Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/760E47CE8E4011EF84E06A96762E951A.roa
File: 760E47CE8E4011EF84E06A96762E951A.roa (raw, json)
Hash identifier: 5247yr5gr3JcfvGZJNIVOcPn9L/w4Rzz/cS7nF3BEWM=
Subject key identifier: 1F:B4:64:F6:C6:82:7E:81:EE:6D:8C:39:EE:7B:BD:34:DB:BE:D9:BA
Certificate issuer: /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial: 36
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/760E47CE8E4011EF84E06A96762E951A.roa
Signing time: Sat 19 Oct 2024 17:34:58 +0000
ROA not before: Sat 19 Oct 2024 17:34:55 +0000
ROA not after: Thu 30 Oct 2031 17:34:55 +0000
asID: 329078
IP address blocks: 102.165.144.0/20 maxlen: 24
102.165.144.0/21 maxlen: 24
2c0f:fac8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Validity
Not Before: Oct 19 17:34:55 2024 GMT
Not After : Oct 30 17:34:55 2031 GMT
Subject: CN=6713edc2-a032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:29:3c:20:52:29:1b:21:39:44:07:45:68:
0e:38:b4:0b:65:08:e3:64:7d:54:ec:26:89:ff:f8:
3b:c5:df:46:01:b7:8a:7f:fb:ff:02:90:00:5b:0a:
ff:b0:af:0b:b6:37:f5:35:04:0a:66:50:7f:c9:19:
8e:8f:f6:f5:c3:1f:42:47:f4:67:5b:98:54:67:00:
86:ab:f0:43:c5:4e:a0:eb:3e:c7:54:86:c0:62:df:
54:3c:98:74:81:bc:b0:08:67:8a:6b:97:6d:24:49:
d8:42:92:db:6a:79:fc:f5:dd:3d:7f:f7:42:1b:e5:
24:4b:55:a4:e3:25:21:32:e9:8c:bb:0e:27:91:38:
9e:16:14:89:b7:40:e0:bf:dc:3a:e1:bf:3c:0e:b8:
d9:56:2a:d7:4f:e6:15:81:7d:64:36:7a:51:70:d7:
70:7f:e3:f5:ac:26:75:ed:39:f5:71:c0:67:59:b8:
ff:0f:17:37:67:1a:ed:ff:33:e0:90:46:db:c3:17:
6e:51:d1:86:eb:75:06:64:d7:b4:f1:c0:7f:d8:3b:
82:78:b5:49:b1:ae:bd:1b:a6:c3:da:90:2e:a5:cd:
19:11:3b:9f:47:36:1f:08:5d:ec:ac:8b:2d:1c:51:
85:13:7f:52:1e:ac:84:ca:51:de:68:2a:43:32:06:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:64:F6:C6:82:7E:81:EE:6D:8C:39:EE:7B:BD:34:DB:BE:D9:BA
X509v3 Authority Key Identifier:
keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/760E47CE8E4011EF84E06A96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.144.0/20
IPv6:
2c0f:fac8::/32
Signature Algorithm: sha256WithRSAEncryption
41:9c:53:e2:ad:99:44:68:99:4d:1a:e5:99:9e:e5:25:66:2c:
13:4c:71:72:92:d0:44:55:e9:9f:ed:84:d4:4d:98:6e:cb:6d:
1d:24:78:fb:b2:4b:14:ca:06:f2:7c:b2:cd:48:4b:f5:e6:a3:
65:40:3e:10:69:87:b1:ab:d0:a4:78:95:8e:e1:77:b0:44:06:
73:22:15:60:d7:8f:89:c1:ba:1d:c9:34:0a:bb:86:01:92:aa:
53:05:4f:52:25:7a:38:bd:c6:1d:fe:ec:13:e1:df:2e:37:37:
04:2c:b4:5b:5d:d7:e6:39:e4:9c:d6:39:d8:f7:a6:65:ab:06:
65:b6:69:b5:40:76:9e:85:34:9a:66:ba:27:34:c6:da:1a:d6:
c6:c6:da:fb:d5:df:e9:c3:f3:1b:7b:32:0e:b0:6a:52:08:47:
53:0a:36:3e:c8:39:9e:32:51:63:c0:0b:c4:11:60:26:a8:e2:
b8:1d:4b:2e:12:2a:06:f1:e1:f2:a5:18:54:bf:8f:6f:3a:d9:
e6:12:a6:c4:67:92:2c:58:17:8e:24:2a:9e:7a:df:c2:b1:53:
1b:ef:94:e2:77:e1:df:86:2c:76:53:df:db:5d:af:b2:59:0c:
26:fc:e2:d7:18:0d:75:b3:37:30:8b:9d:8e:67:80:ed:bf:43:
a6:0c:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:24 2024 by rpki-client on console-ams.rpki-client.org