:21:de:d6:f1:62:c1:a1:
f1:4c:f7:c0:f1:af:c5:99:cd:bb:fe:f0:e7:73:b4:
0e:20:c1:ef:ba:e2:b1:24:fc:31:a6:79:3c:9e:32:
e5:ca:69:43:aa:3f:53:fd:05:4f:77:a1:b2:67:43:
88:a4:a2:6c:91:32:c0:6b:9b:d5:24:4d:69:14:86:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:C2:BB:78:E2:36:2E:86:F6:39:AD:8B:12:45:92:2F:EF:13:86
X509v3 Authority Key Identifier:
keyid:AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/6ADD5F36276611ED8496B7E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:63:c4:b4:e6:ec:34:22:9a:91:5e:50:43:8a:b9:94:61:24:
a7:1f:7e:79:d1:65:5f:14:26:b7:24:66:52:e8:05:00:be:11:
f7:2c:f3:cb:9e:df:94:bc:e0:03:6d:3d:c9:af:a3:e6:82:e6:
af:91:17:72:b0:63:67:8a:f3:c5:1a:fd:e1:59:fa:63:ac:53:
47:c7:30:aa:63:73:54:e9:28:b6:6d:85:e5:f2:f7:91:f7:be:
de:e2:47:48:4b:32:c5:c9:48:c5:52:82:a5:20:51:f6:0c:29:
4b:61:a5:ca:23:0d:94:ee:ab:e8:35:db:15:45:e6:ee:47:d9:
45:b3:40:7a:aa:e5:33:98:25:cc:4c:e2:1c:59:5e:bf:0e:17:
97:d7:00:8e:7c:fa:1f:2b:48:fb:5d:35:47:20:09:f5:d3:92:
07:34:cb:9e:ac:4d:ff:fa:ae:62:56:2b:c8:17:9c:62:49:27:
71:47:d0:00:57:3e:f3:b2:62:0d:0e:a1:09:fe:57:5e:ac:4f:
de:6c:fe:00:a0:d7:e8:1a:94:c6:b2:8b:31:a6:2f:8f:51:db:
04:91:42:ca:f6:76:4a:e0:17:66:7c:05:a6:e8:53:65:41:16:
ef:6e:3a:e2:c0:9e:3e:88:1a:e5:54:ba:69:fe:d6:07:55:72:
b3:23:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:19 2024 by rpki-client on console-ams.rpki-client.org