Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/6644E6CC4FE811EFBAAC404B762E951A.roa
File: 6644E6CC4FE811EFBAAC404B762E951A.roa (raw, json)
Hash identifier: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=
Subject key identifier: C5:C1:AA:24:B9:58:B6:44:74:80:B8:55:6C:D3:C1:81:1E:BA:AC:5B
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 8D
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/6644E6CC4FE811EFBAAC404B762E951A.roa
Signing time: Thu 01 Aug 2024 09:28:24 +0000
ROA not before: Thu 01 Aug 2024 09:28:20 +0000
ROA not after: Sat 01 Aug 2026 09:28:20 +0000
asID: 37577
IP address blocks: 102.179.0.0/22 maxlen: 22
102.179.4.0/22 maxlen: 22
102.179.8.0/22 maxlen: 22
102.179.12.0/22 maxlen: 22
102.179.16.0/22 maxlen: 22
102.179.20.0/22 maxlen: 22
102.179.24.0/22 maxlen: 22
102.179.28.0/22 maxlen: 22
102.179.32.0/24 maxlen: 24
102.179.33.0/24 maxlen: 24
102.179.34.0/24 maxlen: 24
102.179.35.0/24 maxlen: 24
102.179.36.0/24 maxlen: 24
102.179.37.0/24 maxlen: 24
102.179.38.0/24 maxlen: 24
102.179.39.0/24 maxlen: 24
102.179.40.0/24 maxlen: 24
102.179.41.0/24 maxlen: 24
102.179.42.0/24 maxlen: 24
102.179.43.0/24 maxlen: 24
102.179.44.0/24 maxlen: 24
102.179.45.0/24 maxlen: 24
102.179.46.0/24 maxlen: 24
102.179.47.0/24 maxlen: 24
102.179.48.0/24 maxlen: 24
102.179.49.0/24 maxlen: 24
102.179.50.0/24 maxlen: 24
102.179.51.0/24 maxlen: 24
102.179.52.0/24 maxlen: 24
102.179.53.0/24 maxlen: 24
102.179.54.0/24 maxlen: 24
102.179.55.0/24 maxlen: 24
102.179.56.0/24 maxlen: 24
102.179.57.0/24 maxlen: 24
102.179.58.0/24 maxlen: 24
102.179.59.0/24 maxlen: 24
102.179.60.0/24 maxlen: 24
102.179.61.0/24 maxlen: 24
102.179.62.0/24 maxlen: 24
102.179.63.0/24 maxlen: 24
102.179.64.0/24 maxlen: 24
102.179.65.0/24 maxlen: 24
102.179.66.0/24 maxlen: 24
102.179.67.0/24 maxlen: 24
102.179.68.0/24 maxlen: 24
102.179.69.0/24 maxlen: 24
102.179.70.0/24 maxlen: 24
102.179.71.0/24 maxlen: 24
102.179.72.0/24 maxlen: 24
102.179.73.0/24 maxlen: 24
102.179.74.0/24 maxlen: 24
102.179.75.0/24 maxlen: 24
102.179.76.0/24 maxlen: 24
102.179.77.0/24 maxlen: 24
102.179.78.0/24 maxlen: 24
102.179.79.0/24 maxlen: 24
102.179.80.0/24 maxlen: 24
102.179.81.0/24 maxlen: 24
102.179.82.0/24 maxlen: 24
102.179.83.0/24 maxlen: 24
102.179.84.0/24 maxlen: 24
102.179.85.0/24 maxlen: 24
102.179.86.0/24 maxlen: 24
102.179.87.0/24 maxlen: 24
102.179.88.0/24 maxlen: 24
102.179.89.0/24 maxlen: 24
102.179.90.0/24 maxlen: 24
102.179.91.0/24 maxlen: 24
102.179.92.0/24 maxlen: 24
102.179.93.0/24 maxlen: 24
102.179.94.0/24 maxlen: 24
102.179.95.0/24 maxlen: 24
102.179.96.0/22 maxlen: 22
102.179.100.0/22 maxlen: 22
102.179.104.0/22 maxlen: 22
102.179.108.0/22 maxlen: 22
102.179.112.0/22 maxlen: 22
102.179.116.0/22 maxlen: 22
102.179.120.0/22 maxlen: 22
102.179.124.0/22 maxlen: 22
102.179.128.0/22 maxlen: 22
102.179.132.0/22 maxlen: 22
102.179.136.0/22 maxlen: 22
102.179.140.0/22 maxlen: 22
