Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/1B58135E2F7511ED979DE2D0F1222468.roa
File: 1B58135E2F7511ED979DE2D0F1222468.roa (raw, json)
Hash identifier: DSGqTaxjbT+K9lrWKUIwbu4/OZVecKFE50cHdO72jtI=
Subject key identifier: 94:4E:82:97:DB:87:AB:D5:FC:2B:CE:57:6C:F1:F3:7C:9F:4C:5A:FF
Certificate issuer: /CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Certificate serial: 04
Authority key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/1B58135E2F7511ED979DE2D0F1222468.roa
Signing time: Thu 08 Sep 2022 12:52:33 +0000
ROA not before: Thu 08 Sep 2022 12:52:29 +0000
ROA not after: Thu 30 Sep 2032 12:52:29 +0000
asID: 328533
IP address blocks: 102.221.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Validity
Not Before: Sep 8 12:52:29 2022 GMT
Not After : Sep 30 12:52:29 2032 GMT
Subject: CN=6319e591-bf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:9e:e0:fe:75:73:8b:d3:4b:a1:1a:77:63:
8a:b1:9f:7b:94:41:60:1a:0b:55:b3:cc:b3:ed:cb:
cd:2b:be:ff:de:47:01:33:bf:56:a5:f2:cb:ec:e9:
ac:47:53:fd:f5:42:7d:a5:11:31:7d:f4:6b:ff:c5:
0b:ba:a2:ea:b2:84:7a:a5:01:7d:18:e3:2a:cd:ce:
c9:1f:a3:9b:36:2f:13:ab:df:fa:24:3a:e8:9d:03:
51:52:20:dd:65:f7:10:39:ea:dc:8b:5e:e1:f0:25:
a5:ee:4f:9b:a9:f1:65:56:93:88:2a:f4:bf:9a:cc:
3d:48:35:4a:6a:1c:8f:7d:fa:ca:94:3c:1c:60:62:
da:03:ca:29:e7:fa:34:46:ce:c9:93:76:d1:3e:17:
b5:53:fb:87:69:0e:0b:cf:18:e6:48:c3:f8:6e:2e:
a9:76:df:f6:cb:d1:2a:10:72:39:ec:ab:13:d1:b3:
b9:89:48:76:54:08:ee:79:18:66:3d:2e:bc:bc:d0:
7e:3a:0d:19:88:2e:bb:44:79:a7:ec:ad:b7:ec:3c:
d7:22:99:a3:51:1c:0d:0b:1d:01:de:0d:5a:62:a0:
9c:00:84:bd:f4:b7:d2:31:ba:e8:09:29:82:63:13:
32:b7:73:b6:cc:1f:99:32:27:7e:0b:80:14:6b:34:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:82:97:DB:87:AB:D5:FC:2B:CE:57:6C:F1:F3:7C:9F:4C:5A:FF
X509v3 Authority Key Identifier:
keyid:8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/1B58135E2F7511ED979DE2D0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:b0:31:e7:a7:e7:59:37:d8:ee:5d:bc:5c:0f:2d:ba:8f:4c:
cf:3c:ca:fe:50:9e:97:36:cb:50:0a:92:9e:0f:dd:1b:52:c5:
f7:d8:64:4c:83:91:b0:38:77:7c:ff:f3:85:81:bc:23:4d:9c:
1d:6e:06:e7:13:5e:2d:38:84:22:0a:eb:4f:59:a4:68:7f:d5:
5f:78:d8:7c:67:b8:02:14:05:a4:1f:6c:2a:1b:93:9a:cd:e9:
1e:b1:4d:66:36:a4:94:80:3b:cb:29:69:6c:bf:81:55:f0:62:
e0:e2:ce:0b:a8:49:bb:c3:b3:20:9d:2a:ef:f1:bd:d9:34:ac:
22:16:cc:50:a2:a8:58:8d:63:35:bf:5d:36:e4:c7:de:5f:fc:
85:f1:1f:8e:eb:5e:a8:7d:ad:f9:9c:7f:85:cb:99:1e:f8:a7:
a1:ec:b5:4b:bb:42:09:40:72:d8:7e:71:43:1c:4b:d7:4a:8d:
52:ce:ee:af:b5:19:c0:0e:25:b4:e6:52:d9:cd:dd:61:92:65:
1f:71:32:1e:5f:be:e2:8a:5b:a6:bb:f4:40:83:52:43:19:6c:
53:c7:a8:fa:d7:88:24:de:70:1d:ef:37:51:ca:85:67:86:6a:
ab:6b:83:55:b3:a0:76:b4:c3:2f:f8:9d:a7:69:3e:f7:a5:34:
1b:e5:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org