Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/4BEC690082F511EEBBB42B674AD9E6FC.roa
File: 4BEC690082F511EEBBB42B674AD9E6FC.roa (raw, json)
Hash identifier: ASnfqkuhQSFv0giROiw8EEeT1sMeoGjHEd6cWLcq/WE=
Subject key identifier: 8A:3B:1C:87:5C:4F:70:30:ED:5C:92:A4:CB:CE:E3:CD:B8:D0:9F:51
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 03AD
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/4BEC690082F511EEBBB42B674AD9E6FC.roa
Signing time: Tue 14 Nov 2023 13:54:15 +0000
ROA not before: Tue 14 Nov 2023 13:54:11 +0000
ROA not after: Mon 14 Nov 2033 13:54:11 +0000
asID: 37645
IP address blocks: 102.210.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941 (0x3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Nov 14 13:54:11 2023 GMT
Not After : Nov 14 13:54:11 2033 GMT
Subject: CN=65537c07-5040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:c4:99:dc:a8:a5:d2:6d:9e:3e:28:44:6d:
1b:5b:0b:22:ac:f5:21:79:7f:3f:1c:0b:ef:c7:c2:
2b:95:55:c2:af:2c:87:83:6f:68:58:6b:57:8a:5d:
1c:d3:33:67:03:53:fc:fc:27:d5:e8:ec:e4:20:e0:
70:77:8f:56:64:64:a9:b8:0a:aa:7a:5a:94:52:ff:
25:6e:97:5a:e6:fa:67:d7:8e:18:5b:b6:43:de:82:
58:1b:8e:59:7b:91:2f:20:58:3f:b2:9b:91:91:45:
95:c7:47:12:09:c6:d5:51:84:f6:88:e8:e7:8f:fd:
a4:06:64:fd:c0:b9:2c:08:29:95:9e:36:b9:7d:9d:
db:ee:e0:9b:54:f0:b0:dd:0a:ef:ed:ed:f8:83:36:
7a:f8:f8:e8:ee:7c:c9:1c:d6:b2:d2:c1:1a:4d:e2:
91:87:b2:e9:0e:db:cd:d7:4f:43:85:40:f8:db:41:
42:10:bf:8a:7f:c3:1d:6a:6c:91:75:fa:7e:f3:1e:
83:1c:57:e0:b7:ff:2c:75:47:60:e3:8b:b1:11:7e:
0b:04:69:42:72:78:9e:46:bf:aa:ae:a6:1d:33:0a:
4e:f7:fe:fa:96:40:a6:6f:a3:83:a1:a6:d9:6d:09:
70:c0:92:72:72:6c:a4:03:bb:af:c8:b5:19:16:34:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3B:1C:87:5C:4F:70:30:ED:5C:92:A4:CB:CE:E3:CD:B8:D0:9F:51
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/4BEC690082F511EEBBB42B674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:36:e4:3c:31:bd:df:3f:2b:e8:a5:ff:27:21:de:8a:fd:7b:
93:92:cb:5b:10:45:9a:e0:d3:3c:a0:cb:3b:c3:49:f9:af:da:
4a:34:b6:76:5a:6a:65:a3:ab:d2:7a:58:f1:f3:ea:32:c3:36:
74:ef:04:e2:2e:50:c2:c7:82:29:0e:5b:f6:ec:c3:f8:e2:04:
c6:df:fc:6d:01:11:34:15:fc:1d:ef:c9:c3:d1:8a:2f:30:7a:
89:52:4f:5d:db:ba:a8:e6:88:7d:ea:3c:22:07:87:a6:6f:c9:
fe:e5:b2:3b:04:cd:31:51:1a:8b:69:59:f7:f6:dd:1f:a6:48:
5e:4e:1d:5a:14:42:77:4c:11:84:3b:cb:d9:08:ef:ab:a9:9c:
1e:6c:6f:82:89:a9:b2:c3:af:16:89:2a:6f:3d:52:81:a9:de:
cf:44:cc:a5:7e:cf:8e:ab:d5:18:7a:c7:cf:e0:4e:49:f1:a3:
1e:1d:90:58:c5:4f:69:22:fd:77:c8:27:f6:a9:72:fc:ff:11:
77:8b:2a:48:5c:9c:1f:b7:17:6f:92:85:26:a2:16:56:0e:0b:
44:b2:50:86:99:ab:ab:ba:bc:45:ef:f1:8f:66:75:12:a2:a3:
23:4b:2f:1f:1d:39:10:9e:7e:a5:1e:e9:1d:7a:3d:c9:f7:46:
e5:f1:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:18 2024 by rpki-client on console-ams.rpki-client.org