Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/517885647FE511EF83F2F690762E951A.roa
File: 517885647FE511EF83F2F690762E951A.roa (raw, json)
Hash identifier: NesjbwqdXYim8sduEYg7XmsPKVahYOQE+QARTRAVXQc=
Subject key identifier: 18:A9:E1:A1:4A:57:93:73:F0:ED:8F:8D:67:25:AB:6D:4E:52:22:13
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 08
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/517885647FE511EF83F2F690762E951A.roa
Signing time: Tue 01 Oct 2024 11:07:16 +0000
ROA not before: Tue 01 Oct 2024 11:07:13 +0000
ROA not after: Wed 01 Oct 2025 11:07:13 +0000
asID: 329403
IP address blocks: 102.209.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Oct 1 11:07:13 2024 GMT
Not After : Oct 1 11:07:13 2025 GMT
Subject: CN=66fbd7e4-2112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:7c:2f:af:d0:19:d9:3c:22:a8:f6:b4:d8:
f1:41:15:de:4e:9c:92:94:07:a3:96:6e:17:36:09:
fb:21:1b:d6:a9:9a:e2:db:f4:92:27:69:ec:53:5f:
ee:74:15:9e:0b:c9:35:3e:49:b5:bb:5d:f6:22:5d:
46:4b:a1:77:9d:26:75:1b:27:b6:dd:9d:e9:d8:79:
30:86:4a:f6:fb:40:31:2c:19:01:58:78:df:3c:04:
36:22:0d:c0:72:c3:bf:ad:95:4d:a4:3b:c7:1c:23:
74:3b:e4:fd:63:81:7b:b9:8c:b6:e9:7f:63:cb:3a:
f7:65:41:53:2c:64:9e:ed:67:4b:12:d5:ec:99:f5:
74:d2:15:42:04:fb:cc:e2:7f:e0:d2:06:39:59:80:
b3:2a:25:2b:da:8a:81:b5:97:1d:1d:d5:3f:0f:9b:
f3:f6:b7:cd:38:92:b9:7a:6d:79:63:55:f4:73:02:
3e:14:79:9d:38:e0:fe:ac:cd:31:fd:69:97:52:fe:
91:11:88:33:4e:f9:3e:9d:51:8c:6d:62:e8:ca:a2:
38:4b:db:cc:a8:6d:06:24:8f:64:70:27:c7:6c:5a:
5c:f1:34:f2:94:71:fc:3f:9c:cb:60:37:c7:4f:0a:
c0:e7:cb:66:fb:6a:39:c7:6c:9f:31:30:5f:bb:8f:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:E1:A1:4A:57:93:73:F0:ED:8F:8D:67:25:AB:6D:4E:52:22:13
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/517885647FE511EF83F2F690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.183.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fc:42:68:c3:29:9a:f9:23:64:4b:34:05:75:cb:ed:2a:36:
c8:d3:a6:7f:c9:a7:b7:37:f5:48:67:15:ed:4f:63:eb:55:50:
29:51:64:2b:11:41:4b:65:83:63:7d:79:cc:9b:c7:ce:03:0e:
50:e0:cb:6c:a3:84:25:15:be:8d:d9:8c:19:3e:06:11:31:2b:
76:82:fd:73:1f:29:27:63:1b:73:7e:4b:59:9e:bf:cb:8f:4e:
12:a8:5c:e2:d2:0e:10:d1:5b:f9:d9:1a:fb:fe:28:67:90:02:
cf:87:b0:78:8b:96:2d:c0:9a:98:ff:8e:51:1f:d4:06:d2:cc:
e0:c0:61:bf:df:db:cd:55:0b:ba:27:f4:ae:f5:12:1c:59:2e:
24:06:3f:61:75:e0:00:50:60:7b:c3:fe:f9:35:fa:91:c2:30:
4f:52:4c:e7:d0:c2:43:10:9e:42:be:e0:3b:45:8b:e0:9a:63:
a7:a8:84:5a:35:1c:3d:04:a0:e9:98:01:62:19:a2:dd:08:a7:
e6:50:05:a0:8d:02:70:a8:bf:b0:1b:b6:ff:5b:63:02:8a:a1:
4e:ce:38:84:31:a7:29:b7:c9:83:7b:44:57:3d:73:e1:32:44:
7f:1d:54:9f:f5:6a:bd:04:70:73:27:1e:02:45:29:30:db:a0:
41:f0:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org