Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/1FB53178454811ED8E8758C9F1222468.roa
File: 1FB53178454811ED8E8758C9F1222468.roa (raw, json)
Hash identifier: R9YRlsGTg70iBEYAkRvK51LsXvMfnsnbrQmFfaVOaVg=
Subject key identifier: F6:B7:59:7C:3F:F9:D5:A4:A5:C6:1A:BA:11:27:9A:19:70:18:70:F2
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 013C
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/1FB53178454811ED8E8758C9F1222468.roa
Signing time: Thu 06 Oct 2022 07:25:59 +0000
ROA not before: Thu 06 Oct 2022 07:25:54 +0000
ROA not after: Thu 31 Oct 2024 07:25:54 +0000
asID: 15399
IP address blocks: 102.215.28.0/22 maxlen: 22
102.215.148.0/22 maxlen: 22
102.215.160.0/22 maxlen: 22
102.216.60.0/22 maxlen: 22
102.216.244.0/22 maxlen: 22
102.217.80.0/22 maxlen: 22
102.218.28.0/22 maxlen: 22
102.219.120.0/22 maxlen: 22
102.219.216.0/22 maxlen: 22
102.221.20.0/22 maxlen: 22
102.222.84.0/22 maxlen: 22
2c0f:e958::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: Oct 6 07:25:54 2022 GMT
Not After : Oct 31 07:25:54 2024 GMT
Subject: CN=633e8307-c8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:72:6e:7d:96:48:77:61:80:c4:b2:c2:31:
77:9c:a9:6c:58:7f:ec:72:8a:cd:1b:bd:94:a5:5b:
51:4c:00:65:bf:3c:f3:38:66:6f:f0:20:33:b5:02:
97:19:92:c6:c4:fd:64:98:58:df:09:78:d1:7d:15:
47:fb:25:1c:bc:14:bf:34:06:cf:07:a9:f6:71:1d:
81:ac:c9:f5:5f:65:84:e0:1e:fb:95:e0:d4:8a:89:
37:79:8c:6a:68:6c:99:fd:21:1b:35:a1:11:0f:08:
64:d2:92:01:63:36:1e:3d:1c:c8:98:e1:86:4f:26:
ac:d3:55:74:d7:84:aa:01:60:ac:49:5c:24:67:46:
18:ec:cc:e6:53:dc:37:2b:5c:ad:34:aa:58:bf:db:
59:a9:c8:11:ff:d2:c1:b6:05:fb:9e:67:b9:96:c6:
db:f4:1d:ba:8f:a0:2b:8e:e9:83:f1:78:a0:93:d0:
7b:ee:cb:66:59:ec:9f:d1:0e:d7:d6:7b:ea:ce:59:
63:aa:28:f9:f1:3b:74:f5:43:82:cb:13:44:4c:a1:
c5:84:72:bd:e0:83:40:d5:a1:d1:e8:e5:e9:9e:87:
ed:83:07:6f:46:5c:85:f9:e8:06:60:43:23:5e:ee:
23:fb:d8:9b:df:1f:79:8f:32:12:83:24:8a:ea:0a:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:59:7C:3F:F9:D5:A4:A5:C6:1A:BA:11:27:9A:19:70:18:70:F2
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/1FB53178454811ED8E8758C9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.28.0/22
102.215.148.0/22
102.215.160.0/22
102.216.60.0/22
102.216.244.0/22
102.217.80.0/22
102.218.28.0/22
102.219.120.0/22
102.219.216.0/22
102.221.20.0/22
102.222.84.0/22
IPv6:
2c0f:e958::/32
Signature Algorithm: sha256WithRSAEncryption
21:62:32:87:7e:7d:18:82:4a:9f:24:9d:23:6c:a1:29:ed:66:
3e:ed:f7:89:89:ad:a7:99:60:57:ca:11:18:a8:b6:d5:de:a2:
24:09:86:43:a4:49:f1:b4:30:fc:be:ab:92:56:21:cd:a4:59:
e9:4c:8c:e1:38:94:33:f6:0b:92:19:e7:dc:bc:d5:59:f9:96:
4d:5e:5f:32:6c:e9:9f:38:3f:02:d3:36:4d:f9:d2:58:0a:f4:
f7:82:3d:f5:fb:78:c9:31:89:8a:d4:e9:ae:85:46:8a:23:95:
cf:2d:0b:9b:1a:62:57:75:bd:83:8c:c5:5f:e1:7d:f9:a1:24:
23:fe:a1:95:a6:7a:46:31:5c:0d:e0:d1:cb:82:36:dc:24:39:
3e:dc:9c:e3:c3:50:bb:b1:e3:22:fb:cf:95:3e:2d:06:0d:a7:
ce:41:29:94:88:a0:c8:22:0e:c7:1e:b7:92:0e:43:6a:f2:37:
c0:97:8b:9e:f6:dd:ea:09:03:3b:2e:09:b1:aa:b0:80:0e:65:
7d:c9:3b:46:8d:0a:87:94:6e:e2:e9:51:c9:73:cd:ad:d4:86:
a2:3b:ec:76:66:2e:2a:4b:22:e1:56:be:8c:a1:3c:dc:40:b6:
39:20:23:cd:35:04:f3:41:ba:73:2b:ed:99:8f:9e:36:55:c3:
6e:49:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:40:10 2024 by rpki-client on console-ams.rpki-client.org