Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/49539D74FDEB11EDA3B686404AD9E6FC.roa
File: 49539D74FDEB11EDA3B686404AD9E6FC.roa (raw, json)
Hash identifier: oer6U/7gxx2xca2HCEdbRPvzGemZa0c/hBWZVEqernk=
Subject key identifier: 58:C9:93:30:EE:06:38:95:D1:93:6E:85:0A:EC:A9:12:2A:48:39:C9
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 0239
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/49539D74FDEB11EDA3B686404AD9E6FC.roa
Signing time: Mon 29 May 2023 06:37:31 +0000
ROA not before: Mon 29 May 2023 06:37:27 +0000
ROA not after: Thu 29 May 2025 06:37:27 +0000
asID: 15399
IP address blocks: 102.212.112.0/22 maxlen: 22
102.212.116.0/22 maxlen: 22
102.213.36.0/22 maxlen: 22
102.214.48.0/22 maxlen: 22
102.215.28.0/22 maxlen: 22
102.215.148.0/22 maxlen: 22
102.215.160.0/22 maxlen: 22
102.216.60.0/22 maxlen: 22
102.216.244.0/22 maxlen: 22
102.217.80.0/22 maxlen: 22
102.218.28.0/22 maxlen: 22
102.219.120.0/22 maxlen: 22
102.219.216.0/22 maxlen: 22
102.221.20.0/22 maxlen: 22
102.222.84.0/22 maxlen: 22
2c0f:e958::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: May 29 06:37:27 2023 GMT
Not After : May 29 06:37:27 2025 GMT
Subject: CN=6474482b-a2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:5d:d8:33:ae:48:84:5b:76:ab:78:21:34:
d3:9e:f8:4e:d4:2a:87:19:e9:65:0c:7d:44:6a:f9:
f9:96:73:d7:a4:8b:36:06:77:7a:d7:81:d2:e2:c4:
46:78:d1:76:f7:09:e5:9f:ed:8b:26:e8:86:ba:af:
6b:31:00:1e:ec:bf:bb:9f:71:ce:21:82:3c:73:e3:
bf:90:45:bb:3f:dc:57:34:55:05:36:6a:8b:2b:a7:
e6:0f:ab:ef:11:a2:67:fc:9b:0d:7d:e7:f2:88:b1:
16:4b:08:e2:54:ab:02:35:dd:54:2c:31:4f:fb:cb:
e8:58:34:29:9b:90:61:b8:f1:f1:80:69:12:76:59:
e2:6d:b1:d4:4c:e0:30:54:ee:09:52:87:ee:37:00:
6c:52:ac:66:c9:85:f1:c3:05:6b:74:61:55:bf:0f:
8b:5c:d3:77:72:28:30:80:3d:4c:56:28:c8:8b:6f:
45:fe:10:67:9d:02:8a:19:47:af:77:d5:d0:29:dd:
e6:bb:f3:36:f8:39:3f:6f:ba:1d:89:c9:18:60:7f:
b5:2d:e5:94:93:76:55:c5:86:49:0c:c1:96:a1:b3:
71:5f:2d:29:95:21:8e:9d:62:65:c7:d5:4e:d8:5c:
e6:78:4c:cf:a0:d7:8c:8a:f3:e3:cc:1d:b5:ba:f1:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C9:93:30:EE:06:38:95:D1:93:6E:85:0A:EC:A9:12:2A:48:39:C9
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/49539D74FDEB11EDA3B686404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.112.0/21
102.213.36.0/22
102.214.48.0/22
102.215.28.0/22
102.215.148.0/22
102.215.160.0/22
102.216.60.0/22
102.216.244.0/22
102.217.80.0/22
102.218.28.0/22
102.219.120.0/22
102.219.216.0/22
102.221.20.0/22
102.222.84.0/22
IPv6:
2c0f:e958::/32
Signature Algorithm: sha256WithRSAEncryption
b9:bd:22:36:f3:b2:12:7b:7b:61:d1:42:38:17:34:bd:18:3d:
a9:14:08:a2:8b:49:e9:97:d1:05:ac:94:90:66:36:b1:3d:b3:
c8:44:b1:ee:44:0a:a5:0c:73:18:44:a6:64:3d:98:1c:28:79:
1c:4c:d2:c0:8e:25:e6:86:42:b8:9b:6d:4f:46:55:a1:ee:7a:
32:17:8d:19:59:ea:19:91:6d:61:f9:95:33:c0:c0:90:36:54:
2c:73:7e:92:fd:ce:db:f4:e7:bf:ca:b6:e3:d1:3c:dc:48:5a:
77:80:5f:d1:a6:f0:06:99:75:13:4e:06:ff:74:da:e4:bf:1c:
d4:d7:8d:e4:a2:3b:c6:81:a1:05:e0:3a:3f:fa:41:20:27:77:
71:a0:54:b1:af:9c:1e:85:46:18:37:a6:6d:0d:6b:61:e9:29:
a1:f5:22:0a:95:f5:92:ff:8f:1d:7f:f2:a4:71:16:bb:29:f4:
7c:1d:64:79:40:3c:92:89:0c:43:04:ba:2f:2f:1d:60:c3:b5:
45:7a:3d:f3:ef:aa:5a:8a:f5:42:82:e5:a7:27:ee:95:a8:07:
93:0e:bb:56:0d:72:dc:37:74:89:8f:21:2c:51:86:d8:f1:08:
4e:5d:dc:16:ff:db:7a:a6:56:4d:74:b8:9a:ae:26:88:d8:c9:
63:50:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:28 2024 by rpki-client on console-ams.rpki-client.org