Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/455EACFA7FE411EF9A858F8A762E951A.roa
File: 455EACFA7FE411EF9A858F8A762E951A.roa (raw, json)
Hash identifier: FAEa1S962bIhXo4SwmCRjWz4N6IRQhTzTWTA+es1RJY=
Subject key identifier: 73:FE:6C:62:90:0A:79:16:2B:F5:EC:19:4A:04:CB:CF:A6:10:79:02
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 02
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/455EACFA7FE411EF9A858F8A762E951A.roa
Signing time: Tue 01 Oct 2024 10:59:46 +0000
ROA not before: Tue 01 Oct 2024 10:59:43 +0000
ROA not after: Wed 01 Oct 2025 10:59:43 +0000
asID: 329403
IP address blocks: 102.209.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Oct 1 10:59:43 2024 GMT
Not After : Oct 1 10:59:43 2025 GMT
Subject: CN=66fbd622-e0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:39:0f:b8:78:3d:e8:23:e1:d0:2e:72:7c:
f5:88:f6:37:8b:fc:29:f6:e6:44:c0:bc:fa:5b:66:
52:f1:01:f5:ec:52:96:bf:c9:6a:20:a7:5e:c9:60:
bb:fd:bf:3a:c6:ea:98:6d:a4:39:ee:e4:be:cf:f1:
23:ce:22:08:0e:cc:44:04:14:31:4e:02:53:dd:44:
60:d3:02:bc:e7:47:65:e6:e0:fc:b8:df:69:e6:7b:
b6:5e:f0:2f:7f:a1:72:ea:93:38:75:12:0b:c3:0a:
31:68:17:26:e7:0a:93:6f:21:c1:f0:92:88:db:74:
d0:6e:ae:bd:9e:03:13:aa:eb:37:4b:bf:08:40:ed:
6a:cd:e0:fd:99:a1:21:1d:84:b9:73:cc:f5:3e:94:
55:ec:14:73:cd:8b:e3:f6:ae:e8:b3:da:93:47:c9:
28:00:23:fd:c8:49:91:4d:79:01:0b:fc:79:c6:01:
c5:23:e1:77:26:05:0c:25:a9:04:aa:3b:93:70:49:
59:7a:92:77:ca:33:b8:df:1e:61:d5:6b:40:42:71:
e7:be:2f:2e:0d:34:03:d2:09:4b:d8:6f:18:50:84:
4e:bf:a1:c2:7b:17:7d:74:62:da:53:79:65:11:93:
76:5f:09:72:15:d8:1b:1a:37:34:d5:4d:5b:fa:33:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:6C:62:90:0A:79:16:2B:F5:EC:19:4A:04:CB:CF:A6:10:79:02
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/455EACFA7FE411EF9A858F8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:3b:4a:c3:9c:d2:93:d3:1c:4d:55:06:ef:ec:a4:20:1f:88:
1c:b1:25:e6:0d:c7:f5:85:c5:98:b2:0d:57:e7:9e:14:f9:5d:
cc:e9:c7:e0:03:14:90:05:01:b2:54:1b:4a:cb:0b:f3:b1:bd:
b5:7d:15:91:7f:e5:79:bb:f2:7d:cc:eb:c8:a0:b0:61:e2:fb:
2e:4d:ae:95:10:fe:39:98:79:1a:af:d0:db:20:2f:a0:d7:22:
e7:50:85:db:f7:57:1a:b5:a5:30:5e:8f:f2:e7:dd:a5:0a:26:
74:41:20:b4:60:e6:8b:d4:4d:65:4a:a2:1d:50:e8:99:9f:3d:
bd:c1:2f:c0:07:dc:eb:05:c0:b8:b1:25:1d:0f:28:7c:d6:fa:
2a:31:51:cc:4f:c3:60:a4:2f:cf:c9:88:95:26:ff:92:b9:a9:
91:26:53:e0:33:c6:2e:72:34:11:82:9a:cb:0b:48:62:cf:26:
cf:5b:5b:33:bf:75:ec:44:33:b0:3b:6f:fc:c2:5b:0e:f9:87:
e4:1f:8a:29:41:79:95:36:e5:66:aa:48:24:ff:27:30:9d:8f:
9c:44:b4:9c:c2:75:6c:4a:da:88:c4:59:7d:f5:ac:69:59:2a:
7d:65:32:12:25:95:83:aa:c2:44:b4:4c:de:da:c5:cd:7f:b6:
bf:33:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:45 2024 by rpki-client on console-fra.rpki-client.org