102.179.144.0/22 maxlen: 22
102.179.148.0/22 maxlen: 22
102.179.152.0/22 maxlen: 22
102.179.156.0/22 maxlen: 22
102.179.160.0/22 maxlen: 22
102.179.164.0/22 maxlen: 22
102.179.168.0/22 maxlen: 22
102.179.172.0/22 maxlen: 22
102.179.176.0/22 maxlen: 22
102.179.180.0/22 maxlen: 22
102.179.184.0/22 maxlen: 22
102.179.188.0/22 maxlen: 22
102.179.192.0/22 maxlen: 22
102.179.196.0/22 maxlen: 22
102.179.200.0/22 maxlen: 22
102.179.204.0/22 maxlen: 22
102.179.208.0/22 maxlen: 22
102.179.212.0/22 maxlen: 22
102.179.216.0/22 maxlen: 22
102.179.220.0/22 maxlen: 22
102.179.224.0/22 maxlen: 22
102.179.228.0/22 maxlen: 22
102.179.232.0/22 maxlen: 22
102.179.236.0/22 maxlen: 22
102.179.240.0/22 maxlen: 22
102.179.244.0/22 maxlen: 22
102.179.248.0/22 maxlen: 22
102.179.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Validity
Not Before: Aug 1 09:28:20 2024 GMT
Not After : Aug 1 09:28:20 2026 GMT
Subject: CN=66ab5538-007d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:35:de:2b:d6:94:b6:f4:d3:2e:8d:c1:b5:
19:dc:2a:e5:5f:6e:45:67:13:a7:9e:af:bb:73:ec:
56:03:3c:0b:8a:ca:a6:95:1c:b0:b2:f2:8e:84:d9:
bb:74:1c:8c:6d:1b:cb:b7:e0:7c:58:a2:ab:4a:92:
c6:c1:77:90:8f:0d:3d:d2:35:f8:1d:d6:2e:92:a9:
bd:4d:b5:a1:01:35:30:df:02:13:8e:25:5c:77:9d:
46:d1:0c:91:91:7a:b1:cb:9c:ca:d8:9c:f9:d9:a7:
36:12:5e:c4:d9:4b:75:fd:80:d9:43:04:bd:63:9f:
7e:f5:05:c7:92:2c:fa:38:a8:05:1e:86:55:19:b9:
f9:22:a7:f9:22:c4:22:af:98:e5:2f:de:76:4a:15:
14:ab:ca:79:d5:a3:3a:40:35:9d:6f:d2:b6:69:cc:
2b:2c:d4:64:4f:cd:e1:d8:8e:2f:66:58:ee:a9:ff:
3b:a2:9b:e8:4f:6d:87:09:23:d4:d4:1c:4c:72:f6:
99:4e:ee:1e:89:0b:cb:8f:a0:40:34:5d:96:87:5f:
b9:95:46:14:d8:7e:9c:fc:d1:f8:b0:c6:a8:1a:77:
57:70:60:fb:c1:d9:83:9c:b3:56:c8:71:38:04:d9:
77:9a:61:83:59:a1:7b:c3:54:fb:27:da:50:c1:bc:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:AA:24:B9:58:B6:44:74:80:B8:55:6C:D3:C1:81:1E:BA:AC:5B
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/6644E6CC4FE811EFBAAC404B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.179.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:75:2b:37:54:a3:ee:26:77:bf:c1:74:94:30:ea:72:1b:e7:
f8:75:29:ac:bb:b0:e3:9a:31:36:d0:db:00:65:32:0c:c7:b6:
24:bf:09:fd:cb:6a:8f:d5:ad:a9:46:5c:2b:d8:4e:38:04:8c:
52:8b:2e:d9:b1:c9:e7:e5:4e:68:93:50:22:11:ea:99:d6:ea:
50:7f:82:e5:97:fe:ce:49:0b:47:2a:aa:69:ca:e0:70:03:a3:
87:fd:a0:25:e1:bc:b9:e9:ce:9a:ce:84:31:f9:bb:d1:05:68:
58:5f:c2:87:af:d3:e6:25:50:10:e4:5d:ba:e4:1a:e5:f6:c2:
2a:4e:fa:1d:b8:b2:71:2d:8e:fb:2d:b8:47:c9:82:35:0e:69:
29:7e:6e:95:b0:a0:61:27:d0:70:88:1f:de:f7:ae:95:dc:2c:
08:48:62:0d:bb:75:ee:48:d3:7c:f2:c9:01:59:db:92:ce:ff:
d5:29:d2:39:4e:f3:1e:b3:1c:bc:15:f6:3f:11:5e:c1:60:64:
40:c1:71:c2:5a:0f:f1:50:e1:83:40:82:89:b7:b9:cf:d5:8d:
3e:74:11:10:50:53:cd:93:63:54:40:c7:c3:a8:d6:ab:64:f8:
cf:11:5c:ee:57:47:ed:cb:64:5a:01:db:b7:82:9c:a0:d0:d7:
9e:55:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org