Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/90AE430C590111EDB016F6F1F1222468.roa
File: 90AE430C590111EDB016F6F1F1222468.roa (raw, json)
Hash identifier: 3upW7kKfQQB5ccFKPGm0OT2GXHcTu33u7KYhatRBj9E=
Subject key identifier: 82:FE:74:43:A8:0B:C1:14:34:80:66:81:32:B0:0D:54:91:75:92:39
Certificate issuer: /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial: 02
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/90AE430C590111EDB016F6F1F1222468.roa
Signing time: Mon 31 Oct 2022 09:51:17 +0000
ROA not before: Mon 31 Oct 2022 09:51:14 +0000
ROA not after: Fri 01 Oct 2032 09:51:14 +0000
asID: 328474
IP address blocks: 102.214.192.0/24 maxlen: 24
102.214.193.0/24 maxlen: 24
102.214.194.0/24 maxlen: 24
102.214.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Validity
Not Before: Oct 31 09:51:14 2022 GMT
Not After : Oct 1 09:51:14 2032 GMT
Subject: CN=635f9a95-c947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:57:42:ea:90:37:03:6c:d9:24:f7:02:da:
1d:88:6d:f0:1b:76:bb:19:8f:20:ce:f1:ec:db:d9:
5c:ff:b3:66:91:ea:f9:34:b1:c6:10:c4:92:1c:6a:
53:f4:6e:d8:da:2e:85:3b:5f:52:5d:2a:5d:21:63:
4b:26:7f:8b:cc:05:83:42:96:9f:29:69:2e:aa:30:
bb:09:19:63:1e:ed:7d:e6:0d:5d:d9:94:ad:1e:2d:
80:56:d0:62:c4:b9:34:95:19:7f:83:70:7e:f9:eb:
a4:0d:38:4f:f5:10:92:1b:3e:08:49:0b:29:4a:ee:
82:f6:47:a8:8e:fa:3d:7a:96:14:29:21:03:b0:f1:
82:79:e8:2f:59:55:18:7c:3c:fc:07:95:cb:7d:fa:
62:fd:80:09:b6:97:b2:7d:31:c2:62:45:91:45:ab:
ed:c3:10:9f:db:cc:7c:b2:ca:6d:87:8b:86:b6:8a:
b9:df:a9:05:59:ec:96:50:e2:f3:58:e0:b6:96:46:
67:a5:38:22:95:34:dd:ad:9c:89:5d:82:a6:ec:75:
e2:bf:79:8c:a7:e2:90:82:a0:60:54:74:93:d4:54:
29:05:65:5f:d6:e6:eb:f8:b1:73:bc:f9:81:e7:09:
93:03:a1:b1:6b:49:5b:ec:33:31:98:59:11:f4:a1:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FE:74:43:A8:0B:C1:14:34:80:66:81:32:B0:0D:54:91:75:92:39
X509v3 Authority Key Identifier:
keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/90AE430C590111EDB016F6F1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.192.0/22
Signature Algorithm: sha256WithRSAEncryption
86:6f:39:cb:3b:89:44:7e:fc:94:41:1a:b9:32:c3:ef:8f:03:
ad:ec:b0:23:c0:36:50:7e:f6:61:9b:5c:7a:d4:82:bc:6b:7b:
98:ba:e7:41:28:04:82:1b:14:25:f9:28:dd:64:af:57:6b:2c:
88:07:05:5b:03:09:c9:77:5f:88:d9:43:f2:29:aa:b6:39:7b:
fa:ab:47:6d:20:b1:fb:64:e0:27:21:6a:fc:f5:02:e8:89:9b:
c1:e2:5b:10:e8:14:ae:30:55:72:b8:fe:d1:5d:20:82:61:0b:
0d:5a:d1:9f:a1:db:5c:69:9f:21:f5:7c:02:b6:6f:27:64:db:
2a:26:69:cc:00:5b:5c:a3:f1:c2:f4:7b:73:c1:bc:29:d6:72:
82:dc:19:8c:e0:b3:09:2c:cc:bb:d1:7d:60:b8:ad:fb:52:3f:
45:ce:4c:07:da:a7:b5:0c:ff:e5:4a:66:b0:a0:3b:6b:83:ec:
e4:6a:c7:cc:d8:06:83:32:3d:41:78:a5:ab:a9:4d:d6:8b:fe:
62:18:87:25:6a:63:3f:e6:d7:96:7c:53:60:38:82:17:20:dd:
e2:4e:4d:08:d4:4a:46:0b:a1:4d:48:d2:d9:dd:5a:cf:fe:b3:
ad:14:ef:f9:de:7a:5a:13:4c:fa:83:d5:d6:c0:d0:2d:f6:b1:
4f:d4:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:28 2024 by rpki-client on console-ams.rpki-client.org