Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/4FE58CA0848211EFB21CDAA0762E951A.roa
File: 4FE58CA0848211EFB21CDAA0762E951A.roa (raw, json)
Hash identifier: hT4mSK8j0yF0krAa2/n501dY/MbNiSKbpGMw/g08dhw=
Subject key identifier: 03:A6:45:66:86:8D:72:48:F4:C4:41:D8:F3:3D:46:AD:79:04:0F:1D
Certificate issuer: /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial: 044C
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/4FE58CA0848211EFB21CDAA0762E951A.roa
Signing time: Mon 07 Oct 2024 08:01:09 +0000
ROA not before: Mon 07 Oct 2024 08:01:06 +0000
ROA not after: Tue 31 Oct 2034 08:01:06 +0000
asID: 328537
IP address blocks: 102.36.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100 (0x44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Validity
Not Before: Oct 7 08:01:06 2024 GMT
Not After : Oct 31 08:01:06 2034 GMT
Subject: CN=67039545-8398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:2d:1f:03:52:97:3b:c5:6d:59:1b:51:3d:
10:91:4c:84:8e:de:bd:23:6d:15:2f:75:aa:3f:9b:
10:f5:08:da:ff:1a:4a:a6:d4:ad:1d:74:2e:39:a4:
68:bd:14:d6:1c:0e:81:9f:33:46:1a:51:a5:26:11:
65:10:f9:c5:33:7b:17:d2:f3:95:bc:05:9a:eb:90:
19:5c:1a:50:9e:2f:44:08:88:23:22:cc:e1:8e:73:
13:e7:17:34:74:74:11:20:f0:e2:71:43:73:64:f4:
3d:8b:d3:55:da:2b:95:80:34:30:61:6d:25:83:ff:
2b:e6:1d:57:81:59:ae:06:20:fb:44:48:d5:30:b9:
bd:f3:78:6b:24:48:83:d1:48:57:5b:8c:36:ea:72:
c6:1f:77:ff:85:71:9c:8e:46:a1:ef:c4:ac:73:1d:
6c:41:ec:2e:5e:13:08:5e:f0:1c:60:84:2e:f2:3c:
da:b0:4a:71:04:e5:4e:43:86:26:3f:1a:60:f2:d0:
d8:6b:a9:27:26:6b:50:7e:de:e0:b1:a6:09:4e:d9:
46:23:df:85:57:af:64:f1:f6:30:e5:12:6c:57:15:
78:5c:a1:6b:69:00:89:22:aa:8a:37:e2:88:d8:aa:
ae:6c:3c:29:fa:70:02:d3:7a:d8:39:1b:e2:e9:b5:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:45:66:86:8D:72:48:F4:C4:41:D8:F3:3D:46:AD:79:04:0F:1D
X509v3 Authority Key Identifier:
keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/4FE58CA0848211EFB21CDAA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.173.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a0:5e:49:63:7e:9d:f8:b4:cb:6b:1a:4c:ac:36:86:9c:43:
17:00:f0:1f:18:d2:b4:4a:26:38:94:1a:e3:61:90:d7:08:40:
f0:0a:74:f7:8a:95:15:80:39:bd:d3:7b:41:11:38:eb:c1:8f:
e4:ea:e0:d8:b9:04:9a:e0:15:7d:f9:81:3d:ad:81:a0:51:6a:
55:c8:4f:ba:61:0b:de:a4:13:d5:7e:39:34:08:7a:fe:0f:d3:
55:63:ee:7e:41:5f:0b:ca:3e:d8:25:1a:0f:48:34:c5:4c:91:
5a:8c:46:27:26:11:43:cf:a2:25:96:32:85:71:8b:3e:b0:63:
04:14:a1:0f:77:b2:be:a7:e3:d6:cd:65:a2:04:76:44:a4:d6:
cc:50:c8:7a:01:1f:18:20:5e:b1:bb:68:38:a0:f3:95:90:9f:
d5:45:d5:ea:ee:b9:67:b0:e6:0e:63:44:f1:85:1d:fa:c3:55:
1c:d9:1d:4b:13:50:3d:f9:45:62:8a:0c:58:73:49:d4:15:0d:
09:8a:f4:d6:47:e9:61:d1:b2:3a:24:cb:6a:11:46:53:8c:81:
ba:63:76:fa:6b:41:0e:31:15:c9:8b:52:36:08:fb:da:15:e8:
eb:d1:3d:ab:7b:f9:77:10:ac:cf:b8:c0:05:d2:2b:96:5d:59:
f5:e7:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org