Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/EBFBD6E61C4811EF8DA9FC307DDC24C2.roa
File: EBFBD6E61C4811EF8DA9FC307DDC24C2.roa (raw, json)
Hash identifier: Uo9oJGDvBKqk9WcNSro/GD2IK8co4yKnO+0R+FSe34k=
Subject key identifier: 6D:7A:0F:93:8A:28:7E:BC:65:F0:1F:12:5D:0C:1B:46:EE:8C:D9:DC
Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial: 0B
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/EBFBD6E61C4811EF8DA9FC307DDC24C2.roa
Signing time: Mon 27 May 2024 16:48:19 +0000
ROA not before: Tue 28 May 2024 16:48:16 +0000
ROA not after: Thu 28 May 2026 16:48:16 +0000
asID: 37517
IP address blocks: 102.213.204.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Validity
Not Before: May 28 16:48:16 2024 GMT
Not After : May 28 16:48:16 2026 GMT
Subject: CN=6654b953-c768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:d9:8c:4e:51:fd:54:96:99:41:8a:eb:56:
c0:4a:f0:16:05:50:45:5d:45:7d:91:50:0e:7e:1d:
73:3d:ad:70:e0:d4:8d:9b:e0:d9:6f:73:f1:db:6c:
8f:30:68:bf:ec:5b:4b:77:50:a0:a0:35:2d:71:84:
d7:a7:0f:c5:40:d8:d0:9c:c4:f3:f6:92:28:b4:0d:
71:57:7b:29:87:d8:42:df:e4:75:76:6c:89:36:02:
25:97:5f:63:47:62:6e:6b:ab:40:45:31:db:af:f6:
70:a4:7f:aa:c4:7a:63:73:a9:25:98:b2:46:7e:a5:
f3:09:14:51:ee:73:0b:bb:0f:ab:9a:f4:25:6d:77:
2b:94:75:a6:9c:53:98:1b:8b:48:36:6f:5b:9b:bb:
74:be:a2:6a:36:37:aa:24:77:ee:75:08:87:02:67:
b7:8e:6e:0c:2f:02:81:4f:a6:f7:b8:b8:08:68:4b:
21:be:39:b9:89:a0:42:e9:bd:d9:f4:4e:cc:64:e1:
62:69:84:d8:fe:c1:02:a9:8b:56:d5:43:ee:79:3a:
c2:b1:73:33:6a:df:5c:fd:cb:9d:ae:6e:b2:b1:b5:
2d:34:6a:7d:e8:49:8e:5c:39:2d:d5:ae:5f:91:ee:
62:50:3d:5c:19:ac:d0:16:a9:3a:6f:52:93:63:5c:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:0F:93:8A:28:7E:BC:65:F0:1F:12:5D:0C:1B:46:EE:8C:D9:DC
X509v3 Authority Key Identifier:
keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/EBFBD6E61C4811EF8DA9FC307DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.204.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9e:55:a8:97:3a:4a:84:c5:ec:5f:25:31:14:7f:1d:0f:0e:
e2:74:87:d7:89:31:70:c2:c2:68:42:fe:02:3b:db:30:b0:8c:
63:90:1b:2e:90:6d:bd:da:c8:81:30:30:7c:07:2a:9b:fb:31:
ff:aa:0c:56:cf:a6:c9:99:c2:0f:fb:9e:29:95:d0:ca:97:2a:
06:bd:94:f6:34:e8:6b:5b:b2:fb:25:d5:4a:76:32:f5:d0:84:
30:62:17:33:68:f9:e7:cd:ff:cb:f2:b9:86:6b:5f:f0:84:8d:
bf:0a:f2:62:83:1b:f9:e5:19:28:3c:2e:26:02:ef:f5:b5:97:
a6:c8:0d:33:e4:b5:d9:6c:9a:46:48:b6:c1:9c:2c:b4:65:40:
ca:9f:58:9b:53:b1:0f:91:f5:c1:7a:d7:e0:5c:f0:f2:b5:ce:
5f:9e:8f:dc:51:2e:cd:c3:d8:e8:63:e0:7c:b3:8a:5e:9a:51:
96:97:a7:1b:4c:96:ab:c6:2e:2e:81:fc:18:37:e3:8d:ee:27:
63:e8:69:d6:a2:27:a4:88:c3:d1:0f:98:8b:2c:8f:00:d8:28:
e1:fa:a4:51:ae:5e:ee:c3:54:0b:23:a1:b1:e2:fa:08:a1:0d:
1c:48:9f:e7:e2:78:c1:f9:5d:85:3b:bb:03:12:90:00:ec:76:
b9:3f:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:26 2024 by rpki-client on console-fra.rpki-client.org