Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/5966A982513411EC87153C3CD8A014CE.roa
File: 5966A982513411EC87153C3CD8A014CE.roa (raw, json)
Hash identifier: XiML3N/Ks2DTKm6yJyQZ8MauTZzboO/Tl8GClySWfiw=
Subject key identifier: AC:FF:20:2C:C9:4D:46:5B:B0:C5:25:4A:F8:EE:C3:52:A0:4F:C8:05
Certificate issuer: /CN=F36FC328AF/serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
Certificate serial: 02
Authority key identifier: 3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/5966A982513411EC87153C3CD8A014CE.roa
Signing time: Mon 29 Nov 2021 16:49:42 +0000
ROA not before: Mon 29 Nov 2021 16:49:30 +0000
ROA not after: Sun 29 Nov 2026 16:49:30 +0000
asID: 327960
IP address blocks: 102.219.144.0/22 maxlen: 24
2c0f:f2a8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 01:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC328AF
Validity
Not Before: Nov 29 16:49:30 2021 GMT
Not After : Nov 29 16:49:30 2026 GMT
Subject: CN=61a504a6-871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:08:0d:72:73:3b:d5:3f:f0:16:c5:ba:c3:9a:
46:1d:15:ae:d9:28:63:47:7f:2d:ca:82:62:0f:ae:
75:33:bd:2e:e3:45:cd:40:f3:f7:50:34:76:4c:d6:
93:0f:73:4c:4f:0d:2b:25:c8:ad:80:97:66:78:1c:
6d:bd:66:75:58:1e:79:45:5c:e2:8f:2b:02:27:5e:
69:32:d5:1b:c5:5e:d8:59:5d:8a:99:a6:53:46:40:
34:30:90:f8:b7:fc:bc:11:96:41:9f:33:65:a6:90:
f3:ec:4c:e2:85:58:b0:74:02:65:2d:d7:61:ce:2f:
71:01:55:17:20:33:cc:b8:29:7f:17:d2:f8:18:09:
8a:70:39:10:c0:5f:1b:90:38:b2:6f:1d:87:39:ad:
ac:f9:96:54:5a:74:85:99:ed:3d:75:82:74:9f:22:
3a:00:3c:8f:e1:3e:47:cb:92:e9:58:2e:78:0e:40:
fc:12:35:08:30:66:b1:46:59:f4:63:b1:6d:72:59:
88:d7:bc:65:1a:b5:2a:3d:be:76:d3:f2:76:8e:19:
7f:c9:8e:57:03:97:2d:f6:d7:f6:e1:9e:18:3a:84:
dc:f2:69:a8:55:fa:ed:73:00:c6:1f:41:be:ef:23:
d7:2f:65:43:b2:e3:59:d3:83:96:e4:6a:c9:7e:77:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FF:20:2C:C9:4D:46:5B:B0:C5:25:4A:F8:EE:C3:52:A0:4F:C8:05
X509v3 Authority Key Identifier:
keyid:3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/5966A982513411EC87153C3CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.144.0/22
IPv6:
2c0f:f2a8::/32
Signature Algorithm: sha256WithRSAEncryption
9d:7f:51:ab:93:14:c5:a8:f8:95:50:a1:ba:d8:de:08:9c:4e:
23:17:46:ca:09:b6:e0:98:c6:32:96:0d:c3:18:b5:cd:15:57:
6a:86:a1:6e:06:94:c8:a7:fc:04:eb:f0:3d:13:e3:96:a5:3e:
79:f6:59:ba:62:2c:26:38:a8:99:1b:c1:3f:0d:7a:a8:7f:3e:
e9:51:c6:2f:df:13:32:c3:3a:a5:b8:33:78:0f:1c:17:9d:15:
f0:8d:ac:c2:fd:6d:70:b1:7e:49:09:1f:26:20:af:39:9a:97:
8c:d0:94:b4:04:63:58:52:7f:11:9c:84:47:8f:4f:b1:1c:20:
7e:d8:68:71:ac:c4:00:06:92:a1:d7:04:f9:45:41:fe:a4:c6:
7f:6c:fc:b9:af:9f:5c:0a:d3:a6:98:6a:e2:0b:6c:21:0d:85:
9a:1a:93:fd:2e:ae:71:4c:64:25:73:1c:5f:b2:83:d2:df:8c:
9c:36:f2:32:ab:0c:40:9e:ef:0c:e4:6a:49:2f:86:4c:c1:69:
41:f6:7c:e3:13:79:66:f1:80:66:4f:81:56:0b:50:d5:ee:44:
a5:76:0e:21:ae:62:97:51:16:9d:d6:bc:d6:71:c1:56:c4:04:
4d:ba:ea:f2:bf:55:e1:8c:2e:48:78:8f:df:fd:71:bd:d0:3f:
ea:ee:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:47:08 2025 by rpki-client