Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/C1A1DD34BE5E11EE99164ABD775412E6.roa
File: C1A1DD34BE5E11EE99164ABD775412E6.roa (raw, json)
Hash identifier: wvW9kZ5/AUNQWgKaGpjvpIVPHuqxftH9YadONSy7YnM=
Subject key identifier: A9:F8:3F:D2:03:0B:02:AF:EB:46:15:E2:D8:F6:62:AC:DA:8B:A2:BE
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: 53
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/C1A1DD34BE5E11EE99164ABD775412E6.roa
Signing time: Mon 29 Jan 2024 04:27:48 +0000
ROA not before: Mon 29 Jan 2024 04:27:44 +0000
ROA not after: Thu 29 Jan 2026 04:27:44 +0000
asID: 36912
IP address blocks: 102.244.0.0/17 maxlen: 17
102.244.32.0/24 maxlen: 24
102.244.33.0/24 maxlen: 24
102.244.34.0/24 maxlen: 24
102.244.35.0/24 maxlen: 24
102.244.36.0/24 maxlen: 24
102.244.37.0/24 maxlen: 24
102.244.38.0/24 maxlen: 24
102.244.39.0/24 maxlen: 24
102.244.40.0/24 maxlen: 24
102.244.41.0/24 maxlen: 24
102.244.42.0/24 maxlen: 24
102.244.43.0/24 maxlen: 24
102.244.44.0/24 maxlen: 24
102.244.45.0/24 maxlen: 24
102.244.50.0/24 maxlen: 24
102.244.51.0/24 maxlen: 24
102.244.52.0/24 maxlen: 24
102.244.53.0/24 maxlen: 24
102.244.54.0/24 maxlen: 24
102.244.55.0/24 maxlen: 24
102.244.56.0/21 maxlen: 21
102.244.64.0/24 maxlen: 24
102.244.66.0/24 maxlen: 24
102.244.67.0/24 maxlen: 24
102.244.68.0/24 maxlen: 24
102.244.69.0/24 maxlen: 24
102.244.70.0/24 maxlen: 24
102.244.71.0/24 maxlen: 24
102.244.72.0/22 maxlen: 24
102.244.73.0/24 maxlen: 24
102.244.74.0/23 maxlen: 24
102.244.75.0/24 maxlen: 24
102.244.76.0/22 maxlen: 24
102.244.77.0/24 maxlen: 24
102.244.78.0/24 maxlen: 24
102.244.128.0/17 maxlen: 17
102.244.152.0/24 maxlen: 24
102.244.153.0/24 maxlen: 24
102.244.154.0/24 maxlen: 24
102.244.155.0/24 maxlen: 24
102.244.156.0/24 maxlen: 24
102.244.157.0/24 maxlen: 24
102.244.158.0/24 maxlen: 24
102.244.159.0/24 maxlen: 24
102.244.160.0/24 maxlen: 24
102.244.161.0/24 maxlen: 24
102.244.176.0/24 maxlen: 24
102.244.178.0/24 maxlen: 24
102.244.180.0/24 maxlen: 24
102.244.181.0/24 maxlen: 24
102.244.182.0/24 maxlen: 24
102.244.183.0/24 maxlen: 24
102.244.184.0/21 maxlen: 21
102.244.211.0/24 maxlen: 24
102.244.216.0/24 maxlen: 24
102.244.217.0/24 maxlen: 24
102.244.218.0/24 maxlen: 24
102.244.219.0/24 maxlen: 24
102.244.220.0/24 maxlen: 24
102.244.221.0/24 maxlen: 24
102.244.222.0/24 maxlen: 24
102.244.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: Jan 29 04:27:44 2024 GMT
Not After : Jan 29 04:27:44 2026 GMT
Subject: CN=65b72944-7abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:bc:28:ae:64:51:e7:09:47:83:c4:36:34:
ca:a0:75:19:dd:9c:d0:0a:3a:3d:96:c4:ac:30:56:
f0:15:80:dc:05:bc:73:38:ef:1a:ef:10:eb:e0:d8:
fb:f5:02:29:65:13:80:d6:53:f7:ee:61:e9:af:91:
84:0a:63:ea:46:93:a4:dd:77:68:80:d9:f9:6c:91:
f8:f9:5b:2d:a8:5e:50:77:66:87:50:e1:d7:65:57:
0b:69:5f:25:2c:7d:3d:3e:66:55:d5:97:27:0a:f2:
a8:c9:f0:e0:06:12:4b:c8:f1:23:4c:f9:66:00:0c:
16:a9:76:e3:7a:f0:db:3f:23:cb:29:d0:28:22:8e:
f9:02:1c:a8:df:97:77:8f:8b:4b:7a:26:d9:25:5c:
72:19:b4:fb:87:c0:34:08:90:7d:03:68:43:76:85:
c0:3a:86:ba:eb:88:3e:9e:c3:28:b5:9c:f5:24:df:
1f:9a:62:ab:64:02:2a:0c:a1:eb:c3:ff:a3:4c:b9:
85:14:47:b7:bf:5d:2e:8c:6e:e1:88:6a:74:62:7f:
43:f3:19:84:10:85:52:d4:6e:94:e7:20:b9:49:f5:
71:92:31:46:88:55:de:b3:1a:f4:5f:99:d9:9b:57:
4d:77:28:f1:cb:4e:9f:19:1a:28:55:1f:82:c3:6a:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:3F:D2:03:0B:02:AF:EB:46:15:E2:D8:F6:62:AC:DA:8B:A2:BE
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/C1A1DD34BE5E11EE99164ABD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:ac:fa:43:95:7a:d1:93:63:5f:d1:70:10:47:6e:02:80:39:
92:98:5c:18:81:90:7d:f4:5d:a5:96:d7:eb:d4:d8:d4:ef:ef:
28:9f:58:e3:77:19:f3:db:10:91:ef:0d:af:08:97:a7:d9:97:
31:49:18:ae:bc:6f:09:84:90:42:0f:0f:72:d8:78:2b:d1:fc:
e7:20:ce:3a:f6:9f:26:bb:68:1f:eb:e5:bb:88:c1:5f:7a:23:
07:af:3f:11:83:98:95:da:5d:60:17:dc:b5:93:af:a0:df:c9:
7b:0c:1c:b4:ed:8c:63:2f:7a:fb:57:75:dd:57:ca:7a:d9:42:
ac:3e:a4:0f:e9:4b:c4:77:2a:0c:d0:71:8e:d4:a1:c3:0b:cc:
40:57:c3:95:46:63:e7:23:85:5c:92:86:cf:20:56:04:fd:ab:
57:5f:fa:73:45:e3:d9:05:3c:e1:23:85:32:73:9f:a5:61:8d:
f4:43:d1:c3:5f:85:36:50:ff:fa:04:1f:71:22:18:08:ae:dd:
b9:3a:f1:9b:35:a5:6f:8b:1b:52:84:fb:1f:79:5f:2f:ef:45:
67:15:ea:42:1c:f3:f9:cd:f7:6d:44:c6:7c:36:bc:b0:1c:72:
99:9e:8e:fb:c9:67:d0:ec:31:ee:c5:08:a4:90:97:16:a3:cf:
e1:c3:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:44 2024 by rpki-client on console-ams.rpki-client.org