Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/C21173B24F4811EF8A277884762E951A.roa
File: C21173B24F4811EF8A277884762E951A.roa (raw, json)
Hash identifier: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=
Subject key identifier: 63:D0:55:E9:F6:A4:8A:E5:04:66:6F:84:83:85:B6:1E:4C:70:AE:13
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 4B
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/C21173B24F4811EF8A277884762E951A.roa
Signing time: Wed 31 Jul 2024 14:25:38 +0000
ROA not before: Wed 31 Jul 2024 14:25:35 +0000
ROA not after: Mon 31 Jul 2034 14:25:35 +0000
asID: 329278
IP address blocks: 102.212.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: Jul 31 14:25:35 2024 GMT
Not After : Jul 31 14:25:35 2034 GMT
Subject: CN=66aa4962-36a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:a1:26:f0:b1:0f:e4:f7:23:a8:0d:80:7e:
0b:aa:c6:b7:04:a6:22:41:ec:4e:cd:98:b9:55:77:
66:07:6c:c2:b6:f5:50:34:27:ef:70:0d:97:02:db:
7a:94:ef:a4:d1:c9:94:3f:03:96:ac:b8:09:f5:db:
1e:ea:64:87:0a:a2:fd:9a:36:c5:a8:36:96:1b:3e:
33:61:74:14:76:1a:5f:92:1b:2d:ac:be:ca:f4:96:
c9:8f:7f:76:71:70:44:30:a1:0b:37:25:a9:74:fc:
cf:01:f7:ca:35:35:90:04:7d:7b:fc:e2:01:53:d8:
3d:8f:04:e7:1c:9c:8e:5c:48:05:37:ab:6c:8e:27:
02:bb:57:61:7d:11:69:16:c3:fb:f0:30:e1:b2:1f:
9d:15:53:99:f8:ab:36:33:fb:c3:1b:a0:b3:00:40:
05:89:df:7b:60:5c:6f:2d:8e:59:15:32:a9:1f:cf:
01:35:29:5c:a3:06:95:05:91:0d:ea:60:de:16:9e:
28:d4:ca:ce:1e:8a:e6:6d:03:a8:fb:f0:5f:6d:6c:
8a:90:6d:d5:14:34:c0:db:f9:f6:4c:86:47:86:41:
4d:58:73:67:cd:b3:f7:8c:6b:f2:c7:f0:d0:24:88:
3e:c8:a6:6c:d3:36:80:8e:93:d2:20:07:7d:f9:37:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:55:E9:F6:A4:8A:E5:04:66:6F:84:83:85:B6:1E:4C:70:AE:13
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/C21173B24F4811EF8A277884762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.246.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:4a:8e:1c:66:2e:9f:a8:10:59:93:7d:d3:ca:fe:57:48:d5:
b5:0d:ab:fe:58:a5:ce:79:0f:06:86:28:74:57:07:53:23:8e:
36:ce:9a:e6:1f:e8:04:73:96:4b:5a:b5:45:f1:3a:37:a6:4d:
4a:74:b5:57:ca:6c:ea:10:c6:04:16:2e:d5:3a:72:74:88:61:
25:9d:1d:42:8d:de:9e:23:d2:34:08:95:b4:1d:4c:f7:59:81:
49:68:7c:11:1a:c4:14:c2:93:6b:bd:db:fc:42:50:f7:86:21:
8a:d0:93:76:b0:84:c4:aa:e0:92:52:6c:e5:7f:4e:60:60:02:
f8:7a:81:e2:21:44:ca:af:c5:55:8e:d6:0d:9d:90:3b:d7:25:
00:00:5e:6f:50:dd:a8:5f:7a:e9:26:b1:c6:28:3b:c5:b7:4b:
f8:d6:8a:81:ad:c4:c7:72:a5:e1:22:ca:77:65:69:e4:54:e7:
80:dd:6d:91:15:10:89:e5:b3:82:49:9f:e9:a7:14:a0:1a:d0:
6f:c5:2c:5b:ac:f8:ed:8f:69:b7:38:a4:30:ba:96:26:37:0d:
79:3a:99:22:88:55:6a:6e:22:d1:7b:7a:cb:26:6c:31:21:9d:
b6:b3:db:bb:30:f9:00:9b:bc:08:45:ea:54:2d:c0:b2:41:6e:
82:b2:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:24 2024 by rpki-client on console-ams.rpki-client.org