Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/8AF09F68967C11EF8FAE2587762E951A.roa
File: 8AF09F68967C11EF8FAE2587762E951A.roa (raw, json)
Hash identifier: +EymbhSb2ix/YVVgkoENsEDRZBF5lme1M/WCQH0MZ40=
Subject key identifier: 3A:66:6E:0C:BC:2B:32:A1:B5:DF:A2:89:C6:71:74:44:5B:29:27:17
Certificate issuer: /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial: 4D
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/8AF09F68967C11EF8FAE2587762E951A.roa
Signing time: Wed 30 Oct 2024 05:05:12 +0000
ROA not before: Wed 30 Oct 2024 05:05:08 +0000
ROA not after: Thu 30 Oct 2025 05:05:08 +0000
asID: 37680
IP address blocks: 102.132.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Validity
Not Before: Oct 30 05:05:08 2024 GMT
Not After : Oct 30 05:05:08 2025 GMT
Subject: CN=6721be88-d379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:9f:0c:e8:3e:8d:85:97:3a:87:af:f5:da:
3d:ff:b1:40:c0:86:fa:86:dd:ae:40:3a:3c:99:a2:
21:dd:a6:56:36:b9:0d:47:06:7d:4a:76:0c:06:98:
b2:69:42:ed:0d:36:6b:c2:87:f6:e5:22:f5:ed:3a:
d6:a2:c9:e7:3c:66:39:f5:5b:c9:25:df:c9:2c:76:
91:79:8d:39:2c:a8:69:93:70:65:de:ff:f8:6d:9f:
89:8f:7b:bc:71:bb:50:68:0e:9e:03:18:f5:bd:b3:
34:62:00:fa:b4:fe:95:09:4d:bb:b9:0e:2f:98:f8:
40:a4:06:87:d7:07:49:e6:12:e0:88:b0:4e:a7:6f:
65:c3:c4:b1:db:62:71:7b:68:9c:8e:a1:0e:6d:cd:
e5:76:42:c5:f2:f7:e7:45:0a:66:e4:73:e0:41:08:
19:81:35:6f:15:4d:e8:e0:60:f4:2b:93:e4:04:f4:
83:c0:a7:3b:b8:ba:b5:3f:d9:81:a6:78:c0:99:b4:
64:08:fe:7c:c6:0b:53:0a:e8:40:75:d3:35:c2:79:
da:f0:45:8f:54:23:f6:60:45:12:86:f5:5d:69:77:
17:da:f7:75:5b:27:9b:1f:c2:68:70:37:2a:e7:75:
5c:3e:bb:0e:86:09:7c:57:cf:64:b1:6f:20:a9:97:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:66:6E:0C:BC:2B:32:A1:B5:DF:A2:89:C6:71:74:44:5B:29:27:17
X509v3 Authority Key Identifier:
keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/8AF09F68967C11EF8FAE2587762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.132.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:27:07:df:39:24:05:9b:e9:14:07:0a:21:47:ce:3d:2f:3b:
27:ba:05:53:6c:13:db:9c:71:b5:51:08:e7:e4:2c:6d:ba:51:
54:ee:90:81:13:9c:b1:9e:7b:f3:a8:5f:2a:b8:91:04:fa:4e:
c0:c7:7e:21:ee:5c:b1:d0:81:40:a1:25:20:df:91:fc:e2:e8:
45:68:72:4c:77:3d:73:5c:b2:69:5a:59:45:e4:9f:a2:8f:f5:
3b:0e:0e:5c:d1:ca:91:f0:6a:e6:29:bb:fb:e3:ea:6d:fe:41:
91:c1:7b:aa:c2:a6:09:c1:0a:70:f2:bc:87:41:95:57:f3:0f:
db:01:1b:16:f0:56:57:23:ab:25:38:dd:46:04:57:f0:02:cd:
df:1e:f6:30:e4:a2:7a:0c:c4:f2:8c:fa:61:13:f9:e0:15:99:
e6:d3:c6:79:41:19:75:d1:8f:77:c0:d6:29:89:80:74:0d:08:
1f:00:db:ba:e1:53:73:71:1e:1e:93:64:06:de:1c:b9:83:81:
0f:a8:47:e2:b7:bb:3a:90:17:2f:76:34:b8:85:43:29:3f:f4:
2b:af:2f:a1:11:db:82:d1:48:8f:af:a3:e6:77:99:af:ea:a0:
4a:f5:dc:a8:bc:2a:04:80:de:bb:5d:e1:01:c0:30:c5:e2:67:
99:c1:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:40 2024 by rpki-client on console-fra.rpki-client.org