Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/44EF15B42F7511ED934148D1F1222468.roa
File: 44EF15B42F7511ED934148D1F1222468.roa (raw, json)
Hash identifier: SVbI5/mcJ+ND6giCV7RVPDPt1p34yK1IAdaZ9mYU07E=
Subject key identifier: 4C:4B:B0:95:8D:55:0B:73:16:E6:17:76:F9:6B:8D:FE:71:D4:51:CA
Certificate issuer: /CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Certificate serial: 06
Authority key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/44EF15B42F7511ED934148D1F1222468.roa
Signing time: Thu 08 Sep 2022 12:53:43 +0000
ROA not before: Thu 08 Sep 2022 12:53:40 +0000
ROA not after: Thu 30 Sep 2032 12:53:40 +0000
asID: 328533
IP address blocks: 102.214.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Validity
Not Before: Sep 8 12:53:40 2022 GMT
Not After : Sep 30 12:53:40 2032 GMT
Subject: CN=6319e5d7-4d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:b9:f5:b9:cf:bb:30:51:63:8e:cb:6b:c1:
c9:ab:71:70:61:ac:c3:3d:11:1e:06:6b:f7:b0:98:
07:73:f1:f9:09:f2:72:74:0b:d2:f2:3b:a2:88:b4:
e4:d9:41:fd:99:28:3c:a8:7f:a3:1c:c2:62:53:80:
6e:0f:2f:b1:2e:eb:d5:31:d8:c2:4d:3a:85:df:c6:
5f:0b:18:bd:a8:83:2b:ad:68:e1:8e:2f:52:17:ba:
ae:b7:c9:27:c1:c7:3c:71:19:01:12:f9:bc:0d:00:
ea:17:23:d2:b4:0c:f6:89:a2:e9:8d:95:7f:90:5d:
da:8c:c0:65:e8:4e:03:b1:6f:90:c9:34:c3:8a:51:
6b:0e:48:69:33:16:c5:43:4d:75:70:aa:3f:f0:a1:
aa:e9:53:35:59:1c:80:13:41:fa:96:0e:d1:9d:8e:
4f:d4:64:b1:4f:38:23:a0:b3:31:ae:be:8b:31:a4:
45:d2:4e:b1:42:63:68:ec:8b:12:67:1c:de:84:9d:
7b:25:97:5b:2e:05:51:3d:98:c1:cb:41:d8:b4:d7:
dc:9c:27:6e:a1:f1:94:1b:86:82:e4:fc:b1:1d:44:
7f:ae:1c:53:8e:0d:9c:a3:50:37:34:02:bf:de:6b:
86:0b:8d:4a:59:de:ad:0c:16:1e:a3:12:9b:ec:79:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4B:B0:95:8D:55:0B:73:16:E6:17:76:F9:6B:8D:FE:71:D4:51:CA
X509v3 Authority Key Identifier:
keyid:8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/44EF15B42F7511ED934148D1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.189.0/24
Signature Algorithm: sha256WithRSAEncryption
49:29:95:57:3c:df:59:bf:96:31:3f:09:04:63:f8:82:5d:4e:
6e:ae:b4:7f:f8:b3:29:a7:c7:36:5b:04:b2:e6:5c:5a:f1:79:
a1:21:85:d3:5c:05:0c:8d:d2:39:7f:19:ec:c3:ca:0d:51:79:
00:df:cf:6e:cc:2b:ef:30:11:cb:64:6a:42:b0:2a:d2:9c:40:
8d:53:49:7b:20:c4:28:2f:a7:0f:32:c2:a3:f3:e0:87:ec:74:
01:4a:91:b6:71:9b:98:8a:41:4c:71:4b:46:48:02:f1:f5:9f:
e8:70:d9:a2:7d:eb:be:f9:eb:d4:3f:97:aa:60:3b:34:98:57:
12:d2:20:b0:7a:57:29:c8:d8:f0:64:90:2d:44:f7:8d:d9:9c:
85:c2:05:b9:47:d8:c6:d5:fc:1b:54:32:6c:08:a9:31:98:08:
47:80:d8:e9:a8:08:8e:c9:21:26:ae:27:1f:f3:58:b1:ff:b6:
04:f5:a9:d2:7d:ed:2e:63:f8:83:6e:94:03:da:f2:41:2d:73:
94:ab:6b:f3:67:11:39:89:a2:26:d3:0d:18:9e:24:39:5a:78:
95:a7:50:c3:6c:a2:ac:52:cd:ab:ba:e8:df:1a:77:ec:ea:e5:
95:3f:c0:66:35:1f:3e:1d:25:d6:14:27:d8:b0:59:69:71:ca:
ce:c2:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org