Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/440AE6387FC211EFACAB56B8762E951A.roa
File: 440AE6387FC211EFACAB56B8762E951A.roa (raw, json)
Hash identifier: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=
Subject key identifier: 1C:DF:BE:6C:E1:1A:C0:A0:46:62:A3:0F:6D:94:5D:81:38:21:FA:6C
Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial: 9F
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/440AE6387FC211EFACAB56B8762E951A.roa
Signing time: Tue 01 Oct 2024 06:56:21 +0000
ROA not before: Tue 01 Oct 2024 06:56:17 +0000
ROA not after: Thu 01 Oct 2026 06:56:17 +0000
asID: 37517
IP address blocks: 102.207.152.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Validity
Not Before: Oct 1 06:56:17 2024 GMT
Not After : Oct 1 06:56:17 2026 GMT
Subject: CN=66fb9d15-a2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:81:71:3d:c3:6c:26:eb:e2:51:90:48:b4:
7f:02:7b:70:db:dc:7e:cd:65:24:e2:41:a7:4a:84:
e9:0e:70:f9:21:69:55:ed:05:7a:f7:fa:8f:a3:04:
bd:91:82:a6:b3:fe:f3:ea:73:53:87:1a:f5:04:96:
a0:8a:d5:ec:1f:f3:64:64:88:09:49:e6:58:f8:14:
7d:34:4e:3b:cd:ca:19:3e:cc:6c:5a:07:cc:fc:f8:
48:89:df:7e:99:64:3c:e4:3f:7d:64:47:99:61:08:
d6:ee:86:be:e6:b6:e1:20:b5:5b:c9:25:b5:bc:8e:
30:92:89:3f:45:68:aa:13:3f:e6:83:af:22:3f:77:
61:37:8c:4b:8b:c7:24:72:23:aa:1c:c5:ce:34:a5:
f1:f3:dd:1d:e0:56:c7:b0:b7:95:c4:b6:87:01:14:
05:35:f6:77:f7:80:26:3c:04:4d:26:eb:ad:90:92:
7b:af:71:10:e4:1a:7a:e3:6b:cb:ef:86:e0:7c:d3:
5a:e2:f2:b2:3d:2b:31:71:e7:93:2b:00:45:8b:6a:
a9:f8:63:b8:2f:25:89:6c:ad:30:99:43:4b:91:0d:
cf:40:95:2f:ea:5c:c0:c6:b7:d6:88:4f:0c:6b:e1:
14:c1:10:bb:59:63:14:ab:d0:8d:85:e3:08:5c:61:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DF:BE:6C:E1:1A:C0:A0:46:62:A3:0F:6D:94:5D:81:38:21:FA:6C
X509v3 Authority Key Identifier:
keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/440AE6387FC211EFACAB56B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:b4:13:82:44:cf:5b:24:9b:e1:ac:cf:9c:2b:a3:64:ff:a9:
39:1d:13:c6:fe:d5:15:ed:7b:28:67:59:78:0a:3f:a9:41:2a:
d6:7e:73:f7:cd:c1:0c:c6:8f:d2:25:cc:2f:bc:dd:6f:43:63:
fa:55:c4:a2:09:81:2e:61:eb:d6:5e:2a:6a:8e:35:7c:e8:a3:
a1:ee:a0:03:0f:63:14:56:e4:ba:24:d1:bf:cf:df:d9:7e:bd:
af:5a:f9:98:0f:99:6b:7c:39:d4:3b:aa:0a:35:96:50:76:af:
bc:bb:5b:8d:43:51:ae:a6:00:95:a4:fa:09:ce:14:39:7a:30:
90:14:87:f6:b9:53:4c:9c:50:f2:7e:2b:6c:a0:e3:77:68:6d:
e5:0c:ea:db:2f:a1:d1:9f:01:1f:49:48:cd:73:23:d7:a0:a9:
15:e2:61:d8:0f:37:61:76:94:0b:43:94:6f:20:c4:c0:2e:25:
17:e5:3b:06:a0:b1:05:75:b1:86:84:37:d3:da:8f:08:62:9f:
c2:ca:ce:c5:8c:b0:69:da:e6:b4:42:82:28:c3:b4:44:6b:d3:
e7:57:73:b2:62:58:5f:33:5c:ab:95:61:ad:d3:9b:e4:ee:79:
9e:af:21:f7:4b:ce:19:1a:87:5d:a4:10:89:af:d2:83:35:cf:
40:da:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:23 2024 by rpki-client on console-ams.rpki-client.org