Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/556100D6A66711EFA35CD16B762E951A.roa
File: 556100D6A66711EFA35CD16B762E951A.roa (raw, json)
Hash identifier: qJSjsy2o5hJTJDSiAXFVbbjMVoTEJfrC1/c4KDsNvP0=
Subject key identifier: 44:CD:26:6B:37:F2:BE:8E:97:D7:D7:63:D2:63:9C:5B:4D:77:35:43
Certificate issuer: /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial: 03C6
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/556100D6A66711EFA35CD16B762E951A.roa
Signing time: Tue 19 Nov 2024 11:13:42 +0000
ROA not before: Tue 19 Nov 2024 11:13:38 +0000
ROA not after: Wed 19 Nov 2025 11:13:38 +0000
asID: 37150
IP address blocks: 102.129.96.0/19 maxlen: 24
196.40.176.0/20 maxlen: 24
196.46.176.0/21 maxlen: 24
2c0f:fdf0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Validity
Not Before: Nov 19 11:13:38 2024 GMT
Not After : Nov 19 11:13:38 2025 GMT
Subject: CN=673c72e5-755e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:40:b0:81:39:01:8e:43:2f:5a:6b:80:c4:
83:09:3c:85:0a:60:a9:17:0e:1d:22:25:40:ed:0a:
be:4a:de:05:ad:56:d1:f7:d4:77:f9:85:22:38:15:
8d:5c:f9:2f:ed:a0:86:cd:77:42:52:12:d1:fd:82:
2b:0d:96:c5:ee:d5:2c:95:a5:1b:e0:3d:02:e4:a8:
22:ed:a2:9f:d0:c6:12:58:f6:3b:ac:d4:31:d0:2a:
53:f8:71:49:96:80:a4:44:73:42:b7:4c:41:c3:05:
65:25:ff:c3:ef:55:8a:b2:c3:c5:b4:06:02:c3:2d:
a3:4b:e8:ef:ca:9c:50:59:08:71:27:58:14:bb:19:
f4:2a:29:c7:ae:60:c3:97:be:ff:d1:6f:72:e9:55:
06:3c:da:c0:93:75:ab:5a:ea:3f:88:a1:1f:eb:ac:
9f:cd:98:14:78:aa:c7:88:c3:3b:09:56:11:b9:90:
38:41:2f:df:f4:09:27:c8:db:4c:99:ef:c0:a7:b5:
23:ba:39:c0:4c:cc:4d:6a:7a:c5:b6:e2:5d:ba:ad:
04:05:dd:a2:c5:fc:85:d7:3c:28:34:92:e6:94:7b:
22:52:b1:e4:06:75:82:77:e1:67:89:7c:db:de:a4:
a8:56:e8:3f:9f:e1:b2:8f:41:17:ab:2d:53:6e:66:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:26:6B:37:F2:BE:8E:97:D7:D7:63:D2:63:9C:5B:4D:77:35:43
X509v3 Authority Key Identifier:
keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/556100D6A66711EFA35CD16B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.96.0/19
196.40.176.0/20
196.46.176.0/21
IPv6:
2c0f:fdf0::/32
Signature Algorithm: sha256WithRSAEncryption
93:61:5c:f2:b6:8c:b2:fa:77:15:10:a6:b9:be:3b:3f:31:ab:
0d:45:34:98:f8:f9:c3:0b:24:aa:60:5c:78:3e:ca:5f:5e:b4:
6a:9e:fe:ef:33:1f:34:61:a0:69:6d:c0:e4:b9:2f:f1:6c:8e:
45:37:0e:8c:1f:6e:d1:f8:31:d0:d9:2d:b9:17:3f:91:e6:c8:
f7:46:05:2a:02:b0:de:fc:ba:b6:6d:33:aa:73:29:a2:ca:ad:
06:13:a2:36:f3:65:d0:d2:b2:74:09:4c:86:3e:44:77:43:1d:
99:ce:c1:da:98:95:8c:d3:2d:10:3a:62:51:fa:d2:d0:5b:7e:
25:93:d2:31:69:7e:ff:b6:33:3a:a0:66:54:0c:d9:26:d4:eb:
6f:50:65:20:6b:10:64:ee:a0:35:6b:20:b9:98:05:db:2b:de:
03:76:01:a4:d3:46:72:0e:e5:8a:37:fb:b0:3e:0e:07:22:a5:
5c:41:d0:fc:83:8e:f5:64:2e:95:a0:cb:f9:42:77:8a:61:ae:
cb:03:cf:6f:a3:3f:70:21:c4:f7:47:b8:93:d5:40:0a:05:33:
47:b2:29:f3:d5:95:2e:78:35:2f:43:10:2c:52:b3:52:9b:46:
f7:79:eb:1a:9f:11:e8:c2:61:59:a0:e2:ea:1d:00:9f:4a:04:
bc:4f:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org