Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/653C9AA074DB11EFBADDB69E762E951A.roa
File: 653C9AA074DB11EFBADDB69E762E951A.roa (raw, json)
Hash identifier: 29Tl1qn/Uain4MhwRocZy2PFbVTKXBbVbDJYu8ZXsyM=
Subject key identifier: 05:A6:C1:97:9E:90:AA:0B:BF:57:88:B0:9E:37:28:C2:F5:95:DF:63
Certificate issuer: /CN=F36539AEAF/serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
Certificate serial: 02
Authority key identifier: 5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/653C9AA074DB11EFBADDB69E762E951A.roa
Signing time: Tue 17 Sep 2024 09:58:32 +0000
ROA not before: Tue 17 Sep 2024 09:58:28 +0000
ROA not after: Sun 17 Sep 2034 09:58:28 +0000
asID: 329260
IP address blocks: 102.213.177.0/24 maxlen: 24
2001:43fd:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36539AEAF/serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
Validity
Not Before: Sep 17 09:58:28 2024 GMT
Not After : Sep 17 09:58:28 2034 GMT
Subject: CN=66e952c8-bab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:c9:d1:54:00:74:74:54:b4:6c:c1:41:e6:
2f:ac:98:dd:e4:63:dd:af:1e:5a:93:00:bf:39:b0:
f1:3e:45:d1:f6:9c:69:04:11:ff:9f:db:eb:75:84:
0f:dd:74:d7:54:ab:88:71:a5:c0:b8:ff:aa:e2:4c:
41:5d:df:e8:c1:52:9e:b1:8f:dd:10:54:6a:ba:ab:
db:f4:ef:78:37:60:d5:56:e2:e6:19:c5:14:0d:1f:
07:a9:4a:35:2a:1a:5f:91:71:1b:52:6b:99:b8:b3:
d3:83:91:7a:56:ac:12:7a:ba:fa:60:51:df:8f:e8:
d8:ce:1c:5c:1d:bd:cc:50:54:be:8f:7b:1b:3f:4f:
a8:1d:4e:70:71:51:29:c7:12:6e:a8:65:c1:f9:30:
63:83:33:49:28:a8:93:b5:17:26:cc:9e:dc:ec:14:
84:06:eb:36:67:ab:f9:2a:65:36:06:35:cb:43:2c:
75:c4:5b:6f:d4:f2:a2:e4:e3:7d:d8:77:d8:20:53:
91:0e:f4:d4:8f:a8:14:ae:41:b8:7c:d0:e5:69:f2:
f2:74:cb:f3:df:cb:15:6f:87:7c:3c:f0:82:58:d4:
fa:b8:68:08:a7:6e:7a:3e:f1:c1:f1:a0:7b:ba:cf:
9d:16:62:4e:78:64:ab:8c:22:19:fa:1d:31:5c:4f:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:C1:97:9E:90:AA:0B:BF:57:88:B0:9E:37:28:C2:F5:95:DF:63
X509v3 Authority Key Identifier:
keyid:5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/653C9AA074DB11EFBADDB69E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.177.0/24
IPv6:
2001:43fd:1000::/48
Signature Algorithm: sha256WithRSAEncryption
51:b3:ce:9d:7d:45:76:a8:96:6e:f4:2d:21:5d:10:7a:25:12:
30:03:89:66:93:37:47:6c:bc:cc:5b:9f:b0:da:26:ec:ae:cf:
04:5f:0c:3d:97:41:cd:22:b9:74:bb:b6:83:d6:8f:8d:c5:89:
e1:67:75:15:60:3d:ae:83:71:24:1f:70:9e:48:a7:fa:b2:d8:
51:e3:6d:c8:00:41:09:67:f5:26:1d:b1:3e:f3:1e:0b:d0:07:
67:40:74:ce:37:ff:54:e3:27:a0:75:00:6c:c4:e9:9d:1e:fe:
af:46:c2:71:52:11:db:c6:57:32:35:8b:bf:33:78:c1:46:19:
ab:5c:c3:33:bc:03:0c:47:0f:04:25:26:e5:d2:f3:b9:61:85:
19:f1:54:ee:b0:56:85:79:f1:70:d8:2e:1a:b3:48:77:cf:de:
38:bf:9e:10:79:d4:2b:6e:90:f5:2a:46:ad:84:87:9c:a0:61:
63:6d:34:53:54:35:72:39:9d:af:2e:29:61:b1:7f:a1:3d:1e:
e3:3e:4a:39:f0:9a:5d:a6:ae:7c:aa:17:82:06:c6:c5:05:c8:
f4:e0:a9:49:6a:f8:3a:1f:31:1e:52:09:be:82:56:1e:15:da:
a9:e4:f1:95:e0:03:27:51:bd:83:4b:a0:f7:1d:4e:48:8c:88:
6d:1e:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:46 2024 by rpki-client on console-fra.rpki-client.org