Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/071179B6A99111EEACA6484F775412E6.roa
File: 071179B6A99111EEACA6484F775412E6.roa (raw, json)
Hash identifier: zAp9wof5ZMQH3PsEdXrC4g1fzlJZDiNYk3CgTbvbu54=
Subject key identifier: E8:7C:DD:94:A1:EA:EC:8B:23:36:8B:C3:89:5F:7A:0C:1D:8F:87:F9
Certificate issuer: /CN=F36709EDAF/serialNumber=6F22BBC87A0F084A04E488AE91F46EC88A0FB6BB
Certificate serial: 06
Authority key identifier: 6F:22:BB:C8:7A:0F:08:4A:04:E4:88:AE:91:F4:6E:C8:8A:0F:B6:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/071179B6A99111EEACA6484F775412E6.roa
Signing time: Tue 02 Jan 2024 17:04:45 +0000
ROA not before: Tue 02 Jan 2024 17:04:41 +0000
ROA not after: Fri 02 Jan 2026 17:04:41 +0000
asID: 329297
IP address blocks: 102.211.172.0/22 maxlen: 22
102.211.172.0/23 maxlen: 23
102.211.172.0/24 maxlen: 24
102.211.173.0/24 maxlen: 24
102.211.174.0/23 maxlen: 23
102.211.174.0/24 maxlen: 24
102.211.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36709EDAF/serialNumber=6F22BBC87A0F084A04E488AE91F46EC88A0FB6BB
Validity
Not Before: Jan 2 17:04:41 2024 GMT
Not After : Jan 2 17:04:41 2026 GMT
Subject: CN=6594422d-9be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:b7:85:1b:0d:f8:ca:0c:3c:28:d4:d8:e4:
14:75:3e:91:58:13:9e:e3:8a:9a:93:2f:f4:f4:83:
40:79:7d:74:c8:45:78:48:b7:23:24:15:b7:5d:7e:
d6:9d:3f:7d:56:e1:15:e9:d1:90:0d:d4:79:4c:98:
68:d8:e5:87:b2:76:1b:ea:4b:f4:67:57:50:68:a5:
88:d6:b6:c7:b0:41:71:75:27:74:b5:86:14:f9:c3:
4d:b7:aa:96:67:07:fa:b0:1f:91:43:43:38:e0:ad:
a0:cc:00:69:79:23:ba:ac:e5:e6:c3:40:8c:5d:46:
e9:66:c5:9d:b2:46:7b:14:17:7d:61:8d:03:1a:04:
08:fa:4c:0b:db:58:f8:b3:40:59:a1:18:3d:e4:f0:
d8:6f:5a:2f:cd:37:bb:68:06:ff:e0:3f:b2:2f:13:
ae:8d:fb:3e:4d:53:9e:c1:f3:89:69:8c:cf:a0:de:
cd:28:42:2f:bd:ab:9b:cb:71:19:22:ec:49:c8:7d:
4e:15:ba:c0:14:86:5a:44:2c:77:79:61:5e:a1:5d:
70:9a:b7:4e:68:7c:51:15:3c:ed:89:f9:10:3b:c2:
61:b5:3f:2d:e4:e5:bb:c2:3d:ff:7a:9e:c8:c5:0d:
c8:d2:47:b6:5f:f6:79:c6:3d:e9:b9:96:33:f4:84:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7C:DD:94:A1:EA:EC:8B:23:36:8B:C3:89:5F:7A:0C:1D:8F:87:F9
X509v3 Authority Key Identifier:
keyid:6F:22:BB:C8:7A:0F:08:4A:04:E4:88:AE:91:F4:6E:C8:8A:0F:B6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/071179B6A99111EEACA6484F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:4a:74:63:75:54:7a:8c:f1:cf:59:9e:be:dd:4f:bb:28:b3:
51:da:b9:55:e4:6f:74:24:d2:a8:9f:58:19:ea:e5:8c:25:2a:
08:a5:a0:c4:64:7b:cb:4b:3f:21:e9:1b:54:e8:ec:13:73:8d:
eb:50:0c:d9:f1:80:33:92:b5:79:db:ae:87:60:36:04:f5:bf:
63:ee:5c:03:37:95:5b:ba:7f:41:f8:a0:1d:55:a3:00:1e:6f:
6f:4c:83:cc:00:d4:1c:c8:ff:b3:1b:d0:f5:f6:56:ef:0b:7e:
0e:72:4b:84:3f:81:bb:28:82:ac:86:c1:d3:5c:23:3d:01:45:
d1:b9:a7:30:81:82:c7:62:88:0b:da:16:19:83:9e:22:9f:8a:
a0:51:23:16:ff:1a:16:c1:da:ab:ca:53:af:09:67:24:c5:42:
8a:e3:98:53:c1:e4:e0:61:ae:01:79:6d:2c:73:6f:16:cd:b3:
79:4b:ff:d5:e6:9d:1f:db:8d:3a:8c:ae:6d:61:5c:e6:72:87:
68:02:bd:be:9f:3a:91:ed:7c:30:2a:99:2f:e8:c8:12:8a:35:
ad:7c:e9:60:f5:87:40:e2:7c:a8:5f:13:59:d2:f8:f1:cf:da:
1f:bc:c7:3d:e4:f0:e6:a7:37:b9:95:39:e2:49:5f:b8:b1:61:
c9:33:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org