Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/9A1972CECA5E11EAA7968D85F8AEA228.roa
File: 9A1972CECA5E11EAA7968D85F8AEA228.roa (raw, json)
Hash identifier: o/3b7bz/I2GIF7K8ptLx/xwnuWsVO1fKO4zNdB3TrJA=
Subject key identifier: A2:5F:0F:AF:A8:12:F7:54:BF:ED:98:A9:DB:CD:79:AC:B7:54:49:B1
Certificate issuer: /CN=F36B95DEAF/serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
Certificate serial: 02
Authority key identifier: 42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/9A1972CECA5E11EAA7968D85F8AEA228.roa
Signing time: Mon 20 Jul 2020 07:57:05 +0000
ROA not before: Mon 20 Jul 2020 07:56:59 +0000
ROA not after: Sat 20 Jul 2030 07:56:59 +0000
asID: 327849
IP address blocks: 102.222.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B95DEAF/serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
Validity
Not Before: Jul 20 07:56:59 2020 GMT
Not After : Jul 20 07:56:59 2030 GMT
Subject: CN=5f154e51-0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:07:21:ce:7d:07:5b:2a:57:a3:85:49:0a:
25:6c:9f:91:93:33:e6:2c:d6:a6:01:2c:76:55:0e:
02:9b:94:72:39:8a:4a:c0:5c:43:de:bd:e6:42:2f:
6d:13:0c:fb:a7:22:e9:0c:48:b9:68:1c:54:b6:18:
34:20:00:60:df:28:2e:e3:a0:e1:70:3d:a7:90:19:
ef:76:80:2e:a4:5d:35:e6:4d:1c:2f:c2:58:ad:69:
2b:e0:a7:0c:08:81:1e:25:bd:b0:09:c9:b0:1e:ce:
54:3c:03:52:6c:8e:4d:35:02:72:b0:fe:ad:90:60:
4e:52:49:97:f1:30:26:cc:c5:84:9f:ad:f6:68:8a:
6a:1f:2b:98:83:9c:bb:e7:6b:49:09:1f:5b:e3:ff:
0e:d0:38:e0:88:24:1d:a9:a2:10:5e:c6:dc:fd:ef:
2a:ea:09:a0:2c:02:f2:58:1e:06:c8:0b:6c:58:e0:
17:99:9d:93:54:94:24:43:0d:37:b5:44:9e:1f:4b:
a6:f2:a0:67:85:b1:26:ff:23:a6:11:b5:0f:cf:10:
8a:53:e5:5a:ac:ba:07:07:20:22:1c:20:f6:ce:c3:
4d:99:e7:10:53:61:6c:1b:49:c5:64:0c:26:c1:f5:
d7:ce:a4:e3:93:b8:b2:41:74:05:3d:7a:03:91:4e:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:0F:AF:A8:12:F7:54:BF:ED:98:A9:DB:CD:79:AC:B7:54:49:B1
X509v3 Authority Key Identifier:
keyid:42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/9A1972CECA5E11EAA7968D85F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:27:4a:b5:ca:df:9b:b8:0f:bf:28:94:33:5d:3b:83:32:4a:
8c:17:ad:b6:32:d8:d6:9b:fc:01:cb:90:a7:97:6c:6e:d9:f6:
6c:6e:fc:10:e5:14:ca:d0:ec:38:47:2b:bd:6f:fb:73:b4:b6:
0d:02:4b:27:87:a7:4e:33:2f:18:0a:a5:5e:50:ed:49:d5:df:
b6:53:84:73:82:fc:5d:61:c0:57:20:29:6f:74:2d:24:fa:29:
41:a8:a0:d4:dd:f6:99:64:99:95:6d:9a:ad:d6:ab:a4:d5:3a:
35:a8:57:e2:64:fa:50:71:f6:b3:19:60:cc:7e:ee:18:6c:b9:
8c:ba:1f:2c:8a:55:56:4d:3c:86:3e:75:9f:4e:0e:18:d0:c4:
62:a7:5b:dc:48:e5:7e:14:c8:c6:0e:51:d3:2f:04:b0:24:6d:
b4:df:b4:44:e1:20:b3:0f:96:0d:0c:70:3f:d1:29:33:db:19:
45:86:7e:24:63:bc:6e:1b:bc:e5:a8:f4:63:72:38:58:f1:01:
68:bb:2b:46:b8:5e:77:1e:6f:2a:a7:03:d4:82:44:54:eb:f2:
92:97:e0:29:2a:a3:ad:dc:7b:f2:01:ac:2d:77:03:c9:58:fc:
87:00:af:12:9b:48:f1:aa:63:13:0e:21:fb:73:a6:e4:de:de:
1d:33:d3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:01:32 2024 by rpki-client on console-ams.rpki-client.org