Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/8327C434A35411EF974E14A1762E951A.roa
File: 8327C434A35411EF974E14A1762E951A.roa (raw, json)
Hash identifier: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=
Subject key identifier: F1:A0:07:2E:FF:3B:5B:DB:22:6B:7B:EA:FC:8C:86:63:E4:F8:D5:EE
Certificate issuer: /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial: 02
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/8327C434A35411EF974E14A1762E951A.roa
Signing time: Fri 15 Nov 2024 13:21:24 +0000
ROA not before: Fri 15 Nov 2024 13:21:21 +0000
ROA not after: Wed 30 Nov 2044 13:21:21 +0000
asID: 328710
IP address blocks: 102.222.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Validity
Not Before: Nov 15 13:21:21 2024 GMT
Not After : Nov 30 13:21:21 2044 GMT
Subject: CN=67374ad4-de74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:ad:39:62:95:76:86:0d:7e:01:4e:46:9e:
d4:55:bb:45:0f:23:4f:86:4f:c1:05:59:56:6a:56:
f6:e2:23:e9:ba:6d:3e:c3:05:9a:8d:61:1a:05:25:
c5:e6:03:84:b8:0d:2a:91:16:f2:f7:4c:e0:5d:89:
ce:b6:8b:28:00:9a:8f:74:ee:5c:3a:2f:9a:9f:ac:
e8:6d:db:cd:c3:21:2d:24:8d:f7:78:0c:6b:4b:be:
a6:47:ba:b1:02:60:46:42:93:6f:94:bb:c3:98:d3:
25:1f:2d:74:98:6e:5b:21:92:38:85:88:d5:72:c1:
6c:65:77:fb:2e:13:f8:13:40:db:48:b6:bf:04:b2:
bc:bc:22:5e:c9:38:e4:7e:e8:a4:a3:2b:22:99:47:
b5:8b:fe:57:7f:b0:62:23:2d:f2:d6:2b:56:c5:ff:
96:ec:38:2b:96:df:82:f2:48:96:c6:cf:ff:db:da:
e0:1b:b4:49:3e:7b:24:b1:a9:3b:19:83:e7:83:c0:
19:1f:ad:ca:33:5c:e9:97:58:4e:d5:2f:d9:96:f3:
de:75:85:fe:51:a0:90:b1:c9:a9:c0:3b:e6:ff:4b:
d2:65:0e:58:96:19:a9:fc:87:b8:21:1d:f1:41:7b:
49:ee:65:e2:54:14:4b:f3:a2:4e:86:47:74:e0:d6:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:07:2E:FF:3B:5B:DB:22:6B:7B:EA:FC:8C:86:63:E4:F8:D5:EE
X509v3 Authority Key Identifier:
keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/8327C434A35411EF974E14A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:46:de:5d:7c:ea:43:f0:5a:28:5d:01:bf:d8:fa:cc:91:42:
ed:77:3c:9f:09:01:55:ee:df:a2:23:b3:ca:70:00:75:8b:06:
46:4e:32:88:41:68:02:29:28:d2:64:b0:65:20:dc:30:16:be:
b5:82:96:a6:f1:be:4b:bc:d8:19:34:39:ca:21:0a:87:82:89:
7e:6b:64:4e:7a:e7:bc:03:7e:b4:af:74:33:6c:7c:02:f2:f7:
4a:d1:ac:69:63:1a:cc:e8:33:dd:94:4b:f5:b3:31:cf:1b:df:
66:0f:56:ff:c3:cf:be:2b:d9:18:21:7a:d6:95:f2:3d:e6:7e:
1d:f7:17:f6:57:86:73:41:b3:57:85:24:4a:76:7b:48:1c:7d:
50:d9:4b:52:b1:ee:93:f8:aa:b8:16:8b:c0:8b:45:f1:ea:e9:
cb:a0:b8:63:99:69:21:0d:a0:b3:7f:73:23:a4:ae:93:03:0f:
c7:57:fc:85:ff:28:39:e7:88:3d:29:2f:f3:f7:99:89:85:c7:
e3:e2:c4:05:ce:f6:9f:e8:49:10:51:a8:f1:a4:86:13:54:94:
a8:9e:00:9f:32:77:6b:ff:3f:4a:af:31:56:dd:f6:68:27:2c:
9d:a1:29:60:6c:55:35:58:36:9c:5d:e6:59:2f:8a:8f:0d:9a:
9b:58:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org