Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/59614966387611EFA5607E60762E951A.roa
File: 59614966387611EFA5607E60762E951A.roa (raw, json)
Hash identifier: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=
Subject key identifier: 52:6C:7D:46:AD:83:06:67:76:C3:EF:63:DA:48:8D:F5:8C:31:96:C6
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 02C2
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/59614966387611EFA5607E60762E951A.roa
Signing time: Tue 02 Jul 2024 13:24:03 +0000
ROA not before: Tue 02 Jul 2024 13:24:00 +0000
ROA not after: Sun 31 Jul 2044 13:24:00 +0000
asID: 37638
IP address blocks: 102.213.196.0/23 maxlen: 23
102.213.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Jul 2 13:24:00 2024 GMT
Not After : Jul 31 13:24:00 2044 GMT
Subject: CN=6683ff73-41ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:11:23:1a:a7:3e:1a:2d:76:ff:35:54:0b:3d:
7d:5c:03:fa:e2:a7:08:8f:94:39:b3:8a:09:0b:fc:
87:40:a4:83:32:91:91:9a:58:c7:41:34:4d:13:74:
25:3a:3a:54:1a:fd:d0:df:49:f3:93:7a:44:a2:39:
1f:15:40:39:9a:2d:13:ee:de:18:e2:16:f6:d3:04:
0c:d1:6c:99:d4:00:2e:43:a1:f2:08:f5:53:75:71:
ce:f2:1d:81:92:19:05:f4:5a:45:7c:a8:10:4e:6f:
5f:07:4e:c5:ac:23:4f:8e:dd:b3:05:22:a3:bb:95:
fd:ad:d9:c1:5d:ce:13:3f:0d:e7:97:9f:fc:08:f2:
d6:90:61:bc:da:00:be:29:93:ba:64:d5:57:bc:00:
c7:5d:52:e9:70:66:df:66:c3:0e:54:2f:94:6b:ba:
a2:b9:a2:24:01:ac:c2:b0:e8:ec:78:2e:63:d1:c9:
b1:91:63:32:8b:ce:64:00:f1:7d:58:3d:1c:9a:b9:
56:da:43:1a:33:51:0e:15:fe:f9:26:e1:ab:ba:a1:
af:20:a5:04:6b:e3:1d:8a:cf:c6:da:8a:38:3d:bb:
76:d9:7a:1a:4e:a4:6d:3f:18:42:c1:1d:90:7f:b7:
c5:1a:42:78:7d:9f:2f:6e:db:6d:03:9a:5e:c8:3e:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6C:7D:46:AD:83:06:67:76:C3:EF:63:DA:48:8D:F5:8C:31:96:C6
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/59614966387611EFA5607E60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.196.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:87:80:24:27:7c:fc:8c:2a:81:dc:59:25:28:2f:81:32:14:
2e:77:37:4d:a6:d8:38:d8:73:cc:4f:4a:de:a3:47:d8:44:b6:
50:50:be:c0:93:f7:08:8f:79:cb:0a:bf:47:0a:be:44:f8:10:
91:fe:b4:6f:fc:7a:17:75:b4:82:a2:a0:65:db:0d:9f:7a:93:
6d:23:d7:b6:39:bb:d7:f7:3f:8b:5a:ba:45:a0:8b:36:5f:b9:
7d:9f:87:32:a8:2e:46:cc:e1:b1:bd:b7:b6:15:56:88:af:94:
fc:67:b9:2d:80:03:49:17:f5:10:8c:26:01:e4:73:b3:d1:cf:
c5:e5:ed:82:97:fb:8b:24:70:4f:98:31:de:aa:34:00:82:8a:
33:27:cf:02:c4:f5:64:78:38:fc:e9:01:5b:86:08:c8:e1:99:
8a:64:4b:1f:b8:3d:ec:f2:fd:00:f4:e2:b8:22:d7:2d:20:2f:
e7:60:6c:ac:ff:9f:a1:d9:88:e2:9b:d4:26:b2:01:05:f6:b2:
58:1c:38:5d:8e:9b:ab:b2:58:64:77:8a:c8:68:0d:2d:e1:a2:
17:7e:87:44:af:a8:eb:b1:d9:f8:74:0d:c8:24:be:df:25:ce:
a9:0f:f0:d4:35:57:12:11:5f:ef:59:f6:d0:7e:cc:99:18:d9:
cf:a5:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org