Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/9FEAD93C759E11EF89A6AD67762E951A.roa
File: 9FEAD93C759E11EF89A6AD67762E951A.roa (raw, json)
Hash identifier: ivnmKqYJqB476OpSS3/VFXK0kDuTC5Zwz92WOyZCMeU=
Subject key identifier: 57:29:30:25:41:28:6D:7C:77:9E:B3:05:1A:39:B8:CF:75:AD:D9:67
Certificate issuer: /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial: 06E3
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/9FEAD93C759E11EF89A6AD67762E951A.roa
Signing time: Wed 18 Sep 2024 09:16:02 +0000
ROA not before: Wed 18 Sep 2024 09:15:59 +0000
ROA not after: Fri 29 Sep 2034 09:15:59 +0000
asID: 328631
IP address blocks: 102.218.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Validity
Not Before: Sep 18 09:15:59 2024 GMT
Not After : Sep 29 09:15:59 2034 GMT
Subject: CN=66ea9a52-325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:2d:3f:32:d1:ca:52:d9:2f:cb:68:fa:f2:
34:a1:e9:05:b5:35:5a:10:2a:c9:0f:55:11:fd:1b:
8d:52:43:98:3c:42:d3:d7:48:11:ea:15:54:b9:9f:
7a:7a:5e:44:01:9b:54:dd:a0:ba:48:89:15:a3:f7:
4c:b2:c9:11:63:46:52:b5:cd:12:d3:8a:13:cb:70:
e1:20:0f:52:7c:59:77:5b:77:b8:2c:c9:d2:c2:12:
a2:f7:8f:a6:bc:ae:b1:da:93:14:ae:85:cf:4a:e7:
f8:24:5c:23:21:ff:61:8d:74:6d:c6:c0:db:4f:de:
89:ba:9a:e0:a8:8e:e0:8d:3a:be:de:44:11:2f:65:
06:22:9c:1c:eb:8f:72:12:8b:d8:55:bc:d9:2a:a3:
8a:35:78:eb:9b:3d:0a:3f:bb:53:a4:4f:c8:87:e4:
b0:4d:00:10:e3:b0:6c:85:d6:1a:d4:a4:b7:d4:3f:
b8:1b:eb:21:a2:04:49:e5:84:4a:38:42:0b:20:03:
7b:11:42:90:64:d7:e7:80:c2:46:30:c3:06:e2:6d:
2d:00:fe:c2:f1:30:7e:d0:9a:f8:27:1f:03:f2:5f:
2c:e3:04:d9:3c:8f:ea:5c:e3:da:a9:ee:a7:8e:aa:
f0:94:e7:9e:fa:4d:51:4f:65:4b:a3:7e:d6:e5:3e:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:30:25:41:28:6D:7C:77:9E:B3:05:1A:39:B8:CF:75:AD:D9:67
X509v3 Authority Key Identifier:
keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/9FEAD93C759E11EF89A6AD67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.24.0/22
Signature Algorithm: sha256WithRSAEncryption
46:97:0f:7c:9f:38:9d:3e:ff:f5:de:fa:61:62:29:59:da:1c:
21:35:b8:21:f5:7d:a6:d0:48:5a:b7:e0:f1:a5:ee:71:5e:54:
d2:b6:60:01:ba:ef:67:03:1c:94:65:4e:28:10:7f:94:a8:1d:
e4:37:d1:d5:25:a0:ef:7d:16:6f:cc:c5:5d:5f:12:f7:21:f7:
6b:ab:1c:03:2e:17:dd:28:d2:6b:35:98:b3:fb:62:e6:9e:b7:
8d:95:5a:87:16:24:b1:9d:bd:fa:ae:fd:46:4a:9c:98:29:cb:
f2:65:81:b6:3b:85:ef:de:63:18:b9:f6:5c:85:57:cb:71:7e:
6a:6c:de:6b:c7:99:c2:2b:cb:8e:a1:ee:14:4e:74:26:2e:ff:
33:66:1f:b1:5b:0d:a3:25:5b:1a:6b:ff:26:8b:90:be:12:6b:
d1:58:9c:3c:11:0c:0b:f6:e0:7d:2a:85:de:d3:bb:c5:3b:73:
af:5f:3a:fa:de:05:96:17:fe:8d:83:23:d1:fa:9f:f1:f1:96:
be:04:48:08:38:f2:dd:c4:9c:bd:18:7b:8a:76:f1:3f:cf:18:
07:03:e3:b7:a0:8d:93:59:5a:0b:c9:01:af:8d:05:09:5c:47:
74:da:b3:a2:3e:3c:d0:cc:b4:37:fc:eb:b0:01:fd:7d:15:a3:
3f:c2:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org