Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5634B5344B2D11EEB602566E4AD9E6FC.roa
File: 5634B5344B2D11EEB602566E4AD9E6FC.roa (raw, json)
Hash identifier: RXMYhudjIg+5B4S6A7PfziGVGL2i90FJjq9kDBWz4BY=
Subject key identifier: D9:1D:28:CB:6D:B3:2C:AE:4C:2D:31:D7:83:A6:59:D1:15:E4:D8:10
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 035E
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5634B5344B2D11EEB602566E4AD9E6FC.roa
Signing time: Mon 04 Sep 2023 14:14:19 +0000
ROA not before: Mon 04 Sep 2023 14:14:15 +0000
ROA not after: Sat 04 Sep 2032 14:14:15 +0000
asID: 37645
IP address blocks: 102.211.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Sep 4 14:14:15 2023 GMT
Not After : Sep 4 14:14:15 2032 GMT
Subject: CN=64f5e63b-f4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:2b:28:ca:cb:f5:0f:24:34:8d:c3:93:a8:
6c:ee:87:0c:59:66:25:7f:85:f9:3c:4d:77:fa:a0:
3f:63:9f:1a:00:a2:d0:c5:19:ed:5d:5f:68:56:bc:
5b:15:86:11:82:8f:87:03:fa:be:28:ec:e4:dc:dd:
87:f0:e9:8f:e7:24:be:3c:05:7d:79:c3:39:83:72:
a0:d7:69:4a:74:77:3e:1b:16:9d:05:8b:d7:bb:5f:
3f:e6:dd:39:8a:39:01:ba:2e:dd:12:d5:0d:0a:03:
00:ae:c1:22:64:e5:30:f7:38:38:52:3c:95:d0:ae:
f3:02:20:b1:40:57:3b:be:b2:2e:c6:1e:78:cd:bc:
a1:9e:58:b1:a7:93:e1:b9:ce:3d:34:bf:23:31:50:
e3:6c:f8:d3:2f:f6:23:e0:1f:54:78:74:9a:76:48:
99:d2:34:af:99:2f:66:66:5f:98:8e:96:92:fa:9d:
70:e7:30:ec:43:e6:bd:21:73:67:29:3e:9f:c7:44:
e0:d8:46:75:b3:48:f5:dc:a8:90:bb:8a:bc:68:4f:
b7:43:c5:ea:f1:22:43:f2:bf:14:aa:bf:53:b2:00:
64:0a:04:74:e4:f3:59:c4:64:09:25:d6:c5:19:e1:
35:d8:6e:ab:b7:73:39:b3:0c:24:76:6d:c2:41:f3:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:28:CB:6D:B3:2C:AE:4C:2D:31:D7:83:A6:59:D1:15:E4:D8:10
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5634B5344B2D11EEB602566E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.128.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b2:67:48:8c:77:e9:5e:e1:3d:5c:3d:c4:aa:8a:7b:09:3e:
73:07:4b:5b:29:30:d2:6f:b4:e9:b5:cd:11:84:bd:6b:f0:9b:
c4:4e:bc:4c:40:98:b5:2b:1f:85:a1:0f:07:29:40:1b:b6:b1:
60:5e:62:e4:e2:71:f3:07:82:56:58:72:e0:7c:a9:da:03:b2:
2e:ab:7e:9d:0b:64:ef:84:57:50:31:3a:77:3d:77:a7:c9:f5:
06:61:ac:05:fc:bb:2d:10:83:62:9f:28:76:9f:52:1d:6d:e0:
81:7c:d1:8e:36:52:a1:63:43:d8:f5:a9:4b:eb:32:53:1a:ca:
5c:7d:96:a9:5f:7e:4b:87:fd:b8:e3:c9:83:88:86:af:c9:fe:
cf:56:30:db:b5:1f:0b:4d:35:5f:5c:81:12:db:b0:31:c6:6f:
e1:25:6a:1e:9b:01:38:e2:a6:84:1a:39:a0:3b:12:94:b9:04:
38:05:3a:92:a5:43:bc:c5:56:0d:24:ae:a9:0b:00:5e:96:df:
c5:ea:06:e4:42:dc:f2:6e:be:b3:a9:db:e5:41:cd:bc:a1:05:
94:ac:29:d5:cc:f0:ed:38:17:b2:18:56:e9:69:e1:9b:50:32:
0c:5e:3b:2b:20:06:cf:1a:6b:8d:b9:04:87:7f:23:29:b3:17:
cf:95:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org