Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/B59F24BCF57211EC993D889DF1222468.roa
File: B59F24BCF57211EC993D889DF1222468.roa (raw, json)
Hash identifier: maJQ7QpaTAEJtJEDY71F+/C/LFPT623BEcfsghzWeRo=
Subject key identifier: 62:04:E2:46:03:EA:16:57:E2:B8:45:9C:23:81:BE:91:E0:44:6F:83
Certificate issuer: /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial: 7B
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/B59F24BCF57211EC993D889DF1222468.roa
Signing time: Sun 26 Jun 2022 17:09:16 +0000
ROA not before: Sun 26 Jun 2022 17:09:13 +0000
ROA not after: Wed 31 Dec 2042 17:09:13 +0000
asID: 4755
IP address blocks: 102.112.0.0/13 maxlen: 24
196.20.128.0/17 maxlen: 24
196.192.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Validity
Not Before: Jun 26 17:09:13 2022 GMT
Not After : Dec 31 17:09:13 2042 GMT
Subject: CN=62b892bc-9f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:88:c9:d7:86:01:12:76:0d:a9:80:b2:0d:
4b:45:83:ec:9d:66:ce:ae:80:d7:27:4a:92:d5:6b:
44:6d:df:21:13:dc:26:25:2b:97:1a:72:cd:03:4f:
38:5c:d8:c4:49:97:37:fb:40:05:14:bc:4c:63:bc:
72:92:9b:88:6a:03:f9:08:33:5e:aa:8c:f7:4a:f4:
03:4e:aa:dc:04:21:e9:6d:4e:64:3d:91:7c:25:46:
09:8e:86:8b:6f:73:b2:07:94:52:b1:63:3b:69:00:
96:34:2e:e5:fe:66:56:d6:93:53:b4:cd:95:b6:f0:
3a:dc:36:88:7e:a4:0e:fc:8a:1c:bf:1e:f9:d7:0c:
15:d2:07:13:cc:8f:a9:8b:01:40:08:55:8b:28:f4:
ca:1a:ae:86:9a:e6:1b:4d:55:7f:1c:c4:8e:52:7b:
a3:0a:16:10:56:60:c4:71:2c:ca:09:7e:e5:ad:2a:
72:b0:01:6a:9f:e6:7c:bf:86:1e:7b:bf:c0:02:44:
ae:34:92:b5:2d:e1:e1:ac:37:47:05:02:86:17:d2:
ef:33:82:04:30:c6:e3:85:7f:c1:42:71:5b:1e:ea:
d0:fe:29:c7:21:e7:9c:2a:1c:18:7c:6a:be:5e:f7:
ba:e6:ac:59:47:c0:51:8d:43:17:d2:4a:1e:24:b5:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:04:E2:46:03:EA:16:57:E2:B8:45:9C:23:81:BE:91:E0:44:6F:83
X509v3 Authority Key Identifier:
keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/B59F24BCF57211EC993D889DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.112.0.0/13
196.20.128.0/17
196.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
56:fe:79:53:8e:36:b0:f7:2e:a9:f0:80:28:1d:71:26:87:86:
ff:c6:a2:0a:de:77:13:34:46:af:c5:6d:d8:8f:e3:de:c4:56:
d4:8c:8c:de:7a:a3:72:3a:68:19:0a:a4:2f:50:75:c3:fb:b9:
4a:bd:13:00:9d:49:e1:b7:59:b6:36:6c:54:20:e2:d4:07:bc:
ec:07:7f:fb:bc:40:77:c5:d1:31:b9:84:ee:d9:d5:cc:54:94:
64:3d:c7:08:69:a3:46:46:dd:03:4e:5c:90:4e:d9:72:8d:9d:
9e:ad:21:eb:07:63:9b:0c:dd:55:02:05:5a:93:9c:d9:fd:54:
fd:c3:b8:00:fd:95:b2:05:cb:66:ba:80:6a:37:70:b1:46:ba:
6a:0d:f6:19:b7:36:ca:25:b9:0c:4c:6f:2e:c2:fe:76:e5:5d:
99:ce:71:80:69:90:6c:cd:53:83:2f:1f:6c:0e:48:10:72:b6:
96:e8:36:2e:69:5f:85:37:b2:58:e7:ae:79:15:f0:70:88:d3:
ba:5c:68:c3:f2:a3:80:8d:ff:aa:09:b6:04:3c:f0:9d:a9:02:
fb:83:0b:bc:fa:72:20:d8:45:07:e3:be:7d:20:ca:5f:3a:7d:
5c:51:39:14:1f:29:94:31:85:45:07:ae:24:06:c6:8c:53:15:
ce:ec:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:48:47 2024 by rpki-client on console-ams.rpki-client.org