Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/52526144E26C11EC955D66B3F1222468.roa
File: 52526144E26C11EC955D66B3F1222468.roa (raw, json)
Hash identifier: wsdzu4KpztjrJvczumWwqzotF/Rua7W27u+H+9K+kyE=
Subject key identifier: 5F:10:AD:FC:17:E0:CB:F0:34:05:DB:76:05:60:E9:DA:D3:43:6D:65
Certificate issuer: /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial: 08
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/52526144E26C11EC955D66B3F1222468.roa
Signing time: Thu 02 Jun 2022 12:05:41 +0000
ROA not before: Thu 02 Jun 2022 12:05:37 +0000
ROA not after: Fri 31 Dec 2032 12:05:37 +0000
asID: 328222
IP address blocks: 102.128.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Validity
Not Before: Jun 2 12:05:37 2022 GMT
Not After : Dec 31 12:05:37 2032 GMT
Subject: CN=6298a795-61d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:0f:11:d2:0c:dc:19:eb:3f:3b:76:e5:b9:
b5:f8:79:bc:f1:82:55:db:c3:e7:83:9b:c2:2f:08:
6a:c2:52:4b:f8:cd:24:42:4b:a6:05:e3:c7:bb:ba:
5a:b5:a5:28:4d:3a:06:a7:8b:28:b9:c8:7c:6d:e2:
0b:25:27:54:87:5b:8c:0a:53:d2:47:fa:ed:5e:39:
78:90:01:41:77:ce:80:45:fe:6e:dd:a8:11:6f:d8:
07:0d:4e:ab:05:f3:34:92:b2:99:8c:ce:75:fc:30:
63:fe:8b:ba:cb:f6:16:41:45:4a:43:2e:4e:aa:c9:
21:b0:e1:19:be:56:ab:a8:8d:47:ce:ba:b8:29:53:
92:43:3e:63:24:f5:73:cf:01:89:4e:ed:c5:7a:48:
7c:10:f7:a8:06:53:63:55:3d:62:9f:88:8f:60:cb:
3d:5f:9a:e4:97:3e:3d:80:eb:aa:64:f0:2f:de:74:
b4:50:89:79:ee:f7:65:55:2b:8c:b6:aa:87:35:5b:
21:4c:f9:1a:c3:1b:df:b4:0f:cc:ce:0c:1a:20:3d:
4d:4a:d0:da:e3:81:42:7a:ad:cf:45:df:36:22:8d:
60:44:ad:28:88:2e:05:3c:8a:f9:76:f6:78:12:75:
c6:3c:69:68:90:42:96:63:2a:ef:f7:3c:34:08:9d:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:10:AD:FC:17:E0:CB:F0:34:05:DB:76:05:60:E9:DA:D3:43:6D:65
X509v3 Authority Key Identifier:
keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/52526144E26C11EC955D66B3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:ab:bb:00:2e:fa:18:7f:26:2e:36:cb:ce:d4:ca:9b:59:ae:
0e:48:43:6a:e8:79:19:cd:c5:bd:e7:57:3b:a8:97:55:84:bf:
32:4d:c2:bd:eb:20:25:fb:e8:99:47:a2:ab:79:94:9d:29:6d:
4b:8a:aa:3f:72:b6:03:96:a5:c4:36:94:61:b2:37:8c:4e:5e:
bf:2f:76:81:d2:be:14:aa:c4:3b:f3:a6:26:6e:fb:1f:ad:2f:
18:f3:44:97:51:3a:26:5c:06:cb:f5:59:73:3f:c2:1e:11:ea:
36:45:3d:78:4a:8e:77:7c:c4:fb:1e:c0:34:68:a5:b8:a1:b3:
b5:24:f1:5b:b5:df:a8:37:ba:66:c2:ed:a2:1b:9b:1e:b8:76:
07:9e:dd:2e:68:4b:ea:db:ed:ca:e5:74:55:86:24:43:9d:ef:
25:e3:25:55:b8:d7:5b:d6:f9:a1:dd:f0:60:70:ab:b0:b6:e4:
7b:6e:ae:26:61:6d:37:84:61:2a:bd:5e:a3:d2:31:2b:0e:46:
65:94:78:7d:c1:eb:23:73:c8:2a:58:a4:6b:b1:64:4d:22:ce:
bb:7d:a7:9a:40:57:07:08:36:5d:c8:c1:e6:da:10:6c:87:e5:
53:7f:89:b5:88:93:bc:02:1c:49:27:51:ac:88:f3:7e:5e:71:
49:21:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org