Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/073BD64605C911EE95E74F304AD9E6FC.roa
File: 073BD64605C911EE95E74F304AD9E6FC.roa (raw, json)
Hash identifier: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=
Subject key identifier: A1:20:0B:D9:78:A3:60:C1:CE:F7:3C:B9:8C:E7:B1:06:D0:80:79:88
Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial: 0195
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/073BD64605C911EE95E74F304AD9E6FC.roa
Signing time: Thu 08 Jun 2023 06:52:26 +0000
ROA not before: Thu 08 Jun 2023 06:52:22 +0000
ROA not after: Tue 08 Jun 2027 06:52:22 +0000
asID: 327996
IP address blocks: 102.212.84.0/22 maxlen: 22
102.212.84.0/24 maxlen: 24
102.212.85.0/24 maxlen: 24
102.212.86.0/24 maxlen: 24
102.212.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 May 2024 00:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Validity
Not Before: Jun 8 06:52:22 2023 GMT
Not After : Jun 8 06:52:22 2027 GMT
Subject: CN=64817aaa-a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:e6:79:44:56:cf:af:b4:e0:2d:c1:d6:cd:
c9:7b:fa:7b:d0:5c:56:29:46:10:a5:96:a8:4a:59:
20:60:0a:2f:1a:8a:09:42:bd:48:5d:ef:7d:61:86:
8c:9d:07:7e:4f:ed:d5:e2:bb:c7:7e:83:54:95:f2:
06:8f:70:5d:c9:3c:1d:f9:94:f3:3d:08:b3:3a:8f:
82:02:39:04:50:04:ad:80:c3:c4:b8:82:97:5d:24:
77:97:bd:66:89:dc:86:10:4d:14:ed:6a:a1:92:b1:
b9:59:66:10:c8:25:e7:02:1e:5e:9a:90:fd:6c:85:
07:15:fc:82:58:17:2a:98:45:2a:6a:e3:df:c9:60:
7f:4e:d0:a2:14:89:a3:8f:9c:81:47:80:2d:a4:c0:
34:8d:7b:da:ca:f4:c3:73:c0:c0:71:41:35:aa:ae:
97:b9:66:92:17:1f:75:8b:20:9e:3f:bd:88:70:84:
9e:f4:53:47:f3:cc:bd:33:9b:66:50:87:ea:a1:42:
30:02:5c:4d:e8:81:66:5f:1e:f8:5e:8e:e8:1d:56:
13:fb:02:e9:15:91:16:17:00:40:b6:52:9e:47:a9:
cd:89:2b:e4:20:0f:30:b2:2d:cd:70:ad:6f:9a:bd:
78:6a:e7:f2:74:aa:f6:ae:14:73:a2:ba:90:50:07:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:20:0B:D9:78:A3:60:C1:CE:F7:3C:B9:8C:E7:B1:06:D0:80:79:88
X509v3 Authority Key Identifier:
keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/073BD64605C911EE95E74F304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:1f:6e:e9:b7:f7:6d:1f:a8:88:65:22:f7:5e:1c:3f:44:93:
b5:d0:f1:88:7f:8f:5d:f9:75:94:42:13:9d:62:a6:e0:bc:89:
c0:b7:36:b0:e2:fe:58:16:30:c3:52:5d:40:51:ef:c4:89:b8:
37:98:3a:49:95:fb:1b:4b:0a:9c:78:5f:02:4f:ab:b2:f3:0a:
0d:57:b5:a9:e7:9a:ef:73:ad:b2:25:e1:ab:a5:1d:14:38:73:
b0:b5:4e:5e:ad:6c:0d:61:38:4b:7b:f0:c2:73:28:6c:ee:97:
6a:15:5b:9b:02:fb:02:46:8c:c6:18:c4:e9:af:7e:e1:ed:83:
c1:19:02:06:1c:eb:f7:81:f0:9d:09:4a:31:36:46:9f:1b:1f:
5b:53:f7:57:a2:b9:a2:11:c9:11:9f:20:ab:00:46:47:59:7c:
ba:2a:2c:48:91:71:fa:d3:49:36:6f:96:19:09:56:57:d9:4d:
59:c1:fc:7b:9b:ae:fb:94:30:bf:ac:f1:ff:e2:82:b6:21:e3:
8d:21:cc:3f:c4:8b:1e:ce:9d:2d:79:36:79:e4:df:37:12:3d:
11:a4:cd:be:8c:38:30:e0:0e:5a:17:48:b8:e3:59:7d:e7:9a:
c1:8f:6b:d1:a7:89:9a:85:95:bb:83:8a:46:8f:cf:17:f5:0e:
38:f0:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 02:25:05 2024 by rpki-client on console-ams.rpki-client.org