Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/566CE01C0BD011EF922BB41F017001B1.roa
File: 566CE01C0BD011EF922BB41F017001B1.roa (raw, json)
Hash identifier: NJoaiPoqCsvM8uTcCsGcl3CIrYSjToxekiedssQBL9U=
Subject key identifier: DE:90:59:6A:19:AA:41:10:04:17:9A:78:15:CF:ED:9C:5C:E6:B4:A4
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: BE
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/566CE01C0BD011EF922BB41F017001B1.roa
Signing time: Mon 06 May 2024 17:44:50 +0000
ROA not before: Mon 06 May 2024 17:44:47 +0000
ROA not after: Thu 31 Dec 2026 17:44:47 +0000
asID: 36912
IP address blocks: 102.244.128.0/24 maxlen: 24
102.244.133.0/24 maxlen: 24
102.244.134.0/24 maxlen: 24
102.244.135.0/24 maxlen: 24
102.244.194.0/24 maxlen: 24
102.244.195.0/24 maxlen: 24
102.244.196.0/24 maxlen: 24
102.244.200.0/24 maxlen: 24
102.244.204.0/24 maxlen: 24
102.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: May 6 17:44:47 2024 GMT
Not After : Dec 31 17:44:47 2026 GMT
Subject: CN=66391712-8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:7f:2a:e8:7b:77:5b:f8:80:19:88:b0:56:
ec:f5:6b:bb:7e:d0:2d:b7:e3:0a:17:3f:01:0f:2d:
44:d3:88:f7:39:93:b5:33:93:0e:d1:44:9e:23:e1:
d0:a3:80:dd:4e:96:07:41:a5:81:18:5e:02:23:9c:
20:84:f6:65:83:09:47:15:39:8c:8d:25:8f:2c:1e:
a4:85:8e:17:ec:0d:a8:51:c7:77:92:1e:bb:87:34:
99:79:fc:51:ba:2c:72:c9:f0:d9:ae:d5:fb:24:f0:
c3:59:7a:ca:5f:78:f4:e5:22:2a:50:2a:f0:b0:d8:
91:f6:35:c3:1f:67:1f:f3:7e:2c:85:03:4a:98:a6:
68:45:0a:bf:73:69:e5:0c:c8:16:ef:a0:a2:78:74:
ee:a7:53:2f:b6:57:ee:cd:e7:d9:df:1b:66:95:16:
36:8e:75:78:0d:70:12:7c:1a:47:e1:27:ab:e0:c6:
9f:62:76:83:7e:a2:58:87:11:e3:5f:8a:d8:21:49:
6f:ef:65:49:cf:02:cc:74:06:33:07:69:ce:05:1e:
95:a2:f2:99:c4:6a:a9:e8:40:b4:df:f3:cc:64:6d:
d3:92:ea:47:f3:5e:9b:cb:20:62:7d:8a:bf:5b:74:
76:f0:83:28:92:9f:8e:cf:16:93:dc:3f:5e:35:25:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:90:59:6A:19:AA:41:10:04:17:9A:78:15:CF:ED:9C:5C:E6:B4:A4
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/566CE01C0BD011EF922BB41F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.244.128.0/24
102.244.133.0-102.244.135.255
102.244.194.0-102.244.196.255
102.244.200.0/24
102.244.204.0/24
102.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a4:02:8b:58:f6:e0:89:5d:e6:65:17:00:67:2a:4a:da:3e:
16:4d:88:c2:e6:af:3c:b3:a4:b0:49:90:2f:e7:bb:da:c9:72:
da:e3:fe:8b:ff:ee:f6:b9:e5:4f:ea:db:73:a7:61:c2:35:6b:
d5:7f:3d:2f:aa:1a:5c:18:ad:91:f8:91:f5:f1:77:81:2a:9a:
21:07:5b:33:6a:70:17:b4:a1:e3:9e:04:51:ba:d9:47:b0:85:
4d:73:df:49:96:b2:16:67:be:20:2b:ae:6f:aa:8c:95:05:a1:
32:bf:84:e4:80:84:dc:58:51:4b:db:8f:52:74:6a:3e:6e:4e:
46:9b:a2:b4:d8:e4:f7:c5:24:70:0c:86:33:dc:6f:d6:7e:26:
48:23:9e:9c:5f:2c:70:32:82:49:af:2c:83:bc:b8:8e:fb:d6:
1b:1e:17:a0:8d:5b:f7:d2:c3:38:f5:8b:90:9c:2c:56:f3:21:
d6:99:43:a8:0c:71:42:7d:70:13:c9:22:dc:0a:c1:d6:56:f8:
f3:32:34:8d:7c:59:43:b3:52:0c:f6:2c:24:21:89:44:42:86:
bb:89:65:4a:c1:c4:75:96:9c:30:a7:8d:fc:70:da:b4:11:b6:
b9:be:37:1d:49:30:71:6b:04:d8:4d:e3:0b:b5:c2:93:2e:86:
80:87:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:40 2024 by rpki-client on console-fra.rpki-client.org