Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/022F32CA9CCB11EFAAC38E52762E951A.roa
File: 022F32CA9CCB11EFAAC38E52762E951A.roa (raw, json)
Hash identifier: rD0syBKiL7c261Mu8WhV/kxThDTjGQI8fG8xABHRfiA=
Subject key identifier: 35:F0:B4:C3:8D:B1:35:75:93:F6:65:CC:57:DF:1D:13:EA:7C:0A:BF
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 0542
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/022F32CA9CCB11EFAAC38E52762E951A.roa
Signing time: Thu 07 Nov 2024 05:42:00 +0000
ROA not before: Thu 07 Nov 2024 05:41:56 +0000
ROA not after: Sun 31 Dec 2034 05:41:56 +0000
asID: 328528
IP address blocks: 102.36.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1346 (0x542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Nov 7 05:41:56 2024 GMT
Not After : Dec 31 05:41:56 2034 GMT
Subject: CN=672c5328-7745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:aa:e5:78:dc:9f:74:7f:f7:27:63:67:9e:
0d:b0:7c:fa:76:16:65:36:94:c9:2e:63:c2:de:ef:
10:c4:aa:8a:af:03:fb:b1:f7:6c:c7:4a:ff:63:aa:
8c:32:59:d4:a9:99:64:4a:07:54:45:36:cd:72:e3:
a1:1c:df:1d:2c:98:2b:78:a2:26:46:e2:9f:b2:ef:
1f:dc:4d:6f:23:2b:49:80:f0:5d:ef:7c:5a:1d:48:
85:60:71:7d:55:a5:fc:21:0f:85:77:a3:82:e0:c2:
4a:af:a6:ee:2b:03:e0:2b:27:74:1c:60:3c:76:ce:
02:e3:0b:b0:01:44:85:92:b0:65:6f:59:ed:60:34:
21:63:d4:48:e9:68:e6:a4:ec:61:3f:26:d7:b8:30:
59:c9:ed:8f:bf:8d:a6:11:de:bb:81:48:f5:05:7f:
9e:76:a4:eb:49:de:7f:9d:ff:47:43:f4:eb:21:f6:
e8:9d:0f:9e:90:58:63:39:73:f1:6a:67:77:62:ae:
9b:d6:48:8a:ac:ff:55:08:bd:3f:e4:d5:e1:e8:9e:
1d:15:e2:e9:e1:8d:ae:5e:5b:18:46:71:d9:f0:30:
8f:89:87:4a:d9:cc:00:aa:2e:39:7a:07:24:6c:ba:
87:79:14:e6:62:5e:9a:fe:0c:8c:5d:0d:cd:d4:6f:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F0:B4:C3:8D:B1:35:75:93:F6:65:CC:57:DF:1D:13:EA:7C:0A:BF
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/022F32CA9CCB11EFAAC38E52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.160.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5a:d1:1e:8a:4c:ef:dc:4d:3a:40:28:25:82:cb:2d:4e:7e:
75:5b:52:a0:95:85:bf:ab:c5:c4:d7:45:a9:aa:6d:66:a5:fd:
13:de:2e:92:98:b0:cc:4d:35:8b:41:77:25:58:3d:df:ae:44:
ee:2b:86:e7:b7:85:fc:a6:4d:f7:32:85:64:29:31:1c:cb:61:
33:94:1c:36:39:ba:17:bc:e4:03:42:2a:3f:de:e5:6b:11:43:
5c:69:3e:6f:e9:e3:21:cd:47:18:ee:7d:8b:37:85:7d:18:ba:
ee:99:40:ba:15:9b:76:ec:2c:ad:82:0b:ee:56:5c:c4:54:3f:
82:3f:57:de:eb:c2:11:7f:8e:3f:2d:b3:bf:3e:6f:25:a3:84:
ed:f5:15:cb:85:5b:fb:db:7e:2d:8f:9b:41:39:50:0e:bb:51:
d1:cb:68:13:d0:e0:74:6e:f9:ba:66:bf:be:65:71:7f:c2:6a:
b3:2a:45:fe:46:4f:ed:96:35:64:ce:14:5e:74:96:fe:19:d0:
b9:87:b3:e9:d2:8b:92:22:43:3b:48:27:b6:8e:f6:a4:9c:4d:
dd:f3:59:17:b1:f2:cd:af:5c:fe:1d:94:9c:79:9d:a5:6c:2e:
56:a0:d6:97:a8:0c:ae:bb:31:f3:b5:11:5e:03:c5:4d:b3:6b:
cc:73:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:25 2024 by rpki-client on console-fra.rpki-client.org