Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/F9D73EF2D4D111EB99268434F8AEA228.roa
File: F9D73EF2D4D111EB99268434F8AEA228.roa (raw, json)
Hash identifier: jO+1rjWEWMm+WY3oT+Y1Zmh3wgMMZTJ0o4Zk73LDsKY=
Subject key identifier: 89:E7:00:D4:5F:1A:1A:88:08:AF:B4:48:DC:49:BA:00:CE:07:75:9B
Certificate issuer: /CN=F36AA6EDAF/serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
Certificate serial: 24
Authority key identifier: 27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/F9D73EF2D4D111EB99268434F8AEA228.roa
Signing time: Thu 24 Jun 2021 09:53:07 +0000
ROA not before: Thu 24 Jun 2021 09:53:02 +0000
ROA not after: Wed 30 Apr 2031 09:53:02 +0000
asID: 327750
IP address blocks: 102.222.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 01:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA6EDAF
Validity
Not Before: Jun 24 09:53:02 2021 GMT
Not After : Apr 30 09:53:02 2031 GMT
Subject: CN=60d45603-b112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:bf:5a:94:be:d3:9a:21:c1:8c:85:d5:b1:
cc:6c:0d:80:a3:d5:25:37:80:01:d4:cc:bf:b4:64:
04:d2:84:f2:f4:03:62:26:85:69:9b:b9:c1:83:6c:
2c:58:45:d1:55:a8:29:28:37:1c:2f:72:b6:72:c2:
ef:ac:21:3a:44:cc:54:89:de:9b:28:50:c3:34:c5:
a9:1b:b9:5d:23:ec:38:3b:e4:02:8c:15:3c:67:5d:
d1:37:43:6b:97:33:42:30:5b:10:f6:fd:b1:ea:23:
0b:f7:94:ff:4e:e9:cf:b2:2c:fa:7f:e9:c6:28:c4:
eb:d9:89:1e:1b:60:a6:8b:44:b2:2c:2e:43:5c:6e:
c2:67:38:ea:5b:e1:0b:e9:c5:65:88:64:67:2a:42:
95:3a:83:f8:ae:19:70:3c:da:ac:12:fe:d4:93:ec:
56:6a:82:e2:56:80:de:b7:48:20:17:95:70:9b:87:
f8:4e:95:3f:45:fe:84:94:2f:f1:d4:09:20:87:15:
6d:61:33:48:72:2d:d2:ee:86:e4:83:57:d1:0b:6c:
d5:81:76:d5:ac:0d:08:17:fd:f1:dc:03:f3:96:97:
21:ec:73:a9:e7:b9:ce:c9:c1:80:af:ad:9b:17:ed:
7c:9b:49:da:b9:46:04:e8:a8:78:0e:46:e2:28:14:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:00:D4:5F:1A:1A:88:08:AF:B4:48:DC:49:BA:00:CE:07:75:9B
X509v3 Authority Key Identifier:
keyid:27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/F9D73EF2D4D111EB99268434F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.48.0/22
Signature Algorithm: sha256WithRSAEncryption
01:26:6c:28:ed:71:a1:1a:72:f5:7a:e5:8b:88:dc:84:bc:16:
37:af:80:80:aa:98:03:19:ba:e1:1e:11:2e:ce:82:74:da:88:
1f:ac:c9:45:53:89:1f:c1:88:01:0b:2f:9a:23:fb:73:4d:ab:
0c:86:28:72:71:6f:51:27:c1:de:76:e7:2e:b3:79:1a:48:e4:
79:ec:c3:c9:b1:bb:7a:48:f3:af:3e:f8:40:3f:92:d2:3d:52:
66:41:c1:e9:19:6a:f8:05:13:ff:d9:71:0e:e7:07:fd:50:5e:
be:e3:cb:68:30:dc:9e:ba:ad:79:e8:0e:30:b9:f9:aa:b3:c6:
a2:7b:44:d3:e5:96:cc:45:18:36:63:7f:2a:33:47:e1:cb:9f:
9d:7f:0c:ce:44:54:2b:82:73:93:36:d0:73:b3:6d:60:a3:31:
cb:7c:8a:55:73:b3:bf:45:a8:f7:95:29:bf:01:b2:eb:59:5a:
07:d4:b1:64:bd:2d:ca:e8:ca:16:1f:ef:d2:d8:fc:2a:53:48:
35:34:46:c0:71:eb:35:0f:06:72:d9:ca:4f:78:dc:26:45:ca:
46:ea:e2:b3:33:d1:09:a6:df:c4:6f:62:a5:63:8d:3f:c9:ee:
8a:ad:bd:45:f2:30:3a:52:18:2d:1e:e2:ec:db:36:05:b9:71:
f9:be:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:00 2025 by rpki-client