Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C4CEB8AC398711EF843D2E9D762E951A.roa
File: C4CEB8AC398711EF843D2E9D762E951A.roa (raw, json)
Hash identifier: h7S0JCwsO3r6rweJjX0edCYo6Cy5Pss43I07DZlAHq8=
Subject key identifier: 8C:BE:A8:88:F8:76:2F:19:6F:C5:FF:99:5E:AE:54:46:10:47:83:4B
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 02A1
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C4CEB8AC398711EF843D2E9D762E951A.roa
Signing time: Wed 03 Jul 2024 22:01:17 +0000
ROA not before: Thu 04 Jul 2024 22:01:10 +0000
ROA not after: Sun 31 Dec 2034 22:01:10 +0000
asID: 328977
IP address blocks: 102.208.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Jul 4 22:01:10 2024 GMT
Not After : Dec 31 22:01:10 2034 GMT
Subject: CN=6685ca2c-8f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:a3:3f:d7:d0:00:08:a9:02:3a:01:90:9e:
62:08:88:09:2d:38:e3:cb:d5:f9:6d:4c:91:6e:10:
d8:c7:62:25:6d:58:71:dd:53:20:8b:39:4b:c0:f5:
da:66:00:4e:20:35:83:b9:5b:97:92:a2:43:c8:ba:
a9:52:08:36:44:9e:0f:70:de:86:94:d8:e0:ab:1a:
c8:03:16:3f:22:f6:fd:bf:65:5b:c7:b2:16:d9:53:
ed:7b:8b:1d:f6:7e:b1:e4:ed:aa:7a:bb:09:ce:5e:
e4:1a:cc:22:3e:a1:83:35:dd:3f:df:12:f0:69:52:
cc:e0:8a:c5:b3:d1:9e:4b:8b:5d:0e:d0:a4:a4:36:
01:f8:7f:51:4d:e8:88:f3:35:e7:9d:ab:a5:ed:60:
ad:a9:98:44:0d:a1:c4:3e:ea:f1:84:6c:f4:d5:12:
93:1d:f6:98:62:e9:1e:3f:96:f9:a3:3f:32:20:b2:
d7:b1:58:45:56:0d:d3:67:b9:48:a1:e6:99:2f:07:
a4:e9:49:b9:88:5a:98:64:06:85:a0:fb:d8:e5:93:
d2:c8:f7:f8:f3:8b:52:8e:c8:94:eb:47:09:27:b3:
e4:e1:34:32:9e:86:a4:d3:ed:cc:48:84:cd:d4:ff:
fc:5a:37:23:99:bd:92:6e:95:e5:47:b2:68:65:70:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BE:A8:88:F8:76:2F:19:6F:C5:FF:99:5E:AE:54:46:10:47:83:4B
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C4CEB8AC398711EF843D2E9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.168.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c5:f5:44:93:ce:7a:64:13:97:a9:08:2b:d6:7f:a0:ab:f1:
0b:39:a8:27:70:33:ed:4d:12:34:02:2b:08:e0:0f:dd:3a:75:
7b:5c:4d:fd:63:77:d3:45:e7:3a:79:5a:6e:13:29:38:e7:48:
8e:4a:70:b7:99:3a:3c:10:e0:5d:69:29:ae:7e:cc:f6:81:29:
d6:6f:8a:92:51:ac:00:62:c1:88:e8:d8:b6:27:53:fa:3e:17:
ff:d8:4e:16:b0:e4:f1:de:21:9e:2f:4c:b1:ee:e0:3f:70:eb:
54:c5:35:52:bf:58:09:b5:e4:17:14:b0:4b:4d:f6:c5:01:9f:
73:f7:cc:40:7b:78:5f:a3:c6:db:0e:0a:27:97:a1:44:f2:2e:
8c:17:8f:74:60:63:f4:fe:04:62:ed:38:87:35:73:58:c9:90:
48:b3:b5:f5:38:f7:58:bc:f0:71:ef:47:f6:40:b1:f6:16:61:
03:a7:7e:81:07:b7:36:92:54:01:13:f7:0e:a4:c5:e8:39:7d:
7d:75:6a:5d:8d:c3:12:77:33:e3:c9:58:de:1d:55:af:ec:62:
d7:60:d5:d8:4e:49:e6:50:61:6d:e4:6f:32:a4:f4:a2:11:ef:
6a:48:93:49:c9:67:07:12:d1:99:3b:b0:96:62:3b:86:5c:fe:
ff:6a:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:34 2024 by rpki-client on console-ams.rpki-client.org