Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/DE43A2EE73F611EFB5EFE385762E951A.roa
File: DE43A2EE73F611EFB5EFE385762E951A.roa (raw, json)
Hash identifier: Sd1KUMUsJPhhYi5uJUrLGrb5HVAMCLRPQBpoUaX9878=
Subject key identifier: F2:06:8E:96:2D:F2:D8:C8:F9:E7:F7:F5:99:72:74:31:A0:0F:F4:C8
Certificate issuer: /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial: 04
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/DE43A2EE73F611EFB5EFE385762E951A.roa
Signing time: Mon 16 Sep 2024 06:42:40 +0000
ROA not before: Mon 16 Sep 2024 06:42:37 +0000
ROA not after: Sun 17 Nov 2030 06:42:37 +0000
asID: 37395
IP address blocks: 102.165.128.0/19 maxlen: 19
2c0f:fac8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Validity
Not Before: Sep 16 06:42:37 2024 GMT
Not After : Nov 17 06:42:37 2030 GMT
Subject: CN=66e7d360-3788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:e9:f1:e4:74:cb:f5:38:35:37:d5:ea:05:
7e:8d:be:d0:35:d6:15:80:5e:b9:fe:0c:ef:89:fd:
44:52:ad:e4:d9:79:e8:87:21:21:32:a1:9f:a1:52:
88:93:79:2a:d1:09:2e:ac:71:37:ba:d5:ad:b1:d8:
bb:cf:a5:fd:5a:16:7e:d8:a3:4d:36:0a:10:dc:a4:
14:cc:2f:bd:0e:e8:14:00:ab:82:5f:7f:09:aa:bf:
34:d9:39:1e:e7:cb:d4:36:d3:66:66:a4:7a:9b:29:
7c:3c:3a:ab:6a:95:75:19:63:2b:6f:03:af:87:7e:
14:b9:21:04:26:34:2a:a2:ae:c2:9d:07:16:3b:39:
79:29:c7:31:18:59:ed:f9:5a:0a:bf:be:70:c8:79:
11:93:c2:b0:5d:a2:0e:f5:82:b0:7c:2e:c9:c1:6e:
eb:43:77:5a:55:85:cd:b8:d6:c4:7f:74:c1:de:43:
6c:7b:1b:d1:a2:5f:1f:51:7c:44:22:45:c2:91:14:
d4:0b:16:b0:62:79:66:71:a3:7b:23:ef:be:48:40:
5e:0b:4d:eb:da:5e:d0:a6:b4:3a:e1:c2:2f:0e:c5:
1f:e7:68:89:a4:c1:55:f8:ad:59:63:96:b2:a9:da:
4b:93:26:5d:04:d7:c8:f4:82:3a:da:2d:cd:77:48:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:06:8E:96:2D:F2:D8:C8:F9:E7:F7:F5:99:72:74:31:A0:0F:F4:C8
X509v3 Authority Key Identifier:
keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/DE43A2EE73F611EFB5EFE385762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.128.0/19
IPv6:
2c0f:fac8::/32
Signature Algorithm: sha256WithRSAEncryption
1c:13:8f:14:f2:8c:58:b5:5a:c7:78:cd:aa:83:0c:13:3c:48:
a5:d2:ed:f8:19:45:f2:6f:a8:5a:50:0e:ed:eb:f0:96:87:9f:
b8:dc:3b:f1:f6:ee:0b:af:e2:80:46:9d:8c:58:2b:b5:82:ed:
1d:91:a7:e2:3a:e2:45:32:a4:b0:15:68:83:88:4d:94:b2:38:
e1:c3:cf:fd:4a:37:0a:87:a1:92:cd:d8:ae:a4:0b:76:d6:e6:
e4:66:eb:6a:ae:30:4b:5a:3c:32:59:1b:44:58:1b:87:55:fa:
70:ff:c7:1a:bc:c3:9b:83:7e:90:be:b1:50:33:94:39:5b:a4:
46:54:02:a8:bd:d0:49:d9:31:eb:95:00:d1:cd:60:ed:d3:4c:
ee:28:e4:a0:06:14:6e:1d:15:a1:f4:c5:6f:20:b1:a2:67:f1:
99:4c:76:75:3a:df:1f:9c:9d:22:5c:f6:5f:e3:75:6f:13:6b:
dc:42:7d:09:c9:c5:99:53:c9:0a:bb:f9:cc:5d:f2:7d:e2:e1:
02:18:1b:2c:06:63:2f:85:55:58:2a:32:c3:92:55:ed:bd:4e:
b9:bc:0c:24:0b:2e:eb:d3:49:02:15:56:c0:24:6a:17:db:1a:
9b:5c:43:e7:95:09:7d:bf:4e:83:bf:d9:2d:8b:95:17:20:62:
db:70:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:50 2024 by rpki-client on console-fra.rpki-client.org