Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/21EBF2FA808E11EFA13738B8762E951A.roa
File: 21EBF2FA808E11EFA13738B8762E951A.roa (raw, json)
Hash identifier: lyLTmMKZ2ESJbQ4/CGDElnvp4KAGPEgfFJbkcYzjAzw=
Subject key identifier: E3:55:A0:B0:BD:96:09:0A:05:59:4C:59:F7:89:16:EE:14:67:6F:6B
Certificate issuer: /CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Certificate serial: 0675
Authority key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/21EBF2FA808E11EFA13738B8762E951A.roa
Signing time: Wed 02 Oct 2024 07:15:42 +0000
ROA not before: Wed 02 Oct 2024 07:15:32 +0000
ROA not after: Mon 02 Oct 2034 07:15:32 +0000
asID: 328638
IP address blocks: 102.141.64.0/19 maxlen: 24
102.207.180.0/22 maxlen: 24
102.216.104.0/22 maxlen: 24
102.221.220.0/22 maxlen: 24
154.65.112.0/20 maxlen: 24
196.6.112.0/21 maxlen: 24
2c0f:f0a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Validity
Not Before: Oct 2 07:15:32 2024 GMT
Not After : Oct 2 07:15:32 2034 GMT
Subject: CN=66fcf31d-4db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:4b:68:22:1f:b2:7a:c3:5d:32:01:12:5c:
ba:28:a8:77:18:dc:23:2d:49:6d:08:29:35:65:5f:
71:ba:20:67:70:0c:0e:cf:97:58:ad:db:cf:9b:a4:
5e:cb:24:e9:35:8f:99:05:05:0f:a3:a8:88:ea:27:
94:4e:c3:08:e4:c5:ab:57:b9:55:d4:1e:ff:91:a8:
51:31:b3:7d:6a:5a:06:69:67:16:9f:a6:66:c9:44:
a3:d0:c7:76:e1:99:69:ed:1c:64:eb:79:9d:67:fc:
71:ff:b7:d7:4d:01:58:27:b3:1a:b4:78:d5:ea:0c:
76:26:72:28:27:ca:b0:9c:ae:31:9a:73:04:c3:74:
8f:fd:e3:e6:42:84:b2:5f:67:f7:a5:74:05:c9:b2:
0b:95:ef:0d:db:35:c1:15:21:40:cf:58:28:03:8c:
04:bd:da:df:63:1e:5a:10:fd:af:b5:5f:1b:7b:06:
ac:67:f8:84:96:f0:63:bd:5a:19:fc:c4:dd:53:d0:
b6:45:8b:68:92:37:de:fd:7e:7e:52:97:7b:71:99:
68:ab:cc:94:e0:fa:70:93:9d:09:87:8a:6f:80:f0:
09:5d:ea:9d:cf:be:28:52:23:c3:fe:f4:54:34:84:
d4:48:85:6f:9d:03:ea:e6:4a:42:c1:6d:a8:0c:f0:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:55:A0:B0:BD:96:09:0A:05:59:4C:59:F7:89:16:EE:14:67:6F:6B
X509v3 Authority Key Identifier:
keyid:EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/21EBF2FA808E11EFA13738B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.141.64.0/19
102.207.180.0/22
102.216.104.0/22
102.221.220.0/22
154.65.112.0/20
196.6.112.0/21
IPv6:
2c0f:f0a0::/32
Signature Algorithm: sha256WithRSAEncryption
74:ac:12:2a:d6:9e:18:09:f2:00:56:95:b6:11:bc:66:14:9f:
a0:13:8d:c7:ce:66:76:e9:6d:50:ae:bc:9a:9f:1f:9d:24:bb:
7f:72:48:3b:9d:df:9c:8f:bd:76:58:6d:7f:1a:55:9e:bb:90:
dc:06:97:7a:a6:81:f6:17:ec:0a:a4:d9:fd:b5:b0:59:7e:44:
fb:a4:4c:c4:d5:10:cf:0f:9f:f3:89:c3:11:31:cf:c3:f1:13:
15:0d:73:d0:13:39:9c:57:e1:74:a7:1f:a4:b8:e7:78:4d:67:
da:2f:16:ad:f4:67:3f:61:33:10:04:dd:ff:6c:32:7f:1a:3f:
82:0f:3c:15:58:31:0f:27:b7:e4:94:b0:a8:02:d7:b1:99:8e:
f2:6e:2a:50:91:8d:16:3b:2d:09:17:90:d1:61:95:19:0e:00:
bd:a9:94:78:dd:4a:5d:43:0e:f4:f5:35:83:fa:4d:c0:9f:a5:
59:07:c3:db:54:26:cb:de:b9:90:14:f1:91:56:45:cc:2b:0e:
e0:17:e2:f3:d5:26:a0:da:d8:30:2d:52:f1:03:7c:50:9f:63:
6c:50:a0:5e:07:40:40:ce:25:a0:0b:62:ca:dc:40:9d:e8:df:
3b:a0:69:32:3b:3b:b4:39:b6:73:78:02:81:76:69:25:e7:b3:
a6:5d:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:28 2024 by rpki-client on console-fra.rpki-client.org