Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/7BF8CB1A216B11EFB08D5D177DDC24C2.roa
File: 7BF8CB1A216B11EFB08D5D177DDC24C2.roa (raw, json)
Hash identifier: 8B0YCo/VKxR+j2N3GuqRtbGq6x4x2IoScSr7pqTTOtE=
Subject key identifier: 1F:5C:74:47:4C:57:1E:FC:D2:C6:D4:A1:C5:56:7A:58:1C:22:AD:3F
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 019A
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/7BF8CB1A216B11EFB08D5D177DDC24C2.roa
Signing time: Mon 03 Jun 2024 05:38:20 +0000
ROA not before: Mon 03 Jun 2024 05:38:17 +0000
ROA not after: Tue 01 Jan 2030 05:38:17 +0000
asID: 37684
IP address blocks: 102.221.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 29 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Validity
Not Before: Jun 3 05:38:17 2024 GMT
Not After : Jan 1 05:38:17 2030 GMT
Subject: CN=665d56cc-dc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:8e:ed:d4:4b:f4:f2:0f:a6:73:54:45:0e:
b9:66:43:11:e5:39:df:ec:14:ff:1f:b5:e3:e4:e6:
41:d3:ab:d8:9d:e7:9e:65:8b:57:6d:d9:15:86:b3:
fb:06:7e:04:a9:fc:95:94:24:57:30:dc:10:74:14:
8e:bf:82:54:26:4f:04:2b:7c:23:26:b8:e0:00:7c:
02:a6:82:09:ba:4f:08:db:8e:32:d7:68:bc:50:4c:
76:75:60:27:f0:0b:be:bd:77:c5:11:88:c3:b2:5f:
ef:df:92:4f:35:73:a1:40:6a:3b:ed:79:92:65:1d:
84:c7:c3:16:f6:6e:6d:37:3f:8b:79:a4:c9:11:52:
b9:0c:bc:60:19:f7:d0:91:46:7c:da:6c:19:ca:3e:
70:72:d2:f4:d5:76:e8:70:80:89:ab:63:88:e2:ed:
de:22:43:28:ee:5e:31:84:7f:da:7f:0c:c9:2f:8c:
16:e1:89:2a:5d:52:d7:eb:94:ef:43:e3:50:8a:b1:
4d:24:0e:77:65:d0:dd:10:12:5f:a9:cb:1f:58:b9:
48:a2:24:df:e0:0e:c5:be:a9:99:31:83:ab:84:15:
73:14:f6:e3:3b:1c:3c:e9:03:69:8b:33:04:5a:60:
90:c8:7a:a5:f8:65:fc:e5:cf:5d:91:20:0b:22:77:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5C:74:47:4C:57:1E:FC:D2:C6:D4:A1:C5:56:7A:58:1C:22:AD:3F
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/7BF8CB1A216B11EFB08D5D177DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b4:a2:1e:2d:b4:63:d8:f0:aa:87:cc:05:40:c1:9b:fd:c2:
77:40:cd:34:5b:f8:57:e4:1e:40:45:08:88:71:26:e7:0d:32:
bf:ae:c1:9e:98:40:87:f6:7f:6e:de:fb:87:fd:0e:6e:df:79:
01:38:43:85:c9:ec:47:6d:31:20:05:da:ce:2f:0b:37:24:a9:
f4:95:9f:eb:81:d1:18:24:a7:d5:00:2c:04:12:8b:20:47:ba:
38:c8:c5:93:63:38:e8:4e:3e:15:cb:6a:b2:b0:7e:5e:6a:3e:
0f:78:71:90:f8:0c:34:17:bc:21:00:be:22:29:da:bb:08:ca:
54:c9:0c:4d:2f:85:01:d9:77:94:c4:b9:c6:b9:44:3f:a3:9b:
3a:e6:fd:0c:74:cd:0a:b2:01:43:0e:ff:84:c7:c4:98:99:e3:
e4:6a:5f:d6:a6:f6:18:1a:23:3c:a7:25:df:33:bb:79:a4:9d:
15:8a:49:e4:7f:3d:65:a2:57:23:6b:e1:9f:e8:a6:22:c6:ee:
20:cc:24:0e:76:22:0f:48:a4:db:4f:5a:32:e9:7e:a5:99:9e:
d5:cd:9f:73:17:9b:bf:06:2b:4f:f1:9e:7b:a7:e2:09:2a:43:
10:96:be:a6:e7:8a:df:1c:a7:34:d1:3d:04:22:6a:c8:62:04:
2f:25:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 06:28:40 2024 by rpki-client on console-fra.rpki-client.org