Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/0FF374D2987311EEA3CBC46ED25BE465.roa
File: 0FF374D2987311EEA3CBC46ED25BE465.roa (raw, json)
Hash identifier: BHH7zUUW9dkSFd6Vm0HYgvG7mdDbrxJsOem3Aruk+8Y=
Subject key identifier: AD:4E:12:A1:F1:78:C2:9F:D5:8B:FB:F8:7A:88:AA:17:D4:97:ED:6D
Certificate issuer: /CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Certificate serial: 15
Authority key identifier: 18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/0FF374D2987311EEA3CBC46ED25BE465.roa
Signing time: Mon 11 Dec 2023 22:17:25 +0000
ROA not before: Tue 12 Dec 2023 22:17:22 +0000
ROA not after: Mon 12 Dec 2033 22:17:22 +0000
asID: 329263
IP address blocks: 102.213.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Validity
Not Before: Dec 12 22:17:22 2023 GMT
Not After : Dec 12 22:17:22 2033 GMT
Subject: CN=65778a75-6843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:a6:9a:29:ae:f9:4f:6e:6a:61:16:4e:d6:
67:bb:88:65:26:bc:34:3f:42:5a:9b:27:f6:df:c3:
bc:72:c6:65:93:c6:bb:82:14:c2:09:e2:25:1d:0b:
fb:f4:59:c1:b8:80:c2:49:61:a3:9e:23:0b:f9:b5:
62:b0:32:b1:33:67:44:d5:b4:f5:e0:69:36:22:0d:
ed:ea:e8:f1:7a:d7:5a:b0:b1:4d:a1:d3:a2:3b:69:
62:1c:74:d9:49:e2:15:6f:69:f5:51:18:fe:cd:fb:
7d:31:4b:ef:67:1a:a0:3e:9d:37:0b:2a:6a:38:84:
c0:01:83:98:03:65:21:4f:2e:84:52:7d:16:34:d0:
22:0d:20:c2:c4:57:2c:02:31:7e:94:cb:f0:b9:f1:
e7:15:aa:75:15:60:27:81:65:a2:bc:ae:bf:e6:85:
47:0c:b0:fe:75:98:54:41:b7:83:d8:93:58:73:4e:
f6:9f:b9:9c:38:bb:0a:7b:12:5b:34:c1:fc:64:b3:
21:f8:f8:f4:a4:34:8a:26:5f:8d:f7:66:2b:ee:78:
1a:06:f7:11:0e:fc:35:0c:dc:18:d6:4f:05:18:e0:
50:1c:82:1f:05:69:e5:bb:ca:93:f1:75:a0:c1:ce:
20:fc:b0:97:60:eb:70:68:12:05:b3:0d:5a:ca:17:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:12:A1:F1:78:C2:9F:D5:8B:FB:F8:7A:88:AA:17:D4:97:ED:6D
X509v3 Authority Key Identifier:
keyid:18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/0FF374D2987311EEA3CBC46ED25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.180.0/22
Signature Algorithm: sha256WithRSAEncryption
41:86:e2:fc:bb:30:43:34:8d:4c:07:cd:67:b3:17:02:6a:59:
e9:e4:52:b4:7c:e4:17:1b:71:9e:1a:03:13:f6:9f:18:3b:26:
45:28:68:60:1a:2d:38:e8:60:81:2a:70:6d:37:ca:24:fb:51:
d4:a0:b1:0c:6a:eb:5d:e1:c1:0c:63:48:3f:e1:9d:42:54:ae:
f3:bb:f8:74:81:da:e7:c8:c9:49:6f:e8:0c:2d:76:71:24:d3:
22:74:f1:24:78:f6:17:33:cd:0c:c0:41:f1:fe:1d:4f:82:cc:
0f:67:b1:8a:cf:38:07:83:2e:3d:a9:77:b4:7a:63:b3:e9:3b:
1b:bd:e3:35:42:cb:75:fc:80:32:96:d1:12:1b:64:8b:14:c3:
c0:4a:b3:95:31:fd:68:8d:39:45:df:d1:c4:0b:67:10:7e:38:
d1:c0:81:24:d8:ff:dd:81:23:65:c1:ce:36:20:57:e8:38:4f:
1a:64:81:4c:eb:97:e2:ae:5a:89:29:ab:63:3d:61:cc:c9:c7:
3e:ed:a7:02:68:6f:32:25:d6:c8:8d:03:a8:33:0d:cf:c0:a9:
fe:3b:db:82:8d:6e:2e:07:a4:9f:bb:5c:62:01:d8:47:6f:d3:
41:02:62:b3:b3:86:01:4e:aa:76:92:f7:d5:c1:36:36:ff:75:
29:ac:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:36 2024 by rpki-client on console-fra.rpki-client.org