Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/1A60E94A7FE511EFBEBA208F762E951A.roa
File: 1A60E94A7FE511EFBEBA208F762E951A.roa (raw, json)
Hash identifier: A/mV4GlRLg3sT0E/c0AS8I1cypmKjG6MSwcDjeLas4Y=
Subject key identifier: A4:F4:9C:BD:C2:DA:75:7B:C8:1E:9D:42:F8:C6:84:77:2D:D1:60:C5
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 04
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/1A60E94A7FE511EFBEBA208F762E951A.roa
Signing time: Tue 01 Oct 2024 11:05:44 +0000
ROA not before: Tue 01 Oct 2024 11:05:40 +0000
ROA not after: Wed 01 Oct 2025 11:05:40 +0000
asID: 329403
IP address blocks: 102.209.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Oct 1 11:05:40 2024 GMT
Not After : Oct 1 11:05:40 2025 GMT
Subject: CN=66fbd788-d673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:e7:a6:6f:cf:32:e8:49:d9:08:8f:15:3a:
76:a7:3e:5f:ac:60:90:c1:04:64:0c:93:63:d7:83:
2b:aa:c8:30:51:c0:cf:fc:e6:3b:c5:33:30:74:27:
5d:d0:db:92:4a:52:e0:e0:ec:1e:3a:5d:01:9a:97:
6d:6e:ba:85:ec:46:9c:44:86:63:e8:20:95:6e:b2:
21:f5:d1:a7:8a:88:b9:ca:48:97:f4:53:d0:49:99:
a0:ae:fa:e5:79:c2:42:bc:89:85:a7:6a:21:c8:f6:
04:7e:93:77:ed:29:f4:24:8f:41:ee:0d:10:6e:0b:
24:11:70:e8:0b:34:00:30:64:f8:d7:7d:18:1d:28:
3e:ed:b9:d5:a2:fa:80:43:c6:f8:ae:f0:8f:62:80:
9b:77:9e:d0:3f:af:6f:30:c6:b7:ee:ef:12:66:05:
19:99:57:5a:21:a3:64:00:50:6d:ae:c5:e9:ff:57:
da:2f:c9:20:94:ba:f4:51:5f:f1:0c:c5:53:b1:e2:
68:60:25:f3:71:d0:75:7f:f3:8a:10:32:ee:b2:64:
7b:d2:74:4a:8d:64:e2:2a:ea:0b:ae:61:f6:3b:6c:
98:1b:16:97:b5:cd:2a:f7:cc:5b:c4:42:5c:42:48:
08:9d:0c:29:9d:96:3b:67:9e:06:9b:46:e9:d2:d5:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F4:9C:BD:C2:DA:75:7B:C8:1E:9D:42:F8:C6:84:77:2D:D1:60:C5
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/1A60E94A7FE511EFBEBA208F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.181.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:72:21:c5:f2:ea:28:48:c7:48:ee:b5:02:a7:a8:37:c7:56:
bb:ee:bd:f2:be:23:b4:a3:f0:b5:51:a8:7f:37:08:11:bd:0b:
79:e0:06:25:5a:70:b7:50:f4:25:e3:50:a7:d1:97:75:39:ab:
0e:ff:85:db:49:64:22:71:1f:53:10:b7:4b:99:4c:19:b6:97:
15:8b:aa:26:e8:51:cb:b6:64:db:fe:d9:87:3c:a6:98:20:c9:
5f:6c:06:f2:df:58:f9:67:42:ce:66:e7:63:ef:cc:32:78:35:
0e:10:40:6d:45:f6:3e:6e:84:9f:f5:df:a8:e5:47:7d:c8:bb:
72:75:89:6e:a6:a2:58:2f:0b:00:51:0b:a9:e4:5f:42:86:b8:
88:6e:7f:37:63:21:70:1b:f8:89:df:47:83:dd:99:eb:5e:a5:
ae:e3:e9:39:f2:74:7d:0a:7f:ab:7a:d1:0e:91:af:86:67:9e:
db:22:ad:17:39:8d:33:e6:f1:6f:21:66:60:2d:0e:f4:7f:2e:
c2:f2:61:c5:75:f8:23:cc:cc:6d:96:48:ba:21:0e:32:cc:9c:
26:fc:4a:f1:0d:a5:b3:a0:35:b3:0c:71:ef:3e:34:4f:e7:70:
19:b0:77:ac:47:16:00:79:71:5d:53:34:d9:4a:93:c9:a3:70:
f4:f0:d1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org