Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/356E2178590211EDA91448F3F1222468.roa
File: 356E2178590211EDA91448F3F1222468.roa (raw, json)
Hash identifier: D+uxHeQ3C4tsnLo91SN7iKO2k3Kr8nhEm63S02dJLSQ=
Subject key identifier: FB:AB:2F:83:74:9E:C8:29:F6:F5:27:65:0C:E6:06:86:E8:5A:DF:79
Certificate issuer: /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial: 04
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/356E2178590211EDA91448F3F1222468.roa
Signing time: Mon 31 Oct 2022 09:55:54 +0000
ROA not before: Mon 31 Oct 2022 09:55:50 +0000
ROA not after: Sun 31 Oct 2032 09:55:50 +0000
asID: 328474
IP address blocks: 102.67.56.0/24 maxlen: 24
102.67.57.0/24 maxlen: 24
102.67.58.0/24 maxlen: 24
102.67.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Validity
Not Before: Oct 31 09:55:50 2022 GMT
Not After : Oct 31 09:55:50 2032 GMT
Subject: CN=635f9baa-ea04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:c7:78:db:c1:e9:ce:02:f6:ce:dd:3b:71:
4b:54:e5:12:d0:d9:44:55:0a:d9:94:c5:69:46:ee:
6e:39:19:31:81:17:0e:78:32:36:e2:d6:e8:39:4b:
25:29:4c:13:48:aa:d9:c0:3d:41:dd:dc:72:5d:d3:
61:c3:cf:61:c0:c1:0e:f3:c9:f0:e0:d9:44:00:e6:
6d:e6:bf:02:9e:f1:95:3b:1a:4c:c2:b9:66:60:52:
61:04:30:b8:14:76:3f:9b:32:0c:59:44:5d:82:b6:
27:6d:36:29:56:13:5a:45:16:61:a9:42:e4:00:e8:
ed:c7:97:4b:c9:68:2a:de:63:f6:82:33:87:ad:2e:
c8:8f:97:3b:76:0e:79:d1:a2:12:2a:c1:d2:65:de:
a4:9d:99:a1:79:16:e1:e4:4f:f5:af:68:66:f6:16:
ee:a1:c5:0e:36:a4:27:55:28:6a:7c:df:06:12:2c:
61:b3:94:a2:b1:90:8c:28:66:1c:c7:ea:26:58:8b:
71:34:c6:c8:a6:50:3b:72:25:a0:9c:6c:00:fc:76:
ab:55:3c:45:2a:67:2a:3e:64:e1:b9:0e:2d:2c:3a:
f5:bd:71:a6:41:da:30:b7:12:18:f2:06:54:0e:7d:
1d:22:56:5b:9c:c4:f3:82:36:dd:a3:12:99:78:6f:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:2F:83:74:9E:C8:29:F6:F5:27:65:0C:E6:06:86:E8:5A:DF:79
X509v3 Authority Key Identifier:
keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/356E2178590211EDA91448F3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.56.0/22
Signature Algorithm: sha256WithRSAEncryption
10:e0:d7:27:6d:42:d1:7f:93:1c:cc:e1:f3:52:f9:fc:93:d7:
e7:d3:27:50:ad:fe:90:20:1e:da:69:38:ad:28:42:75:f5:1b:
6a:23:39:e9:fd:99:14:c3:19:de:2d:78:60:04:14:93:28:93:
a2:82:63:69:77:54:57:e2:f4:0d:85:72:e6:36:28:c0:69:00:
22:84:fc:01:ab:af:65:72:64:85:d6:62:2f:77:b5:a0:90:e5:
7a:e4:7b:a1:5f:69:57:c1:62:17:5c:26:70:21:f8:ac:91:b9:
96:fc:33:8c:c9:84:11:16:43:72:25:c8:88:fb:57:5d:a0:1c:
30:c2:2b:50:9b:96:e9:6f:fb:0e:43:c7:ba:5e:3e:7e:66:cd:
b0:03:8d:46:82:2a:d3:f6:c7:f8:d8:39:38:cf:cc:6e:97:20:
ae:82:bb:c5:82:b4:be:dc:c9:20:f9:a4:db:16:63:74:53:0a:
93:c5:13:99:dc:66:a2:20:fb:a5:6a:31:5f:f8:0c:b9:9d:14:
cb:a5:94:7c:92:d0:63:29:5a:2b:b9:7e:26:a9:64:1e:b5:90:
4d:5e:d7:2f:3d:f8:9c:e6:90:50:80:5c:4f:ad:a8:d8:ab:e7:
58:f4:fc:04:76:4d:93:13:04:76:18:d2:a1:77:dc:c5:a3:ce:
29:5d:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:26 2024 by rpki-client on console-ams.rpki-client.org