Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/3C9F14321C4911EFAAC969317DDC24C2.roa
File: 3C9F14321C4911EFAAC969317DDC24C2.roa (raw, json)
Hash identifier: /gSe9pWPhZ5Kr8gRd+6yNTm4qcpvwit2QsIwfbhWGVc=
Subject key identifier: 49:FE:5A:1F:26:86:7A:69:AB:C0:77:FC:7E:74:DE:C4:D2:33:F4:D3
Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial: 0F
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/3C9F14321C4911EFAAC969317DDC24C2.roa
Signing time: Mon 27 May 2024 16:50:35 +0000
ROA not before: Tue 28 May 2024 16:50:31 +0000
ROA not after: Thu 28 May 2026 16:50:31 +0000
asID: 37517
IP address blocks: 102.220.164.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Sep 2024 00:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Validity
Not Before: May 28 16:50:31 2024 GMT
Not After : May 28 16:50:31 2026 GMT
Subject: CN=6654b9db-19c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:ee:8f:8c:1e:f9:1f:1d:92:42:cd:64:c9:
17:0f:51:30:ed:bd:10:7e:76:d2:1a:62:ab:14:cc:
c6:70:8b:6e:61:93:81:64:e5:b9:ad:5b:76:42:65:
21:7b:2c:de:c2:65:ae:0f:bf:d8:52:46:4d:2e:83:
21:13:2c:63:d6:15:40:ff:04:b9:d9:0c:c9:a8:e1:
75:3a:33:aa:96:80:b0:51:bb:6f:ac:4a:89:a4:f4:
24:dd:c8:fa:fc:b1:8f:71:19:5c:7d:a1:eb:ad:ab:
bd:30:d4:10:6c:34:04:3e:ee:9e:29:ba:7a:d5:26:
84:33:0a:70:0d:58:8f:2c:22:73:55:0a:46:aa:2e:
62:0b:02:11:69:0b:cb:1d:d5:58:48:25:79:f6:d4:
19:02:ac:ec:a1:81:55:05:3c:6d:e7:27:2b:da:c0:
43:53:a6:12:d9:37:24:ed:6b:9f:29:34:fe:c5:51:
fa:e2:19:8b:5a:f3:10:e1:8b:7f:42:d6:a9:e1:c5:
cf:55:1e:a6:8a:d8:61:77:e6:03:76:8d:32:2b:a4:
c0:f3:d1:be:e6:3c:28:c9:b7:60:a3:b1:c6:ae:80:
80:b6:d8:fd:2d:57:a4:a1:0e:51:ce:57:8a:49:e7:
02:0f:be:58:79:8a:18:38:c5:d4:3e:b8:40:6b:15:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FE:5A:1F:26:86:7A:69:AB:C0:77:FC:7E:74:DE:C4:D2:33:F4:D3
X509v3 Authority Key Identifier:
keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/3C9F14321C4911EFAAC969317DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.164.0/22
Signature Algorithm: sha256WithRSAEncryption
10:2b:42:e3:49:ac:9c:55:50:4d:fb:29:e7:e5:36:84:b4:7a:
bf:e6:50:9d:51:a9:5e:36:44:af:67:32:23:ac:7d:d9:6d:58:
3e:99:e6:9d:39:94:61:d6:23:d0:92:c5:2d:29:8e:c0:92:f9:
e8:f1:d4:d1:59:bd:66:b2:c0:01:21:44:6c:46:43:07:37:21:
be:f0:89:df:8f:2b:b1:5b:f0:4e:bc:f1:b4:68:73:90:38:9d:
ca:4b:b5:2a:fc:e4:d8:d8:10:0d:37:da:bf:00:c7:ac:b4:31:
86:36:b7:2b:02:54:b5:c6:83:27:f2:96:8e:99:d2:41:3c:91:
0b:ee:db:db:99:f7:11:0f:8b:0f:20:72:a9:e6:9b:4e:bb:3e:
c5:d2:72:0d:06:76:a8:40:4e:ff:db:44:49:25:e3:30:b3:65:
99:33:9c:b0:3e:28:42:f7:47:60:a8:00:fd:ae:8a:74:d7:62:
ed:c2:b6:62:01:ce:ca:21:92:53:5f:09:63:4c:7d:45:e0:1d:
dd:7a:23:9d:28:17:20:f7:b0:a2:ba:06:fe:9d:d6:83:67:32:
48:b1:6d:00:2b:7a:8f:da:72:6d:03:0b:ec:31:c4:da:9b:0e:
67:f7:f1:5f:1f:9d:ac:24:87:98:1c:d7:fc:fc:81:75:d5:df:
9f:64:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 03:59:26 2024 by rpki-client on console-fra.rpki-client.org