Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/36CB15D21A1D11ECB0653032D8A014CE.roa
File: 36CB15D21A1D11ECB0653032D8A014CE.roa (raw, json)
Hash identifier: bf4enB0HBdnrVbbzmad98aieReASPacG5zOGEFbBhW0=
Subject key identifier: 9D:AA:0F:B5:86:70:17:F2:BE:B4:8A:A1:4B:06:8F:AC:98:5C:D9:5E
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 06
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/36CB15D21A1D11ECB0653032D8A014CE.roa
Signing time: Mon 20 Sep 2021 14:15:32 +0000
ROA not before: Mon 20 Sep 2021 14:15:28 +0000
ROA not after: Sat 20 Sep 2031 14:15:28 +0000
asID: 328585
IP address blocks: 102.23.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Sep 20 14:15:28 2021 GMT
Not After : Sep 20 14:15:28 2031 GMT
Subject: CN=61489784-cf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:22:13:87:ee:bd:c1:ba:8a:9b:5f:f6:7d:
ec:72:d6:08:87:92:4e:e0:77:83:9c:94:a8:14:8d:
34:f2:f9:e0:c8:5f:cc:80:3f:d6:3e:1f:a7:d7:9d:
1c:19:ee:e7:16:7a:01:ab:68:45:28:52:02:07:9f:
4c:e0:71:96:fb:7a:d7:f1:a3:de:ae:5b:cc:20:bd:
dd:f8:1c:2b:c4:37:d8:22:a7:d9:04:04:c8:a4:2b:
85:e5:03:9d:cd:a7:37:64:45:49:02:fa:b5:49:29:
3c:ad:1a:8d:8b:29:fb:7d:9c:1a:6a:00:31:69:fd:
d5:1f:8e:bf:b6:e2:16:dc:a7:21:e9:05:12:6b:da:
7a:6e:7a:61:4e:cc:b6:57:31:1a:0f:8c:11:2f:df:
1e:28:3f:35:c5:46:14:f3:b4:42:36:64:06:9b:1a:
a9:e5:1e:bc:42:6e:5a:fe:ff:88:4b:6a:3b:73:31:
7a:bb:52:83:46:57:e0:78:22:35:bb:4f:d2:f6:19:
bb:7c:e2:e5:f4:3a:03:8a:72:d1:ff:ce:ce:c6:79:
3c:5f:45:9d:f5:ad:85:77:42:34:0d:fb:a0:53:c3:
b8:82:5b:1d:d3:d2:13:8b:ec:d6:71:fa:1e:1b:d3:
e5:ec:10:91:fe:d4:b5:c4:8c:9d:27:55:3a:b9:bb:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:0F:B5:86:70:17:F2:BE:B4:8A:A1:4B:06:8F:AC:98:5C:D9:5E
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/36CB15D21A1D11ECB0653032D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b8:a1:62:c1:c7:0a:39:74:9d:83:2f:56:99:e8:46:88:f0:
b9:17:df:56:82:fa:34:67:ec:0c:84:d5:ff:d4:27:a3:bf:d7:
8b:0c:f8:4e:80:84:b3:a8:d5:c2:f4:f3:5e:dd:b8:6a:dd:c2:
8d:b0:4a:c8:5f:4b:7e:ff:8a:3f:ac:85:9c:33:d8:3a:95:52:
f1:0d:b7:7f:c6:03:c1:05:1b:fe:4d:fd:16:e3:91:de:90:06:
44:fb:cb:7f:d1:58:a6:de:ac:93:e9:9b:a1:fb:16:7f:2b:7f:
60:71:8f:6a:84:b1:cc:27:0f:bd:c7:b7:a6:a1:e2:69:0c:03:
69:4a:0b:f9:8d:51:ac:83:c9:2a:dc:5c:f1:00:d2:ee:5d:4d:
40:91:0b:5d:59:df:f6:fb:08:1f:39:f7:19:b0:3c:07:93:f9:
c6:9a:dd:db:af:3a:75:3f:52:57:3a:5c:74:f9:53:2a:fd:8d:
4d:06:24:b0:33:2d:77:a0:69:fc:b0:45:67:18:f6:ff:ea:4c:
3f:3e:5f:b7:59:67:93:9a:b8:dd:59:70:5c:b2:e1:e8:27:fb:
c7:30:8f:b4:db:7f:e5:9d:24:0b:b3:b2:cb:ec:9d:ba:fd:9a:
c8:9b:03:6a:38:f4:69:a2:eb:17:3c:2b:d5:b7:2a:6d:44:ab:
2f:cb:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:16 2024 by rpki-client on console-fra.rpki-client.org