Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/F05CFC3CF61711ECB1B82FADF1222468.roa
File: F05CFC3CF61711ECB1B82FADF1222468.roa (raw, json)
Hash identifier: Au6s2pxaSDvChW+FzABudGYSlCnH0CYLP8pI+Txi2cM=
Subject key identifier: C7:A0:E8:D2:CD:44:87:1B:01:A8:49:9A:E9:09:F9:A5:65:DF:10:FD
Certificate issuer: /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial: 08
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/F05CFC3CF61711ECB1B82FADF1222468.roa
Signing time: Mon 27 Jun 2022 12:52:02 +0000
ROA not before: Mon 27 Jun 2022 12:51:58 +0000
ROA not after: Sun 27 Jun 2032 12:51:58 +0000
asID: 328948
IP address blocks: 102.218.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Validity
Not Before: Jun 27 12:51:58 2022 GMT
Not After : Jun 27 12:51:58 2032 GMT
Subject: CN=62b9a7f2-121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:8a:d6:a7:82:34:37:c5:47:6d:6f:75:05:
b4:cd:11:27:c1:60:9e:d6:57:82:70:79:3c:fc:f1:
38:4c:60:62:16:b2:6c:07:18:27:33:55:7c:8d:cb:
3e:98:ac:ef:aa:3b:51:c1:5a:c9:12:93:f3:d6:6f:
44:47:f3:8b:4f:aa:14:77:09:09:c2:04:ad:e1:05:
26:9d:d7:c7:a0:11:17:79:3d:81:28:49:fa:3d:cd:
ad:c7:c3:d6:10:fc:0a:2e:74:39:6e:02:87:0c:d2:
79:12:b9:93:41:5c:9b:c2:b8:99:68:7c:a8:fe:a7:
85:a8:5b:8b:a3:78:1c:1b:c8:06:25:bc:b3:38:1e:
51:1b:0b:b3:2f:7b:3f:6c:aa:18:11:2f:78:f6:3a:
23:11:19:bc:0c:1a:eb:a8:81:61:78:8a:66:86:c6:
ba:c0:7c:bc:8b:e1:6e:52:cc:cb:c4:cc:2a:ab:f6:
0e:9e:72:ee:c2:fd:d6:69:9e:f2:da:32:fb:b7:25:
27:e3:36:a0:2f:69:aa:f6:a9:e8:f3:a5:a3:14:10:
ef:d6:fd:3c:65:a6:35:f5:cc:6f:6a:29:a3:40:03:
9a:13:82:f3:0f:7d:f5:bf:3d:a7:f7:e6:a2:f4:6b:
45:95:12:cc:37:be:7e:c2:74:9f:ae:09:6b:c3:de:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:E8:D2:CD:44:87:1B:01:A8:49:9A:E9:09:F9:A5:65:DF:10:FD
X509v3 Authority Key Identifier:
keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/F05CFC3CF61711ECB1B82FADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.17.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a3:6e:a3:2c:44:b5:69:8b:f5:6b:80:92:11:a0:38:5e:d7:
57:ec:f5:bc:75:8d:91:0e:15:d0:78:98:35:90:40:57:f4:80:
4a:e5:ee:ac:04:9d:cd:22:40:62:24:d4:d6:1e:f6:ad:90:09:
9f:81:b2:58:ef:1a:ae:4d:74:bd:92:d2:9a:4c:7d:03:ae:c9:
d0:b3:c3:b3:2d:93:52:1e:27:f4:b9:af:05:1f:9c:9b:b5:3a:
2d:f5:6f:4f:00:d4:b4:a3:62:f5:1b:00:a0:0d:73:5a:35:06:
1b:1c:e6:d6:bc:94:3d:10:20:b9:9e:71:b1:13:9f:5c:5c:fe:
bc:94:bd:53:b2:81:03:b1:c4:65:bb:13:0e:75:48:4a:a7:7c:
0e:56:9e:f8:cc:3b:e6:6a:fd:87:04:67:21:ec:14:27:33:5f:
be:a3:b0:b1:20:b1:39:9f:c7:8a:90:48:d5:4a:bf:0c:25:b2:
b3:f7:db:81:c4:09:37:96:c8:b2:9b:6b:89:94:6d:5e:ec:a8:
1e:7b:16:28:07:fe:2f:89:f2:3d:45:5c:90:a8:5b:a3:54:f2:
0f:e9:7f:90:8e:6c:4c:2f:03:4f:82:f7:f3:81:b8:44:ec:51:
c9:d4:57:31:d1:77:d8:4b:b9:a2:98:b8:b0:eb:00:65:a5:29:
3c:ad:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:21:13 2024 by rpki-client on console-fra.rpki-client.org