Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/89F940C23C8311EFB8D07445762E951A.roa
File: 89F940C23C8311EFB8D07445762E951A.roa (raw, json)
Hash identifier: AdMh/WAb6kfvbKIfiPhlOqARAQo/7ZcS1S5kfzm8Lug=
Subject key identifier: 98:21:67:41:A0:A5:27:D5:3C:CD:A9:99:E1:4E:47:F9:EE:A3:44:E3
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 03F1
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/89F940C23C8311EFB8D07445762E951A.roa
Signing time: Sun 07 Jul 2024 17:08:32 +0000
ROA not before: Sun 07 Jul 2024 17:08:29 +0000
ROA not after: Tue 07 Jul 2026 17:08:29 +0000
asID: 15399
IP address blocks: 102.209.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1009 (0x3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: Jul 7 17:08:29 2024 GMT
Not After : Jul 7 17:08:29 2026 GMT
Subject: CN=668acb90-a555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:ba:49:e1:f9:81:4d:3b:be:99:17:de:6f:
ed:81:50:6c:1e:a4:1c:07:9b:13:a4:43:f8:9d:49:
13:a5:0a:b0:fd:05:51:b7:95:8d:44:4e:08:c4:4f:
48:18:20:a7:b9:26:13:7d:a2:de:48:e7:c5:c5:60:
d3:f6:cd:be:e3:00:3f:05:d3:b6:79:2c:91:63:76:
03:bc:4a:76:cd:ff:59:9a:5d:f3:e5:c4:81:d2:47:
4b:c1:83:61:e8:bd:a0:76:20:24:5d:76:a8:8c:be:
59:ca:8c:1a:b0:b7:88:88:09:3d:e5:c6:2a:0a:9c:
aa:1f:b9:3f:68:2d:b7:17:62:93:ea:0c:23:fa:22:
9d:1d:9e:cb:e1:cc:87:b2:13:7d:34:74:4e:58:bf:
0a:de:18:fb:74:e8:5f:60:b2:5f:46:93:df:90:65:
e1:27:87:b8:66:f0:cc:b5:3a:c6:79:ab:00:2c:a1:
2d:1c:27:67:e2:bf:e2:7f:3c:7e:ca:6c:a1:0e:c5:
69:13:d6:de:31:c5:80:2f:04:fb:ed:85:34:6f:56:
44:51:40:52:6a:66:24:b5:3e:97:13:f4:94:c6:47:
be:aa:e9:86:31:0f:37:cc:71:71:0a:df:1e:ff:a0:
c2:de:17:6a:81:0a:7a:91:d6:60:3e:51:0a:0e:4e:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:67:41:A0:A5:27:D5:3C:CD:A9:99:E1:4E:47:F9:EE:A3:44:E3
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/89F940C23C8311EFB8D07445762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.36.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:d4:cb:8d:4c:be:9f:fd:ab:5a:3e:bb:6d:d3:73:cf:7d:a2:
41:81:7d:77:84:25:04:da:3f:cc:06:c1:4c:85:6f:9b:fc:0a:
1c:d1:77:81:0c:01:24:8b:04:60:83:2c:77:31:a3:a4:33:45:
86:b1:20:dd:5d:b8:fc:e9:a6:6c:95:50:65:d9:f4:08:c7:26:
eb:bd:10:12:08:03:7f:14:81:6a:b5:04:45:ca:98:f2:2c:dd:
29:68:4e:94:16:55:4a:82:96:da:97:9d:1e:5a:2b:d9:2a:3e:
dd:2a:65:81:f6:81:85:13:ea:03:47:83:f7:04:ce:df:8d:0b:
92:bf:6b:60:ea:25:ca:dc:fd:98:f8:f8:89:fb:ad:32:3f:79:
ac:87:8e:b3:c6:80:6a:6b:fa:e8:ee:f0:ba:e7:fe:46:1a:f9:
69:eb:ec:d5:44:e5:89:0e:36:bb:af:4a:b9:fd:53:3c:4d:01:
9e:7d:99:6f:51:1a:54:96:a1:c4:09:25:de:e8:e5:5b:66:8c:
72:bb:e5:7f:48:4b:f5:cd:16:35:56:50:bc:c5:51:9b:91:59:
bb:ef:87:50:48:3b:11:55:54:2c:50:8c:df:c0:b5:7c:22:c7:
97:22:b1:59:48:74:0c:40:e9:5f:81:4a:1a:f8:0a:80:65:69:
5a:17:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:28 2024 by rpki-client on console-ams.rpki-client.org