Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/4691B7064F4811EFB5EC1580762E951A.roa
File: 4691B7064F4811EFB5EC1580762E951A.roa (raw, json)
Hash identifier: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=
Subject key identifier: F3:D4:E1:70:EE:9C:DB:A1:46:45:A6:95:83:DE:A8:8C:24:E5:D2:F0
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 47
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/4691B7064F4811EFB5EC1580762E951A.roa
Signing time: Wed 31 Jul 2024 14:22:11 +0000
ROA not before: Wed 31 Jul 2024 14:22:08 +0000
ROA not after: Mon 31 Jul 2034 14:22:08 +0000
asID: 329278
IP address blocks: 102.212.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: Jul 31 14:22:08 2024 GMT
Not After : Jul 31 14:22:08 2034 GMT
Subject: CN=66aa4893-7663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:bd:64:00:f8:37:4f:25:6d:65:0f:4b:ad:
73:b9:d3:ce:d1:94:06:0a:c2:be:d8:ad:e8:ef:11:
02:81:2f:8b:8e:53:96:c8:03:90:47:39:8a:c9:dd:
5a:31:2f:d8:8b:fa:80:b0:75:c2:68:ba:00:e8:1e:
e8:27:e3:8e:ad:b5:af:9a:c8:b9:73:17:4d:15:45:
a9:06:ec:30:ba:1c:54:ac:5f:48:48:58:59:b7:0d:
a7:37:65:78:f2:84:33:14:5e:3c:d1:c1:7e:e3:2f:
75:d4:53:5f:58:50:8e:76:ac:0c:f0:a1:f0:04:1e:
15:50:f4:83:dd:7d:51:3b:0d:61:97:14:b5:e4:53:
8f:a5:3a:32:36:71:46:9f:2f:6a:fd:f5:26:b2:51:
65:d5:5b:70:fc:9b:8f:3c:97:69:79:ae:f0:e0:cd:
10:d4:5a:c2:e0:17:5d:06:8f:72:5c:c2:49:54:80:
5a:60:44:e3:64:37:45:56:8f:d2:26:25:a3:91:92:
7f:da:ac:a4:b6:86:76:24:ae:17:2d:7e:41:5e:36:
73:34:3f:41:50:ca:56:ca:a5:8a:18:92:e0:68:22:
49:5f:ac:5f:4e:68:3d:a6:a0:22:60:4e:7b:0f:ea:
af:63:25:cd:5a:25:dd:be:6b:c9:2a:25:e1:9e:95:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D4:E1:70:EE:9C:DB:A1:46:45:A6:95:83:DE:A8:8C:24:E5:D2:F0
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/4691B7064F4811EFB5EC1580762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.244.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ce:e4:e4:0f:7d:97:8d:cd:ea:2f:ec:d4:01:a3:97:4b:4f:
c9:d7:5d:e2:73:5d:77:a3:d7:69:42:f6:54:2d:52:51:f7:df:
6e:7b:73:a8:bb:82:5c:a8:d9:2d:d5:54:61:53:03:15:91:05:
5b:d8:6e:97:34:d1:da:3d:35:81:e9:e4:6a:da:ba:7a:be:7b:
46:69:07:a6:66:e1:c5:56:90:85:1f:13:f9:6c:e0:c5:cf:c6:
31:d4:cf:5a:5b:3d:4a:ae:11:3d:ca:77:b8:6d:63:56:0a:90:
54:dd:4c:23:19:5d:89:8e:1d:ef:18:a4:19:df:10:7c:14:7a:
8d:0a:b2:e3:9b:88:8f:d5:3d:39:d2:30:b8:bc:fc:d6:8f:91:
2d:3d:b1:16:a0:9d:66:4b:ff:30:d7:77:35:51:42:bc:f1:c0:
ab:46:59:7d:80:24:52:51:31:e0:32:4d:6a:76:ec:32:f1:2f:
32:d8:84:e8:a4:e2:38:9b:db:90:7d:29:68:fb:ae:14:c8:33:
9e:59:24:0d:5d:a3:21:3e:79:08:44:0a:e3:ac:42:a7:54:71:
88:ff:84:46:69:12:be:b1:30:78:fd:9a:89:e4:96:4f:15:2a:
84:ad:25:a4:af:a1:be:75:1e:94:2d:53:cf:e3:f0:95:ae:10:
b5:be:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:24 2024 by rpki-client on console-ams.rpki-client.org