Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/3569861EFB9111ECABF49894F1222468.roa
File: 3569861EFB9111ECABF49894F1222468.roa (raw, json)
Hash identifier: xfjrAkm4LufZusLE6b6YUbeIGmJjoUsjJjVfL2I+eVI=
Subject key identifier: 73:F4:A0:6D:B7:2F:6A:C7:E7:97:B9:BF:4F:D4:50:F9:FA:6D:41:6B
Certificate issuer: /CN=F361E497AF/serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
Certificate serial: 09
Authority key identifier: 24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/3569861EFB9111ECABF49894F1222468.roa
Signing time: Mon 04 Jul 2022 12:02:43 +0000
ROA not before: Mon 04 Jul 2022 12:02:39 +0000
ROA not after: Wed 31 Jul 2030 12:02:39 +0000
asID: 329084
IP address blocks: 102.215.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl
rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361E497AF/serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
Validity
Not Before: Jul 4 12:02:39 2022 GMT
Not After : Jul 31 12:02:39 2030 GMT
Subject: CN=62c2d6e3-088f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:7c:13:2e:d7:56:24:37:75:b0:0d:a9:42:
c6:db:a9:1b:56:24:8f:67:5c:b6:2f:79:cd:6e:a6:
db:a7:cd:0c:b8:75:98:95:34:56:43:35:1d:bd:f1:
d7:81:c2:01:66:74:2b:16:21:17:f4:94:f4:ef:71:
c1:55:9c:2e:bd:9c:08:b5:29:09:f8:85:ac:15:4b:
8a:4d:07:df:9f:05:67:94:a8:f7:bc:da:fa:a9:45:
c9:ab:e5:dc:a1:ee:db:ab:2b:62:36:3e:af:31:cf:
fe:34:2b:9d:81:bf:db:85:e3:80:2a:29:99:34:87:
6c:cc:fd:f1:5d:ed:93:a6:52:53:c4:5e:04:53:85:
e4:21:02:10:41:b3:67:2e:56:99:40:9c:63:63:2f:
51:6f:3a:f2:f2:99:a4:44:a6:3e:17:c0:d6:ae:38:
da:8f:3c:6c:c5:bb:be:7f:89:10:ce:ee:6e:2f:95:
8c:5e:70:ee:d2:68:96:c9:87:b1:24:f8:1f:be:78:
07:fd:cf:54:4f:37:65:a4:79:e1:7e:72:1a:28:82:
44:91:82:6b:59:13:a2:a5:f9:fa:a5:0b:a9:e6:7b:
70:83:34:8e:05:94:3e:61:db:cc:d4:08:fd:6e:a9:
5d:f4:87:82:0b:3f:05:d9:a6:e8:de:65:e4:ae:c8:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F4:A0:6D:B7:2F:6A:C7:E7:97:B9:BF:4F:D4:50:F9:FA:6D:41:6B
X509v3 Authority Key Identifier:
keyid:24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/3569861EFB9111ECABF49894F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1a:a8:58:f3:46:bf:eb:65:91:40:43:1f:b8:0b:31:33:4b:
eb:38:66:cc:3c:43:da:12:87:1a:af:6d:ec:4c:21:c0:22:ca:
fc:31:bd:98:38:50:ad:d9:20:05:87:5a:1a:38:f3:3d:1c:f0:
7e:50:21:dd:06:6a:d8:58:a0:c4:71:da:34:3f:fb:d1:26:8b:
c4:cf:17:7f:9c:23:b6:eb:50:b6:12:82:11:08:a5:05:b2:7a:
d3:3e:e5:ea:e0:49:63:c0:63:81:75:62:6e:e0:92:c2:3c:32:
e9:47:bc:db:ba:5c:3e:f6:74:75:a1:58:a3:ec:2d:07:94:a7:
18:54:06:1d:68:1a:2d:f5:4b:24:0c:19:55:ba:3a:f8:81:df:
43:2f:48:f8:e1:db:21:81:bf:f1:79:89:48:70:03:b0:9d:4d:
d5:e9:71:4e:53:0a:69:4a:08:5d:d1:da:a2:cc:ed:a4:82:dc:
4d:50:6d:93:39:30:7e:fa:12:97:9d:86:26:ab:0f:c2:46:c8:
84:44:fb:42:27:45:6d:39:8a:ce:c6:1d:d7:93:e7:58:2d:34:
83:49:a4:66:a4:64:bc:e5:a0:39:c9:98:09:75:64:af:0b:54:
9f:6f:84:ca:1e:82:1a:25:3a:20:15:f2:4c:ce:69:5c:6c:4b:
3f:49:f5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org