Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/FE30EE3E572711ECA2417158D8A014CE.roa
File: FE30EE3E572711ECA2417158D8A014CE.roa (raw, json)
Hash identifier: 6oiMAdRdN+63t7B48ThUZh5q2ToM52IHZBkpkD9qu6s=
Subject key identifier: FB:59:85:46:6D:1F:46:ED:F6:D3:27:86:D9:E7:44:B2:6D:28:B6:EC
Certificate issuer: /CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Certificate serial: 07
Authority key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/FE30EE3E572711ECA2417158D8A014CE.roa
Signing time: Tue 07 Dec 2021 06:36:22 +0000
ROA not before: Tue 07 Dec 2021 06:36:18 +0000
ROA not after: Thu 31 Dec 2048 06:36:18 +0000
asID: 328250
IP address blocks: 102.220.40.0/22 maxlen: 24
2c0f:f8f8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Validity
Not Before: Dec 7 06:36:18 2021 GMT
Not After : Dec 31 06:36:18 2048 GMT
Subject: CN=61af00e6-7377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:a7:50:5e:df:9f:50:b3:ef:be:cc:8c:45:
4d:0d:d3:22:73:4f:d0:39:6f:c7:78:51:ea:a1:17:
a8:70:df:8b:f9:4d:ef:c4:9f:20:c4:64:fc:f8:47:
d0:df:11:c7:c0:f4:26:8a:55:b0:d4:20:5c:19:42:
d6:91:26:0d:28:54:ac:48:12:ba:f0:4f:85:ee:c6:
0a:fa:0a:32:eb:f7:c8:13:bc:51:29:18:ef:2d:22:
89:e1:42:45:f0:37:d0:f5:26:c5:5d:ab:4f:21:c7:
85:36:58:e0:9c:c2:62:9c:b6:ec:54:1c:9c:55:08:
20:d6:de:58:af:51:c0:b1:a1:71:7d:5c:dc:c0:e5:
bc:b5:ae:21:b2:ec:c6:34:1f:9b:98:0f:42:b4:dd:
a7:04:77:91:14:f9:dc:36:82:6c:42:92:16:c4:5f:
d6:75:57:55:40:de:9c:73:0f:c9:0c:5f:73:82:6c:
01:79:bb:74:75:d1:c3:38:92:8a:3a:e2:38:83:b7:
c8:ed:74:6a:12:04:82:23:6c:10:59:e7:3d:cc:ee:
e4:1d:d9:1a:30:64:bf:39:f1:45:06:a9:62:cb:10:
2e:55:19:15:e2:a6:7d:d0:56:5a:a0:7a:b4:02:fb:
b9:53:48:1f:14:b2:73:2f:24:4d:19:b4:96:ff:94:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:59:85:46:6D:1F:46:ED:F6:D3:27:86:D9:E7:44:B2:6D:28:B6:EC
X509v3 Authority Key Identifier:
keyid:87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/FE30EE3E572711ECA2417158D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.40.0/22
IPv6:
2c0f:f8f8::/32
Signature Algorithm: sha256WithRSAEncryption
9b:80:d2:9d:62:5a:a7:78:25:50:66:8c:f9:31:1a:b8:aa:56:
a3:2b:99:04:1b:56:79:e3:24:9b:cf:52:48:90:b3:79:b8:73:
25:2d:b2:68:df:ea:19:f2:13:a2:ea:6d:3a:9a:8b:f6:62:2d:
e8:8e:7d:c6:52:17:73:6f:f6:d6:8c:a2:94:46:46:d8:a6:59:
ca:76:11:35:ea:b3:ae:2d:dd:03:1b:0d:b7:02:01:6b:1b:44:
e7:d8:4f:ac:6d:18:c2:8a:af:a8:72:ca:76:0a:ed:d4:be:a2:
5d:6c:ce:3b:93:2c:02:e8:41:68:8e:41:13:3f:83:8f:b8:19:
78:6c:52:93:07:89:37:70:7e:c8:8f:66:34:31:bb:64:85:29:
e9:3b:e0:60:41:a1:dc:74:b7:8e:81:aa:66:fd:82:0a:b1:85:
30:f9:9b:1e:ab:bf:c4:b8:1c:39:e7:8d:64:38:20:5e:54:76:
74:d7:3c:0f:49:68:7a:25:96:bd:18:d6:12:b1:23:d8:a0:9f:
a5:d4:22:92:66:5b:90:ce:cb:e6:57:04:3e:f1:87:bc:58:67:
8b:4e:fe:64:32:9d:9a:df:a3:ce:08:da:58:ad:ed:d5:d5:0f:
0f:d7:1a:49:57:92:df:2e:86:ea:98:1e:55:f7:8c:86:f4:dc:
78:08:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org