Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/A894FB1C3C8211EF95985EBB762E951A.roa
File: A894FB1C3C8211EF95985EBB762E951A.roa (raw, json)
Hash identifier: Mmlz+vBHblp6/MTYK5P6MHZIQ1tn5UYnx6KVbuNc9uE=
Subject key identifier: AA:C1:70:4E:84:09:4E:BD:88:09:5D:19:1E:45:F6:D3:E4:4D:F4:4D
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 03EF
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/A894FB1C3C8211EF95985EBB762E951A.roa
Signing time: Sun 07 Jul 2024 17:02:14 +0000
ROA not before: Sun 07 Jul 2024 17:02:09 +0000
ROA not after: Tue 07 Jul 2026 17:02:09 +0000
asID: 15399
IP address blocks: 102.208.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: Jul 7 17:02:09 2024 GMT
Not After : Jul 7 17:02:09 2026 GMT
Subject: CN=668aca16-9628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:eb:7c:3a:5b:19:4c:1d:6e:a4:64:56:85:
24:19:19:65:07:50:94:42:ff:d2:76:ec:15:d2:87:
2b:17:d4:ca:78:30:4a:09:76:1e:74:42:f9:99:ed:
ec:bc:f3:30:89:f7:78:12:38:ff:4c:92:c8:5a:b3:
33:83:a2:02:98:d0:e3:9d:7f:80:af:06:49:19:22:
8f:ed:0f:aa:6c:9b:e4:24:aa:10:0e:6c:6b:85:78:
68:f9:6d:f3:23:d8:46:f9:bb:fa:ba:09:51:b8:63:
1b:a9:6a:75:15:5d:04:a0:39:f6:35:8f:f2:87:6a:
15:d9:65:15:32:71:5f:49:b2:fd:03:d3:81:f6:55:
71:ad:a0:32:0f:e3:ee:8f:16:30:a4:1e:6e:30:7c:
3c:15:74:e0:bc:e8:16:ec:49:4c:76:ab:37:e3:b9:
c5:f2:f6:1c:49:c5:e5:1d:fb:cd:2e:fd:e8:ee:60:
01:aa:7f:0f:17:03:91:eb:d0:7b:90:9c:f0:68:7b:
d6:ca:4f:11:5d:da:6b:a5:04:8d:06:7b:2f:db:da:
1c:c3:f7:b7:1e:5f:d3:6c:4b:4b:2b:c8:93:48:1d:
63:8c:4c:b7:f5:36:90:44:c4:b7:95:6c:7c:65:dc:
5d:ff:15:83:46:ff:0b:cb:f2:f5:47:63:4a:4d:c2:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:70:4E:84:09:4E:BD:88:09:5D:19:1E:45:F6:D3:E4:4D:F4:4D
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/A894FB1C3C8211EF95985EBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:0b:fa:60:55:24:97:bb:84:f9:65:6e:27:72:1e:2c:be:41:
a0:77:8d:7c:08:8e:1f:40:77:c6:e6:ed:96:22:4f:da:4e:12:
63:ed:f4:05:69:23:7b:89:5c:87:5a:30:ed:17:c3:7e:85:25:
31:d0:a7:33:d9:23:98:d2:09:1d:31:62:e1:f9:6b:dc:8e:19:
e4:11:f9:a6:26:bc:87:a7:28:d7:0c:78:e5:17:26:9e:b1:29:
e7:b6:10:7b:85:5a:99:95:3c:7f:5e:95:3b:ee:79:e8:36:9c:
23:ef:2a:d9:b2:1b:99:ac:d3:f3:4a:4f:bb:1f:6d:42:d1:f7:
36:52:23:02:51:1b:b7:c5:f9:79:37:8d:a2:8c:a0:79:10:7d:
89:fd:bc:c2:fa:62:23:a1:b3:78:01:cf:50:ca:60:00:3d:6a:
df:26:a7:3c:bf:d4:ba:b0:16:1a:d6:47:50:74:c6:d6:76:f3:
55:7e:74:50:e1:d6:fe:12:7e:81:73:1d:2c:3b:cf:81:11:5c:
d5:ff:1e:6b:cb:55:3d:1f:4a:c9:6f:4a:58:f0:20:4e:48:92:
27:a2:04:f1:c8:11:83:86:75:47:25:b7:34:f1:96:e5:2c:f7:
6d:81:1c:98:fb:3b:2d:a9:be:9e:0b:c3:8e:69:b3:b4:fa:93:
7f:d3:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:28 2024 by rpki-client on console-ams.rpki-client.org