Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/9058BEEA816411EF8E2AA088762E951A.roa
File: 9058BEEA816411EF8E2AA088762E951A.roa (raw, json)
Hash identifier: RCn22Xwu4T2MS/ROjl1vK38sisW96USMCz48c97gNCE=
Subject key identifier: DC:C7:35:06:B0:61:08:11:1A:55:BF:4B:BE:39:B3:87:7A:D6:E8:C4
Certificate issuer: /CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Certificate serial: 03
Authority key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/9058BEEA816411EF8E2AA088762E951A.roa
Signing time: Thu 03 Oct 2024 08:50:39 +0000
ROA not before: Thu 03 Oct 2024 08:50:35 +0000
ROA not after: Tue 03 Oct 2034 08:50:35 +0000
asID: 329481
IP address blocks: 102.208.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Validity
Not Before: Oct 3 08:50:35 2024 GMT
Not After : Oct 3 08:50:35 2034 GMT
Subject: CN=66fe5adf-f24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:a3:77:e9:36:c9:dc:4b:7f:6e:31:f2:05:
08:a5:d6:40:4f:e4:b0:a3:76:22:0a:c6:30:3e:bc:
90:2d:e0:15:5e:c4:48:2b:94:98:0e:62:a2:2d:fc:
b3:fc:a1:fa:c2:3b:c9:f6:5f:71:5b:5e:a4:6f:1e:
93:d6:57:49:70:d1:94:d2:fe:8a:eb:8c:9e:ab:d6:
1c:c9:6e:9d:02:ae:49:c7:f7:23:12:0d:51:d7:23:
5d:67:88:bd:7e:4a:d4:9c:ec:3e:f9:1e:c4:28:eb:
bf:cf:67:81:b2:ce:9c:7d:79:19:d4:55:e3:42:08:
48:9c:99:c7:b8:9d:7f:a1:99:ed:41:ed:05:17:5c:
00:79:f2:82:ba:2a:42:a3:f5:d4:aa:ac:6a:ed:9b:
18:08:d7:4f:7c:5b:92:ad:05:bf:74:14:0b:dc:2a:
8a:63:3b:44:30:3c:f4:c7:44:33:c2:ed:59:95:99:
05:cf:49:0c:34:d0:d4:ae:2c:10:21:76:59:07:9d:
19:ab:9f:e5:b2:ae:30:8c:5a:8a:1d:d3:12:35:c2:
8c:33:19:38:d4:c1:a1:bc:9f:dc:e5:ea:57:d3:fc:
5b:7b:17:ef:a6:5e:e5:f8:2f:50:0a:be:f4:00:b8:
b7:f0:28:96:fd:93:e3:68:da:d7:8c:18:35:9f:0d:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C7:35:06:B0:61:08:11:1A:55:BF:4B:BE:39:B3:87:7A:D6:E8:C4
X509v3 Authority Key Identifier:
keyid:DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/9058BEEA816411EF8E2AA088762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:df:f7:f8:f1:54:50:7a:2b:80:5d:67:fd:6e:62:c6:08:eb:
b8:55:f4:05:dc:a7:b3:74:17:e7:03:13:df:29:0f:d6:e4:ae:
b8:04:47:f5:d6:d0:89:4d:c2:51:31:32:f1:4d:77:fb:24:c7:
54:84:2e:95:be:19:70:dc:51:d2:05:84:c4:19:ad:67:40:9a:
c7:8b:ca:78:60:cb:8b:9b:c7:49:ae:73:06:e4:6b:60:ce:a5:
d3:64:73:c7:91:44:24:2e:71:54:7f:5c:e8:67:58:d6:e4:f2:
dd:49:89:a2:b8:18:aa:44:a7:84:17:b8:cd:cd:c2:90:7a:5c:
d0:71:10:a1:d8:69:1d:d3:96:49:dd:da:a9:39:a9:6b:32:e9:
e2:4f:0c:fd:d4:0f:8a:6a:4b:dc:4e:d3:8b:29:64:e9:3b:62:
35:b8:4d:40:fc:f2:6d:77:90:6f:7a:57:76:14:ca:3a:3f:8e:
69:8c:8b:49:6e:b1:28:96:14:31:fa:9b:e0:eb:9f:77:4e:c6:
c1:c4:41:cf:1b:35:55:45:6d:3c:16:92:2f:96:d0:41:29:27:
a4:9d:dc:18:ff:76:f3:e8:d8:98:8f:da:48:0b:3a:81:f8:01:
0d:48:d0:5e:54:06:13:ee:65:70:13:f9:ac:1e:5e:54:14:78:
2a:b7:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:49 2024 by rpki-client on console-fra.rpki-client.org