Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/784AE4BCD28A11EC81ED62BFF1222468.roa
File: 784AE4BCD28A11EC81ED62BFF1222468.roa (raw, json)
Hash identifier: CkuoR2/+F6JKHq8BKZH5DTfRvZh+LqHD0UlmcfmPCMw=
Subject key identifier: 12:E2:86:15:9A:19:EC:94:95:BD:83:58:08:B1:89:89:6B:1F:5A:3E
Certificate issuer: /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial: 02
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/784AE4BCD28A11EC81ED62BFF1222468.roa
Signing time: Fri 13 May 2022 07:01:11 +0000
ROA not before: Fri 13 May 2022 07:01:05 +0000
ROA not after: Thu 13 May 2032 07:01:05 +0000
asID: 328510
IP address blocks: 102.38.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Validity
Not Before: May 13 07:01:05 2022 GMT
Not After : May 13 07:01:05 2032 GMT
Subject: CN=627e0237-bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:af:d0:8f:42:65:6b:cc:5b:4d:5d:b0:bb:
18:d0:8c:31:6d:b6:2f:28:8b:4c:bf:51:7f:23:01:
de:37:c2:4e:11:9f:9f:da:af:a9:f4:18:8c:5e:fe:
63:3f:2b:1e:2f:b5:f9:a5:46:19:a7:70:e8:e4:3a:
99:03:b9:11:5d:bf:7d:aa:a1:2b:ea:9d:3e:61:b3:
15:bb:a6:9c:9f:55:65:30:85:f3:08:5d:8b:79:ed:
e5:b0:fb:2a:c2:4d:0c:7e:e2:f9:fd:8d:a4:10:e2:
ea:3a:2a:b1:6b:01:03:72:4d:c1:fe:28:dd:f5:65:
ec:a9:de:1d:dc:ac:a1:b3:bb:ee:28:74:29:7c:33:
57:6e:11:a8:e4:86:4d:36:5b:32:7c:d4:8e:b2:8d:
d3:28:eb:78:1d:dd:08:bf:c7:82:37:7e:d4:68:61:
93:e6:f8:6f:63:d4:55:e8:94:ea:bc:51:57:2c:f2:
f6:ee:c0:ce:22:ea:ec:0f:1a:d5:cf:6d:e9:ab:7a:
36:23:8c:c0:b6:98:14:66:9a:e9:3f:aa:1e:00:df:
b6:ea:01:96:89:7a:71:00:d7:d2:fb:86:6f:7b:f0:
4c:00:cb:43:e0:22:e8:b9:d1:16:c1:0d:17:1d:b0:
66:c3:5c:a2:9e:2f:f9:de:bb:46:5e:63:5a:99:48:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E2:86:15:9A:19:EC:94:95:BD:83:58:08:B1:89:89:6B:1F:5A:3E
X509v3 Authority Key Identifier:
keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/784AE4BCD28A11EC81ED62BFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.38.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:99:25:ad:94:c7:f9:9c:d1:28:5d:68:06:55:29:b4:9d:9e:
20:18:50:b6:31:eb:58:84:89:57:31:8b:0b:72:0e:25:23:96:
1e:32:43:41:96:a9:77:06:a2:65:10:78:1f:58:ea:8f:b5:26:
80:ba:99:10:95:a7:17:89:43:92:26:b4:1a:ca:03:ec:b7:d1:
b0:df:5e:c4:1f:80:5e:d9:70:64:21:75:13:f6:69:b9:80:db:
af:82:3f:87:85:48:af:a0:ce:3e:c6:34:17:cd:a2:19:5f:6c:
ee:b3:b3:b4:6d:a3:6f:cd:cd:93:35:76:5a:a0:d0:bc:9d:f0:
e5:e3:97:19:a7:93:56:db:6d:64:f4:86:e0:dc:44:ea:67:60:
56:44:dc:ac:b2:35:3b:f5:79:c2:b2:52:03:fe:67:99:d7:75:
c6:ff:7d:04:14:67:28:83:1b:d6:80:f5:40:02:c9:9a:66:52:
66:b3:b6:2a:23:b3:cb:54:12:2e:47:54:d5:5d:78:d0:47:6a:
a1:97:fe:37:39:bf:c7:10:8b:5c:ae:40:4e:55:64:56:9d:92:
d4:f1:c9:ce:0f:92:cd:07:18:8e:8b:30:56:7e:16:48:21:88:
d1:00:d7:79:bb:ef:a7:34:66:d9:90:1b:ad:ef:36:18:51:80:
1f:c8:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:22 2024 by rpki-client on console-fra.rpki-client.org