Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/C31872DA9CCB11EFA6C7EA56762E951A.roa
File: C31872DA9CCB11EFA6C7EA56762E951A.roa (raw, json)
Hash identifier: aqo5WLcxbGk8mNK5MGC19RSv2lGCdlf4+iHmtlQVkTM=
Subject key identifier: 0D:23:30:E0:E7:92:F2:9E:9C:B1:34:41:D2:EE:7F:32:22:50:2E:C1
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 054C
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/C31872DA9CCB11EFA6C7EA56762E951A.roa
Signing time: Thu 07 Nov 2024 05:47:24 +0000
ROA not before: Thu 07 Nov 2024 05:47:20 +0000
ROA not after: Tue 31 Dec 2024 05:47:20 +0000
asID: 43260
IP address blocks: 102.218.100.0/24 maxlen: 24
102.218.101.0/24 maxlen: 24
102.218.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Nov 7 05:47:20 2024 GMT
Not After : Dec 31 05:47:20 2024 GMT
Subject: CN=672c546c-fa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:40:1a:75:6f:e8:f6:3f:83:87:ec:4e:0c:
d6:84:5a:66:b3:ac:90:b1:91:00:e4:cd:1d:77:04:
12:8a:30:8f:3b:8c:07:47:ae:96:e1:c6:76:b8:c1:
62:4c:ef:44:b8:4b:b1:74:d1:a0:c8:23:7b:64:0a:
09:d5:c7:fd:6a:b0:63:72:c3:ca:4f:af:99:d0:6a:
29:c7:b8:37:94:29:5a:9e:f7:66:d9:1e:68:a9:54:
ff:7f:48:07:d0:a0:e6:e2:e9:7e:ae:91:3e:19:c6:
41:d4:01:ec:c8:a8:14:ca:ef:2c:63:f8:90:bc:70:
67:6e:94:28:3a:e6:10:10:85:0f:62:4d:67:aa:9f:
7d:5d:18:10:2b:6c:db:34:d6:84:d0:ef:45:92:75:
56:dd:e5:6f:df:9b:8e:0c:ff:4d:51:55:8b:c3:77:
a7:cb:a9:99:95:bf:68:b3:01:42:19:a5:4d:21:96:
b7:ff:b6:69:11:54:fa:7c:1e:c2:f8:9e:e8:0e:fc:
3f:54:a9:30:a2:37:37:81:db:fb:69:9a:90:93:01:
f5:14:b4:47:79:e2:15:52:a7:0f:01:60:50:4d:dc:
4f:4c:53:40:c8:e4:11:e1:51:f4:db:ea:29:f0:0d:
38:17:42:40:85:27:25:59:ce:96:cd:c2:86:3c:72:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:30:E0:E7:92:F2:9E:9C:B1:34:41:D2:EE:7F:32:22:50:2E:C1
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/C31872DA9CCB11EFA6C7EA56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.100.0-102.218.102.255
Signature Algorithm: sha256WithRSAEncryption
38:af:67:5f:3d:2c:b4:e1:60:36:bd:46:4b:12:8b:32:29:8d:
c0:8a:b1:38:d2:78:59:97:80:2b:6b:5b:d2:fb:ad:d8:98:16:
db:72:f2:d5:61:b3:e8:88:71:5e:be:ad:e9:f0:f3:5b:f8:7a:
9e:ea:8a:7b:70:f4:80:11:a1:82:5a:98:40:46:55:36:36:74:
da:78:bd:95:af:41:46:69:8d:23:fb:4d:94:d6:4b:5e:ab:f3:
2b:c4:d6:ec:09:ce:be:67:35:99:a6:52:8b:e8:19:62:22:76:
27:22:06:80:15:48:9d:9a:52:dd:40:a7:b5:ba:96:96:87:1c:
39:a9:ff:02:dc:24:84:31:eb:7b:7d:54:b8:d6:d9:38:85:4b:
7c:ca:fa:a3:bd:05:75:61:ec:19:3b:ac:10:1b:7d:64:8d:d3:
ba:b0:4a:6b:53:92:b0:40:bc:08:8f:78:ea:0c:19:2e:fe:5a:
42:93:f5:fa:d0:15:1f:99:50:20:51:8f:43:06:f8:ff:9f:d8:
70:29:e8:99:46:5a:55:e5:01:e2:8e:cb:1c:f6:93:8a:fe:a2:
7c:8c:de:9d:eb:68:58:e4:3b:12:fb:17:59:89:12:3b:2c:f0:
2d:54:34:ce:97:b7:31:9d:68:c8:f5:89:33:1b:8c:82:bd:96:
d5:8c:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org