Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/DE6A96689BAF11ED872A3CE3F1222468.roa
File: DE6A96689BAF11ED872A3CE3F1222468.roa (raw, json)
Hash identifier: Azt6ehpluobbTkNPa//tv1URzUpC9mBdBjuIo2fSzCg=
Subject key identifier: A6:69:DF:3D:7C:88:91:5D:4C:6A:C1:13:8B:E5:2F:C1:B2:F0:8B:B6
Certificate issuer: /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial: DE
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/DE6A96689BAF11ED872A3CE3F1222468.roa
Signing time: Tue 24 Jan 2023 06:25:17 +0000
ROA not before: Tue 24 Jan 2023 06:25:12 +0000
ROA not after: Mon 24 Jan 2033 06:25:12 +0000
asID: 329039
IP address blocks: 102.216.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Validity
Not Before: Jan 24 06:25:12 2023 GMT
Not After : Jan 24 06:25:12 2033 GMT
Subject: CN=63cf79cd-21ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:2b:4d:73:d1:55:58:79:54:51:8c:01:c4:
66:0a:c8:63:c6:4e:41:fd:87:ae:1a:43:44:da:83:
90:94:05:6a:88:4a:70:e8:3f:8f:ca:8e:4f:c0:e3:
8b:18:d8:60:03:59:85:af:51:ec:c4:dc:30:26:89:
e1:96:9d:0d:7b:07:d8:08:8e:b6:df:f7:d4:9b:cf:
27:ed:2d:0c:5b:23:82:84:64:1e:59:c6:2d:a6:e2:
f7:d4:bc:ac:b8:51:6e:62:e9:49:bf:f7:f8:71:96:
d9:54:f5:85:ef:bc:d0:7c:0a:24:e6:1f:2e:b1:97:
2a:e9:eb:7c:ff:c2:30:78:0e:a0:3d:38:ce:86:14:
4d:9b:a8:77:61:db:fb:ed:0e:de:b9:91:43:6e:72:
c9:e9:a7:08:5a:a4:9c:ca:8e:83:6e:8f:2c:a4:be:
b9:f9:05:3f:6f:cd:04:35:a8:d3:69:34:73:fb:dd:
45:49:21:72:e4:16:3c:80:41:2d:41:40:3e:f6:c8:
22:c6:fe:41:a8:89:dc:ad:5f:74:b0:79:81:f4:d3:
59:6a:d2:58:6b:6f:38:90:e0:61:97:6c:77:f3:08:
55:8b:92:8c:6b:46:8e:86:ea:70:49:87:22:a3:90:
0b:74:91:ea:d5:cb:b6:ad:2e:4c:58:62:5e:64:d2:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:DF:3D:7C:88:91:5D:4C:6A:C1:13:8B:E5:2F:C1:B2:F0:8B:B6
X509v3 Authority Key Identifier:
keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/DE6A96689BAF11ED872A3CE3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.16.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fa:5b:d5:52:76:e2:65:21:fe:b8:c1:06:60:ce:f1:31:3c:
b3:7e:6c:99:1c:a9:6d:8c:de:9b:e1:a7:3f:a0:0b:2e:fd:e3:
71:ce:2c:85:26:d9:30:1b:16:de:d7:98:39:14:65:79:46:c8:
ae:5e:72:d3:58:ad:01:12:17:6a:53:b4:18:7a:5a:73:1f:30:
4b:e7:31:d7:0b:a8:a6:db:64:0d:46:14:59:4b:ff:a3:3c:c8:
9a:75:cb:95:4c:60:c6:60:6d:86:b0:e6:5a:9e:d6:1b:eb:8f:
b0:83:99:95:de:d7:ea:8b:80:eb:4c:27:48:31:95:cf:cc:95:
23:7a:81:c6:cb:bc:d4:84:4f:ac:c6:f1:7d:57:ea:bc:d1:13:
23:af:23:fa:d1:36:0e:9b:0e:09:2a:d8:e8:b9:7f:1b:85:42:
eb:2a:c5:f5:d3:24:3f:b4:64:ca:b8:4e:d0:6a:22:bf:f4:31:
54:92:c6:b2:b7:30:72:bc:29:0c:4e:77:d3:a9:98:c2:16:32:
e2:cd:b6:25:f6:85:e6:8b:ae:06:ab:cc:f0:dc:50:b9:22:17:
06:7a:4a:9f:2e:a5:52:79:c7:61:39:29:16:eb:a5:1a:a7:c9:
d1:b9:68:7e:f5:63:74:f3:b2:d9:c8:23:f1:fd:55:4e:62:4d:
9b:99:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:28:51 2024 by rpki-client on console-ams.rpki-client.org