Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/F72F230095B111EF9FB6018A762E951A.roa
File: F72F230095B111EF9FB6018A762E951A.roa (raw, json)
Hash identifier: Xm0CTYFS+gMX2JiKTa0lwX3CGkV/m5AHhRlqtCBT9K8=
Subject key identifier: 55:77:B8:3F:97:98:59:46:23:21:0A:95:BE:F1:DE:96:29:AF:17:6D
Certificate issuer: /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial: 44
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/F72F230095B111EF9FB6018A762E951A.roa
Signing time: Tue 29 Oct 2024 04:55:06 +0000
ROA not before: Tue 29 Oct 2024 04:55:02 +0000
ROA not after: Sun 29 Oct 2034 04:55:02 +0000
asID: 37680
IP address blocks: 102.132.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Validity
Not Before: Oct 29 04:55:02 2024 GMT
Not After : Oct 29 04:55:02 2034 GMT
Subject: CN=67206aaa-4fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:c6:9d:3f:ad:3b:b1:a4:df:ef:fa:2e:1a:
cd:80:a0:66:a2:e7:f5:8b:6f:16:b0:09:b2:25:07:
8f:22:5b:05:d7:78:e3:d9:a2:ab:48:29:07:b3:7f:
62:34:5d:10:df:20:eb:57:92:36:6d:c8:bd:f8:fd:
76:e4:1a:57:c8:5f:c9:db:bd:d8:e5:44:d1:fd:3f:
c2:9b:3b:09:a1:54:33:2d:7e:d7:2f:bb:ef:24:be:
19:00:4b:22:31:f2:4d:fc:23:8e:70:fe:78:a6:4e:
0f:83:9e:e2:f3:b0:19:74:96:59:53:ae:e8:1f:9d:
bb:f8:96:c8:b0:09:47:a0:40:3d:d0:d2:0b:e5:48:
33:96:42:6a:32:97:19:6d:75:56:ee:32:b8:aa:f8:
e3:77:ff:5e:e7:be:34:d3:cb:91:e3:c5:05:11:5b:
77:2b:55:fa:f0:75:67:dc:52:8c:dd:53:02:f5:17:
6e:8e:82:6b:6a:e5:ec:67:56:84:f2:2d:a7:70:86:
10:1b:c6:1e:1f:b4:b0:20:e9:91:2c:1b:0e:00:03:
8f:1e:9c:e7:a6:26:6a:36:68:8a:1c:fe:02:2d:57:
bb:e1:68:06:26:a4:c4:8e:af:3b:ed:a3:3a:ad:b0:
20:7e:9b:5d:b4:49:79:91:99:49:30:05:8f:d6:3d:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:77:B8:3F:97:98:59:46:23:21:0A:95:BE:F1:DE:96:29:AF:17:6D
X509v3 Authority Key Identifier:
keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/F72F230095B111EF9FB6018A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.132.192.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:b8:52:f0:16:63:aa:82:9c:75:00:41:f2:92:51:f3:2c:dd:
1e:3e:ed:c7:fc:18:9c:bf:f9:58:f8:60:e3:d7:a4:98:56:c8:
84:8a:86:a5:da:15:1a:50:19:34:ff:7b:6e:a0:88:16:87:c2:
1e:d7:8a:96:4a:24:e0:67:6a:cc:79:93:a0:a2:dd:ce:8d:2f:
a4:90:83:2d:93:d5:b3:b3:4b:9c:5f:0f:9f:b0:75:96:80:c5:
79:b4:c4:38:ec:9e:1c:0f:fd:f8:e7:da:7a:2b:df:48:3f:d9:
fe:2b:ff:13:b6:a5:74:c1:c1:eb:6e:5d:4a:47:77:fa:df:32:
19:20:7e:ef:db:c2:03:a7:6a:ec:a7:90:70:c4:1a:04:7b:77:
a7:26:4f:22:bd:23:6a:c1:ba:35:3d:32:ba:5c:b5:a9:1c:62:
36:01:ef:f5:ce:1c:f1:ea:88:8c:76:34:c2:31:ec:20:d1:e4:
41:f8:4d:23:ad:f6:cd:c4:ab:14:f0:fa:4a:a2:1d:47:b6:4a:
57:02:69:30:45:9e:03:57:3f:86:c1:5c:cf:d8:20:5a:6b:83:
65:9d:97:e6:26:91:bf:37:0e:37:fa:59:3e:d0:35:61:1b:c1:
8c:f0:ae:69:e4:fa:2f:f8:f0:fa:de:68:02:d0:d5:fb:5d:ce:
ba:3b:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:19:33 2024 by rpki-client on console-ams.rpki-client.org