Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/B6E3EFEC4B2B11ED8B51B99DF1222468.roa
File: B6E3EFEC4B2B11ED8B51B99DF1222468.roa (raw, json)
Hash identifier: SeEZMep8qUp7m/jfkKAlult6v7B0lE6Bk41ZD/YO3Aw=
Subject key identifier: 52:19:51:7B:80:BC:F0:B0:56:B8:7B:E4:63:53:56:76:98:CD:D0:56
Certificate issuer: /CN=F36E4A6EAF/serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
Certificate serial: 02
Authority key identifier: 26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/B6E3EFEC4B2B11ED8B51B99DF1222468.roa
Signing time: Thu 13 Oct 2022 19:17:44 +0000
ROA not before: Thu 13 Oct 2022 19:17:39 +0000
ROA not after: Tue 31 Dec 2030 19:17:39 +0000
asID: 329101
IP address blocks: 102.215.76.0/22 maxlen: 24
2c0f:2880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Jun 2024 00:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4A6EAF/serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
Validity
Not Before: Oct 13 19:17:39 2022 GMT
Not After : Dec 31 19:17:39 2030 GMT
Subject: CN=63486458-9cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:4b:38:d9:f5:d0:3d:14:22:ac:da:f5:8d:
d9:60:7b:6b:41:37:97:1e:42:df:50:7b:d2:07:f0:
2b:20:15:17:4e:98:95:89:fd:36:54:1b:45:c8:01:
ae:f7:88:54:0f:f5:a7:e1:e0:9e:8c:6f:f8:e5:11:
e4:3a:37:13:c0:47:32:49:9b:57:8e:00:5a:06:06:
15:7d:38:e0:20:30:f6:c8:19:3f:e2:67:0d:a8:7e:
6c:e1:6f:46:03:52:10:b8:85:56:2e:0b:20:44:36:
96:5a:0e:a7:57:65:73:08:b3:7e:26:66:dd:13:ca:
d0:f1:1e:64:57:c1:33:ff:1f:0a:52:b7:7b:ca:c6:
3f:99:81:7b:b6:c6:3d:7c:aa:49:0f:31:87:d2:c9:
87:2c:35:e1:fb:70:5c:59:42:d3:f7:2a:4c:e7:85:
50:35:a2:03:36:6e:90:54:ae:29:c1:aa:ad:a4:64:
68:05:13:ad:07:41:8b:eb:cf:af:a9:60:93:ec:93:
ce:57:dd:5b:8c:09:c0:6c:78:ca:f3:b3:cb:5a:ce:
1d:11:bc:2c:31:15:ee:c2:db:48:e0:4f:e1:fd:e2:
e8:6a:4f:e4:54:dc:df:83:d2:3f:21:69:93:0f:4a:
2e:45:ed:62:f5:ee:c3:03:35:db:c3:1b:b8:24:8c:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:51:7B:80:BC:F0:B0:56:B8:7B:E4:63:53:56:76:98:CD:D0:56
X509v3 Authority Key Identifier:
keyid:26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/B6E3EFEC4B2B11ED8B51B99DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.76.0/22
IPv6:
2c0f:2880::/32
Signature Algorithm: sha256WithRSAEncryption
19:c4:f3:0a:34:0a:83:20:5c:44:7b:75:87:0f:f3:48:b3:0b:
d4:90:90:1b:d7:47:26:c5:0e:b0:22:49:e2:d9:5b:51:35:e1:
9a:a4:b9:46:a0:51:13:a5:86:e4:6b:7a:f0:f2:b0:13:3c:ce:
ae:59:69:c0:e3:55:20:90:fa:dc:51:c4:47:e2:06:65:e5:cd:
2d:a2:51:30:9f:c2:70:86:a5:32:f0:dd:48:66:fd:94:bc:5a:
84:80:0f:9b:3c:c6:a4:d5:88:e1:53:6e:88:1b:39:36:c7:00:
60:b0:c5:b9:aa:95:83:6f:84:85:18:d1:f3:9f:79:82:d4:c9:
d4:55:92:f9:63:38:c7:95:3a:7c:02:a4:78:e8:79:6a:50:05:
ba:9d:f8:46:32:81:41:ce:aa:be:fb:74:be:37:67:20:d1:db:
4e:a3:3c:69:5e:c1:c2:cd:ac:3a:03:7c:31:45:02:3a:5a:dd:
b6:27:f0:4d:36:e7:38:a3:92:63:2b:c5:ea:8f:2c:ba:46:f0:
7b:6b:fe:f2:60:26:b4:72:ea:7d:66:5a:c1:a4:54:f7:db:23:
bc:38:d5:88:88:0b:7a:e9:a5:7f:65:9c:f2:b3:48:6a:4a:21:
43:14:b0:79:c0:ef:4d:0a:2e:59:30:c8:3f:88:98:47:43:94:
b3:39:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:08:13 2024 by rpki-client on console-fra.rpki-client.org