Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/715EC0EE69A911EE84A41F174AD9E6FC.roa
File: 715EC0EE69A911EE84A41F174AD9E6FC.roa (raw, json)
Hash identifier: GA/yRfN+j7YpzqeDRBlxUIhR1rbQNxt7HY+jSgnz5l0=
Subject key identifier: 05:76:B1:E4:BF:20:CE:DE:AF:AB:86:F1:B8:E8:78:66:AF:40:96:9F
Certificate issuer: /CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Certificate serial: 02
Authority key identifier: F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/715EC0EE69A911EE84A41F174AD9E6FC.roa
Signing time: Fri 13 Oct 2023 09:18:17 +0000
ROA not before: Fri 13 Oct 2023 09:18:13 +0000
ROA not after: Sun 12 Oct 2025 09:18:13 +0000
asID: 328895
IP address blocks: 102.218.244.0/22 maxlen: 24
2c0f:5500::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Validity
Not Before: Oct 13 09:18:13 2023 GMT
Not After : Oct 12 09:18:13 2025 GMT
Subject: CN=65290b59-f2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:a4:f6:c3:f2:fc:99:d6:a2:df:71:c6:31:
48:4d:10:97:08:4f:8a:f4:fe:bc:aa:0b:3a:cc:2d:
c7:fc:47:2b:a1:02:2c:31:a7:10:3e:1e:27:dc:73:
aa:df:32:23:d0:11:0d:42:cd:80:03:f8:a9:e6:af:
0a:e1:14:ca:8f:2b:9c:3b:d9:83:53:cb:a0:8f:31:
4b:b4:c5:10:51:10:52:83:b2:73:df:14:59:25:87:
98:c6:c1:0d:3f:cf:8b:75:e9:15:64:ca:70:22:99:
51:2e:92:33:e4:57:21:a3:74:d1:df:d6:78:78:77:
0e:79:1b:32:d5:bc:19:96:ad:9c:4d:d7:47:69:87:
6d:42:5d:94:9b:bd:e1:ca:e6:04:92:23:94:8f:57:
67:32:ec:67:b6:11:85:44:1e:a7:12:78:38:f6:75:
a3:8c:8e:19:a6:77:77:81:00:65:84:64:38:80:c8:
28:33:89:3d:da:3d:3d:ee:0d:bb:b6:5d:04:b5:71:
35:8e:e6:da:ca:15:12:4a:7d:9a:5b:83:5e:b0:af:
3c:16:5f:36:ac:8b:ba:d6:47:4e:b9:e6:cb:3f:dc:
cf:22:9e:88:4f:08:17:e4:20:d0:12:52:a9:8a:ea:
b0:f2:79:40:07:08:72:de:9b:0d:e0:5f:cb:17:74:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:B1:E4:BF:20:CE:DE:AF:AB:86:F1:B8:E8:78:66:AF:40:96:9F
X509v3 Authority Key Identifier:
keyid:F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/715EC0EE69A911EE84A41F174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.244.0/22
IPv6:
2c0f:5500::/32
Signature Algorithm: sha256WithRSAEncryption
9d:01:03:71:db:c1:de:75:21:ad:bc:e0:08:d6:a9:0c:26:7f:
92:5e:ce:84:43:80:d7:b0:ea:d3:c7:b4:50:81:c1:36:96:fb:
e6:51:93:14:c9:b6:b3:d5:20:5f:de:e0:4f:2f:b2:62:29:93:
71:85:55:e0:51:2b:26:de:13:4a:06:db:d4:29:9b:ac:82:53:
58:89:2c:6e:6b:e9:bc:69:3a:f1:b7:28:1e:2d:dd:f3:0d:98:
2d:3e:2b:b6:dd:14:39:c1:b7:9b:a2:3f:f9:36:61:4b:47:67:
30:61:0f:8d:c7:4c:b3:3c:44:31:a5:18:1c:e3:48:1d:30:3a:
7a:6b:dc:f4:88:d6:db:bc:3b:e9:53:44:16:57:72:f9:a2:6c:
32:f6:83:31:f6:59:f7:72:e8:a8:93:0c:f5:5f:c4:2f:d0:1a:
8f:d2:20:0d:8f:f0:38:1f:c2:8d:4b:cb:b7:00:b2:49:80:be:
2a:27:6e:fd:d7:0e:ea:5f:37:ff:50:87:59:50:f1:07:20:7e:
34:53:42:77:50:b4:87:6c:4b:48:0c:80:f6:b3:30:17:cf:ab:
37:9b:02:4d:7a:bb:ab:03:cc:91:94:96:3a:9a:93:b9:04:c9:
34:75:35:4e:b9:e8:f4:49:64:2c:73:79:fd:87:9e:a5:00:3a:
bd:79:04:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:35 2024 by rpki-client on console-fra.rpki-client.org