Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/7FA7A028F57211ECB728E09CF1222468.roa
File: 7FA7A028F57211ECB728E09CF1222468.roa (raw, json)
Hash identifier: SHmJD0o/WKe9DuMaCzkIRZ50PJsm8QXP+INyJbesPiI=
Subject key identifier: 9F:D1:52:0E:81:AF:B8:F7:29:58:52:26:D1:21:67:2E:F6:9C:8F:00
Certificate issuer: /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial: 79
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/7FA7A028F57211ECB728E09CF1222468.roa
Signing time: Sun 26 Jun 2022 17:07:46 +0000
ROA not before: Sun 26 Jun 2022 17:07:42 +0000
ROA not after: Wed 31 Dec 2042 17:07:42 +0000
asID: 6453
IP address blocks: 102.112.0.0/13 maxlen: 24
196.20.128.0/17 maxlen: 24
196.192.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Validity
Not Before: Jun 26 17:07:42 2022 GMT
Not After : Dec 31 17:07:42 2042 GMT
Subject: CN=62b89262-6c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:b4:97:bc:64:e7:2a:78:60:91:c8:51:3b:
dd:53:5d:7f:e0:0e:c9:99:c8:68:82:8e:75:37:dd:
7a:51:9a:5a:03:d5:98:32:73:be:64:3f:f1:a0:00:
ec:d7:9b:5e:38:54:40:bf:c5:9d:28:fd:bb:7a:37:
23:5e:95:b1:31:fe:fe:8a:ff:d2:ea:d0:65:78:fa:
2a:84:c2:fe:cf:1a:e5:d9:ad:fd:4c:c3:e2:b3:1d:
07:2c:fd:a7:6b:c9:aa:bf:c5:0d:f6:23:ba:3f:c2:
d2:38:bb:0c:8e:22:33:7e:a5:02:f7:c0:c8:96:65:
9e:f0:39:2c:34:87:6f:f3:57:f5:a8:e5:f8:94:84:
89:37:58:79:76:67:6e:1f:99:36:21:0e:a9:19:89:
76:84:ec:ac:d4:fd:82:4a:61:8e:eb:8c:a3:a8:11:
81:16:11:82:a6:29:f2:d0:a1:fd:c9:ef:98:99:da:
34:1a:10:3f:17:af:8c:bf:ce:ca:d6:73:cd:d9:69:
ba:37:cc:0a:cb:1f:f3:f9:60:4e:7d:5a:ed:3e:7c:
0e:bb:3d:fa:66:ae:d0:a2:39:fd:8f:12:d4:6b:38:
d8:c8:bf:67:97:83:41:8f:73:10:47:d3:31:00:18:
5b:94:94:ce:4f:60:75:e5:d9:81:28:95:ed:a0:f0:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D1:52:0E:81:AF:B8:F7:29:58:52:26:D1:21:67:2E:F6:9C:8F:00
X509v3 Authority Key Identifier:
keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/7FA7A028F57211ECB728E09CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.112.0.0/13
196.20.128.0/17
196.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:45:30:0f:4a:3d:cf:51:6f:fb:2d:33:7f:46:74:01:e4:fa:
b4:fb:bb:ea:97:75:1b:79:1f:c2:12:c1:4b:b2:97:ff:d3:f7:
7c:5b:98:8d:a9:46:06:83:f5:6b:ac:cc:2a:91:42:8b:91:cb:
fd:c9:c0:68:99:9c:e4:ec:6f:93:11:81:99:11:fd:85:b9:9f:
b8:03:58:a8:ee:bd:77:6d:fd:40:0d:b3:e0:80:23:81:e8:c6:
16:9e:c2:74:2f:45:c9:23:a4:34:22:25:27:9c:b4:cb:93:58:
87:4d:5f:17:c0:ed:89:e9:90:c4:fd:a2:97:76:a0:b8:f7:6c:
43:80:ca:53:a6:a5:b8:b0:7b:1d:5a:46:17:0c:10:d0:c8:67:
ee:7f:cf:84:f8:37:38:97:52:5f:93:4f:ef:ab:e2:b1:f5:14:
eb:db:98:b2:f9:f9:cc:30:fc:bb:c1:c3:0f:78:87:b2:64:42:
76:1d:86:26:c9:5e:9f:85:92:6b:36:18:0e:ea:12:6c:4a:5f:
bb:50:95:bb:d6:3a:e3:85:61:8b:dd:aa:e9:65:d2:67:f6:a1:
83:45:c3:3b:c1:e4:ea:29:69:68:c2:3b:70:bb:99:60:c3:54:
84:e7:11:e7:c8:e7:ed:05:2b:13:27:ce:3d:3c:b0:d8:e8:83:
dd:aa:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org