Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/C13DB620338811EFAF564256762E951A.roa
File: C13DB620338811EFAF564256762E951A.roa (raw, json)
Hash identifier: qoDfPBZmGs4C34p4Zle9KFIn155BrLy8WwuN64ToB88=
Subject key identifier: 9D:A4:BC:A5:6E:0C:3C:2F:95:10:D7:B0:B9:E6:E5:86:98:8B:C6:2F
Certificate issuer: /CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Certificate serial: 038E
Authority key identifier: F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/C13DB620338811EFAF564256762E951A.roa
Signing time: Wed 26 Jun 2024 06:53:12 +0000
ROA not before: Wed 26 Jun 2024 06:53:08 +0000
ROA not after: Sun 31 Dec 2034 06:53:08 +0000
asID: 328964
IP address blocks: 102.208.204.0/23 maxlen: 24
102.217.253.0/24 maxlen: 24
2c0f:4880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Validity
Not Before: Jun 26 06:53:08 2024 GMT
Not After : Dec 31 06:53:08 2034 GMT
Subject: CN=667bbad8-54a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:d9:2a:a5:0f:02:c2:6f:86:58:87:7f:e8:
d3:33:51:1b:19:ff:3e:e8:e9:b4:ce:b9:63:0b:b9:
ad:9a:99:65:a5:dd:a1:5f:10:8e:1a:4d:bc:9c:a3:
5e:72:a2:ed:0f:79:45:25:2a:50:13:c8:b9:34:b9:
9c:9e:9e:73:e6:d3:a5:a9:fa:2d:fc:e7:59:48:17:
3a:4f:8a:90:4a:60:52:d7:77:d9:00:b7:11:cc:89:
91:8a:66:5a:19:e1:20:09:17:cd:7f:f6:4a:ab:f6:
01:00:09:65:9d:2a:00:69:ae:6c:f3:5a:7c:72:7c:
0c:b2:84:7e:b5:3d:27:a9:e9:86:47:9c:a3:e9:9a:
b6:49:20:3b:d0:56:02:f4:a4:01:f1:38:5c:76:73:
3a:d0:3f:66:95:c6:d3:30:4b:9f:35:2f:df:8c:b3:
b9:6c:41:4d:d1:75:60:9c:b3:ae:a8:ad:0e:28:4b:
e9:fa:16:7f:0d:39:14:d3:02:b4:25:bd:74:8c:54:
b1:97:ea:e8:87:af:61:fc:48:bd:e4:16:5f:69:5c:
04:79:c5:9a:14:8d:a4:2b:23:11:8e:8a:83:fe:30:
8d:a8:5f:d8:30:7e:53:70:ff:1e:62:58:cc:1b:13:
39:73:07:2a:ae:98:ae:10:8a:7f:74:7d:c1:29:09:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:BC:A5:6E:0C:3C:2F:95:10:D7:B0:B9:E6:E5:86:98:8B:C6:2F
X509v3 Authority Key Identifier:
keyid:F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/C13DB620338811EFAF564256762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.204.0/23
102.217.253.0/24
IPv6:
2c0f:4880::/32
Signature Algorithm: sha256WithRSAEncryption
32:b0:30:74:c7:e7:57:11:0c:01:32:af:a3:6d:a2:24:66:d4:
c3:a6:dd:d3:9f:c2:7e:47:aa:fb:43:45:06:2e:39:83:9d:23:
30:59:97:d6:2e:d7:ba:74:ac:a5:eb:8d:4c:5f:3b:09:3e:47:
62:dc:ed:7b:4b:8c:c2:01:b6:5f:d6:44:0a:0e:73:43:ff:77:
a5:9c:da:ae:c3:ba:a0:6a:73:23:10:98:6b:ea:b5:94:e2:7c:
77:bf:ba:f0:29:8b:1a:cb:e3:1f:74:74:2d:99:bf:98:a4:b4:
fc:77:3d:d0:e7:8c:66:37:db:70:a9:bb:70:11:51:39:3d:d1:
19:b1:4e:d9:f5:2b:58:4e:ae:6c:91:00:d9:7b:25:ae:dd:70:
24:8c:8d:71:d9:6d:22:3e:6a:bb:e4:41:8d:41:87:b2:b6:e4:
b0:14:e7:fd:49:d8:10:c8:29:b8:3d:30:b3:76:70:78:0f:f2:
0c:5a:aa:68:a5:85:cb:bc:8c:04:1b:09:31:f0:1e:53:97:26:
07:d7:32:6b:c8:4d:e9:dd:ac:21:6b:16:e7:9f:c9:ab:b7:f0:
09:59:60:28:c5:dd:45:30:b0:37:3d:45:b5:78:ed:16:d7:b0:
d0:a9:c2:ed:1a:6e:9d:69:8d:68:59:21:d2:09:83:70:28:25:
60:98:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org