Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/A0A710B2C1DC11EBBC70BD22F8AEA228.roa
File: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (raw, json)
Hash identifier: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=
Subject key identifier: EE:3E:C3:1E:37:B7:DF:D0:FB:AF:50:7F:84:C6:D6:28:99:AF:00:66
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 0309
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/A0A710B2C1DC11EBBC70BD22F8AEA228.roa
Signing time: Mon 31 May 2021 06:51:30 +0000
ROA not before: Mon 31 May 2021 06:51:26 +0000
ROA not after: Sat 31 May 2031 06:51:26 +0000
asID: 327733
IP address blocks: 102.23.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: May 31 06:51:26 2021 GMT
Not After : May 31 06:51:26 2031 GMT
Subject: CN=60b48772-dc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:2d:01:fb:97:a9:cf:dd:ca:89:5c:d3:9f:
02:de:ca:5b:34:bb:fa:09:cd:cc:a6:bc:75:67:54:
53:3a:98:0d:78:59:21:89:b4:f9:fa:68:ee:57:ea:
85:a2:b0:87:ad:11:e1:4f:51:d5:0f:24:3f:42:68:
a8:ce:48:cd:70:9f:2c:71:1e:fb:cd:4f:00:29:10:
ee:36:7d:b9:f0:03:58:9c:a1:24:3b:54:43:c7:49:
ff:e2:8a:b0:5b:fc:dc:a7:87:da:45:f6:02:dd:39:
d9:09:b1:0e:7e:90:ec:5e:24:9d:ae:37:69:c6:70:
6b:9d:02:ae:d4:76:1f:e4:d3:b0:18:19:0a:ef:e8:
0e:4b:ec:ad:38:e0:03:79:90:bf:03:fa:7b:37:f1:
18:e4:0f:83:78:0c:51:28:01:03:7e:66:e2:ef:0a:
68:9a:ec:26:e4:13:23:93:ab:46:d0:38:78:c7:b3:
6e:69:b1:7d:b4:ef:dc:67:3b:08:09:0e:84:97:28:
62:db:78:02:b1:18:6d:39:9c:77:89:7b:75:b5:c2:
74:e1:d6:2c:13:89:c0:c0:bd:c2:cf:76:41:b4:1f:
d4:a8:ff:0d:42:57:85:2d:20:37:d5:ea:55:ec:0a:
57:20:e4:6f:99:bb:65:8f:a1:0a:97:36:ca:95:2e:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3E:C3:1E:37:B7:DF:D0:FB:AF:50:7F:84:C6:D6:28:99:AF:00:66
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/A0A710B2C1DC11EBBC70BD22F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.93.0/24
Signature Algorithm: sha256WithRSAEncryption
05:aa:5f:3f:62:58:fb:7c:e3:2d:73:03:ca:4a:0c:28:f0:d8:
3b:9c:8a:0c:55:67:96:a7:fa:39:a0:e6:e7:0a:1d:71:a1:d2:
e3:f7:f5:63:05:5e:d3:f0:7a:8b:9a:4d:c9:cb:b1:bb:3f:c6:
3e:61:76:69:78:a5:6e:e0:73:bd:60:de:60:9b:65:66:17:66:
80:33:01:97:3a:b3:00:e3:2a:53:40:e9:9c:eb:64:93:05:7b:
8a:2d:bf:26:cc:93:8c:8d:ac:15:83:70:ce:b7:94:cf:85:cc:
4c:d6:04:db:c9:0d:8c:29:2a:9b:5d:02:f7:27:4c:6f:45:00:
d0:8d:c6:3f:46:1d:ac:df:ee:3b:1c:f2:34:c9:0c:13:14:ea:
e2:84:81:d0:33:dd:65:64:d5:b6:41:ef:0f:e5:9a:ba:5b:1a:
50:67:c0:e5:5c:5b:69:5c:af:86:40:32:3e:7a:0c:70:05:82:
b1:b6:b5:ba:30:ac:28:56:eb:5e:5d:47:33:b5:57:73:e8:a9:
e8:60:f0:bb:9f:ea:9e:20:0f:ef:da:60:18:ae:0a:80:3b:37:
8c:55:e5:b5:e1:73:d8:7e:56:dd:f7:60:09:bb:a7:56:db:36:
2b:8a:36:f4:a4:f1:54:e6:3b:ff:cf:ab:db:f9:54:df:45:71:
2e:03:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org