Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/372EFCA0A25A11EFAAD33E6C762E951A.roa
File: 372EFCA0A25A11EFAAD33E6C762E951A.roa (raw, json)
Hash identifier: jXcMwEZ6x+PNlXsc2vxqRd61fU6PmUJ6NzBab4lercs=
Subject key identifier: 7C:3D:2E:28:36:7B:DB:3E:85:D2:04:C0:F7:46:D2:03:E1:8A:AD:C4
Certificate issuer: /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial: 082B
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/372EFCA0A25A11EFAAD33E6C762E951A.roa
Signing time: Thu 14 Nov 2024 07:29:43 +0000
ROA not before: Thu 14 Nov 2024 07:29:39 +0000
ROA not after: Tue 14 Nov 2034 07:29:39 +0000
asID: 37172
IP address blocks: 102.207.64.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Validity
Not Before: Nov 14 07:29:39 2024 GMT
Not After : Nov 14 07:29:39 2034 GMT
Subject: CN=6735a6e7-f4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:40:0d:87:4f:ee:92:e5:b5:01:5f:01:b4:
b9:29:d7:1c:a0:31:0c:85:95:82:74:89:80:9a:4d:
10:ca:98:38:d5:ee:41:7f:5b:c2:1d:ff:a8:56:16:
a4:37:f3:4e:ed:b1:11:fd:47:0d:ac:7b:2a:de:14:
ac:57:c1:11:4c:20:70:6d:b0:e7:cf:2f:6f:41:5e:
2d:83:ef:75:d7:46:9f:aa:e2:e1:ca:13:b5:52:8f:
68:02:ea:ac:e8:7c:d5:ed:e3:25:c0:63:dc:43:7d:
46:ad:8b:15:37:55:1d:6d:1e:7d:38:b2:d0:83:06:
cc:c8:c1:a3:9f:74:84:aa:d5:e9:08:85:55:95:9e:
d8:32:f5:39:54:74:a3:02:d3:e9:43:99:c4:e4:8a:
dc:29:c6:f2:26:60:4d:00:9a:4a:fc:f1:cb:9e:ce:
3d:63:f4:fd:eb:49:1e:b9:c0:48:e4:5d:64:6f:a1:
33:72:1e:55:22:2e:b3:77:4d:cf:51:ba:fe:19:7c:
aa:2e:61:89:f3:f0:99:5f:a3:7f:89:5c:98:6a:45:
6f:d7:3b:be:08:86:bf:af:47:c4:df:bb:9f:4d:4d:
01:de:6e:92:4a:05:20:d7:77:bf:6b:65:5f:cb:29:
aa:7a:a2:26:fd:b9:c7:01:b9:01:67:9e:19:36:64:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:2E:28:36:7B:DB:3E:85:D2:04:C0:F7:46:D2:03:E1:8A:AD:C4
X509v3 Authority Key Identifier:
keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/372EFCA0A25A11EFAAD33E6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.64.0/22
Signature Algorithm: sha256WithRSAEncryption
01:5f:db:5c:53:c8:ac:9d:12:38:bb:9f:30:12:f0:d6:15:d3:
e8:9c:02:78:00:ac:ac:76:19:ab:85:7c:93:f8:18:02:5b:47:
0c:f2:72:59:98:7c:6d:99:73:a0:7d:08:6a:1a:53:15:8d:a5:
bd:1f:49:79:a3:4c:6e:a3:a8:de:fc:c0:f9:3e:e3:6f:54:e4:
bb:e5:e0:28:0e:cb:f7:f5:2c:ee:11:20:56:d8:52:cd:5b:0c:
dc:dc:1c:fe:11:87:fe:b3:7b:98:3b:19:dd:b3:3b:e7:ca:50:
48:6c:f8:48:ed:95:75:81:ed:35:ab:c5:d6:05:1a:87:2d:92:
89:18:1d:fe:1f:35:20:09:4c:ca:ab:c4:e2:f3:0b:5a:ad:bc:
a1:27:87:cf:3a:4f:94:31:ea:f1:d1:c7:ad:8b:fc:52:ae:4c:
cc:00:ae:63:1d:fd:56:e0:7b:2e:4f:93:97:94:11:22:6f:01:
1f:71:dc:66:8a:3e:dc:e4:51:82:e2:8c:ad:7d:2c:6b:89:ff:
2f:41:ef:da:64:b3:8f:20:c9:f6:a1:6a:da:e9:ca:27:97:39:
be:d6:a7:d1:b1:c9:3c:94:20:54:37:bf:b5:46:da:71:ab:83:
94:fc:cb:73:a2:80:6b:50:9f:e9:be:c0:9a:5f:23:0d:9f:a5:
f3:6d:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:13 2024 by rpki-client on console-fra.rpki-client.org