Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CF6CBCCC101711EEB5D59C524AD9E6FC.roa
File: CF6CBCCC101711EEB5D59C524AD9E6FC.roa (raw, json)
Hash identifier: vDc6FZycXpwi6NHepZfVDfhZTYJOenMbkOFfsnGnVBM=
Subject key identifier: 40:F3:D3:9E:40:1C:F9:91:86:86:5F:3B:8A:04:83:3A:CC:D6:17:4A
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 16
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CF6CBCCC101711EEB5D59C524AD9E6FC.roa
Signing time: Wed 21 Jun 2023 09:41:35 +0000
ROA not before: Wed 21 Jun 2023 09:41:31 +0000
ROA not after: Fri 21 Jun 2024 09:41:31 +0000
asID: 37684
IP address blocks: 102.221.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Validity
Not Before: Jun 21 09:41:31 2023 GMT
Not After : Jun 21 09:41:31 2024 GMT
Subject: CN=6492c5ce-77cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:aa:8e:2e:8f:2f:5b:95:dd:eb:67:0f:c1:
27:22:51:e9:c6:cd:cf:a6:42:20:5c:bf:8c:b3:3b:
03:9b:ed:90:2c:16:dd:24:89:c5:ed:75:16:8d:8e:
bb:7c:c8:55:a2:11:2e:88:e9:e5:18:5f:38:1c:d3:
d5:5c:3e:d7:cc:67:f7:b6:3e:a5:22:32:2f:5f:37:
2f:10:31:8e:60:c3:dc:90:d2:b4:92:13:4a:8c:50:
10:b0:7f:e7:a6:8d:dd:76:0f:9d:c5:c7:09:f4:51:
fd:9d:50:cc:33:b3:41:b7:3a:1a:00:26:18:9e:b5:
fb:3d:27:6c:bf:49:44:0b:2c:53:ba:e4:86:7e:b4:
0d:78:3a:56:05:e2:8b:99:af:0f:6b:e2:66:2e:82:
9a:0c:22:52:b2:70:6e:b8:19:51:eb:db:a4:64:7a:
73:0a:15:51:ac:69:71:c6:f0:cb:59:ce:22:8a:cc:
fd:fb:82:8e:e2:0b:10:0f:21:68:56:aa:d8:b0:f2:
88:38:e4:a7:7f:22:1d:89:38:a2:72:00:50:95:71:
cd:e2:05:8a:84:a9:92:59:3a:2a:03:66:ea:7d:c4:
e5:0c:de:63:b5:39:89:dc:d8:58:eb:28:aa:1a:14:
4b:cb:b8:0c:8b:38:8e:25:00:73:c1:ac:cd:d6:83:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F3:D3:9E:40:1C:F9:91:86:86:5F:3B:8A:04:83:3A:CC:D6:17:4A
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CF6CBCCC101711EEB5D59C524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0d:f3:35:99:00:25:05:91:ba:d0:f2:9f:de:34:82:8b:b8:
dd:91:1b:e3:f8:11:e1:d1:70:32:aa:e0:d7:76:40:9e:d1:32:
02:e0:76:9f:79:e6:74:f3:8d:15:8c:59:0b:df:33:be:f2:cd:
2b:ed:4c:7f:40:79:33:9d:ae:f2:dc:3b:77:6a:4a:48:f4:86:
ea:0f:72:9a:6b:f4:cf:35:85:f7:86:a6:a6:0a:bd:ed:c5:f7:
43:df:4a:cc:21:50:08:46:1a:0e:71:88:7f:3c:8a:d9:e1:25:
bb:84:f7:8c:b2:b7:84:24:27:42:4b:cf:fd:cc:66:5e:99:a8:
fd:5b:6b:ad:a1:cc:14:ac:8b:f8:3b:e0:09:6e:0b:ca:8c:e3:
ce:a3:e3:3b:b6:85:f9:38:c7:35:dd:d4:ba:7d:1b:32:15:8b:
47:05:b4:11:b9:c6:f0:e1:70:48:86:9a:f4:d0:a7:7c:f7:d0:
6c:d5:12:45:24:fb:5e:92:54:2a:c8:e5:67:50:e2:dd:9a:54:
48:6e:4e:0a:74:26:9e:ac:0f:8f:02:0d:0d:b4:29:0d:7e:1a:
e1:80:b7:31:c2:47:8f:4f:36:48:66:b4:a7:79:c5:01:e3:fa:
51:af:b1:be:71:07:bb:4a:7f:29:39:75:01:ff:34:a0:82:e3:
27:8b:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:19 2024 by rpki-client on console-ams.rpki-client.org