Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/4480C2C43DB411EDAF6555B6F1222468.roa
File: 4480C2C43DB411EDAF6555B6F1222468.roa (raw, json)
Hash identifier: ao9hJXOKcb8xdv5UDxQleshSTVF6cW6dU5YDRAc43H0=
Subject key identifier: C1:2D:FC:17:AF:26:61:E3:71:0C:8D:FB:59:7B:3E:32:C5:B7:01:2C
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 0181
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/4480C2C43DB411EDAF6555B6F1222468.roa
Signing time: Mon 26 Sep 2022 15:59:57 +0000
ROA not before: Mon 26 Sep 2022 15:59:54 +0000
ROA not after: Mon 01 Sep 2031 15:59:54 +0000
asID: 328585
IP address blocks: 102.216.192.0/24 maxlen: 24
102.216.193.0/24 maxlen: 24
102.216.194.0/24 maxlen: 24
102.216.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Sep 26 15:59:54 2022 GMT
Not After : Sep 1 15:59:54 2031 GMT
Subject: CN=6331cc7d-3343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:e7:6f:09:46:7a:3e:c5:30:2f:43:2c:49:
5a:c5:04:be:ed:f8:fa:b9:1a:4a:65:76:49:a0:24:
61:af:59:da:5b:dc:a7:68:5b:14:6e:e9:d4:24:a3:
14:7e:d9:3b:55:0e:6a:a3:63:6c:b6:67:12:2a:c6:
00:1e:e3:78:f6:ad:77:b5:b0:5a:c4:80:98:44:0a:
ee:81:08:7a:ef:9d:17:88:e2:7b:83:84:05:81:42:
0d:a9:6a:fc:8d:94:de:89:ff:e9:1f:da:33:d0:a7:
a9:00:51:3d:40:69:4b:4b:51:7a:9c:83:b9:a9:7c:
2e:f1:98:f9:5a:74:b6:a3:ca:4b:17:10:d6:ea:57:
bb:12:aa:05:5a:ae:ef:45:89:c3:0b:bd:a5:79:bc:
c4:d8:8a:f8:a1:23:ef:40:dd:c3:f7:38:58:60:26:
2c:73:08:fc:c5:c1:20:17:b9:54:f8:46:d0:a2:cc:
ce:04:3a:f6:4a:20:f4:bc:72:48:36:f3:21:1b:25:
b4:81:1b:b8:2f:9f:55:18:de:c3:97:29:03:3b:2b:
6d:e4:7f:97:06:c6:9e:12:3b:a6:87:62:ba:13:e8:
4d:ac:eb:52:17:5f:70:aa:da:33:d5:bc:e2:a1:62:
bf:c1:87:c8:ef:7f:8f:0c:40:cb:f8:e7:62:2b:c9:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2D:FC:17:AF:26:61:E3:71:0C:8D:FB:59:7B:3E:32:C5:B7:01:2C
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/4480C2C43DB411EDAF6555B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.192.0/22
Signature Algorithm: sha256WithRSAEncryption
33:15:83:d0:78:f1:b6:ef:c9:5e:a0:b4:33:89:6d:01:43:33:
96:d4:bd:55:7b:bd:fd:f7:35:f9:de:65:7b:a2:0b:82:e3:21:
39:89:6a:a0:92:10:9c:71:fa:78:1b:6d:7a:11:bc:4e:ca:ad:
79:3b:0e:43:3c:89:01:b5:43:c3:a1:28:18:2a:9b:84:ce:23:
eb:1a:3e:08:f7:cd:21:41:4b:92:1e:f2:3e:2a:19:36:4c:1b:
ee:1a:ca:49:5d:f1:9e:85:8f:56:3c:11:0b:fb:a9:1e:cd:25:
7c:24:7e:9e:ee:9e:01:68:39:0b:1d:4b:30:a0:ab:40:ec:1a:
a9:13:76:e3:25:7c:8d:e1:8c:dd:6d:ab:8e:7b:e4:ed:e2:8a:
06:13:75:44:c1:5e:3a:ed:60:45:0e:fb:54:5d:e2:93:32:76:
09:29:bf:75:b1:a0:6f:6c:a8:5d:0c:5d:a4:33:b7:b5:82:0c:
f6:b3:26:76:79:69:e9:8f:2f:d2:b5:f9:4a:55:cf:52:47:e4:
ed:ea:3b:40:30:54:62:63:f8:04:2c:ed:fa:f0:c1:e0:78:b4:
72:cc:00:1d:f8:06:cf:16:31:0b:d9:da:25:44:0a:8b:d3:0d:
f3:63:3f:30:d3:13:69:76:90:14:55:c8:1a:a5:ca:df:14:80:
94:da:db:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:16 2024 by rpki-client on console-fra.rpki-client.org