Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/60A31C9CB9E411EE910C0687775412E6.roa
File: 60A31C9CB9E411EE910C0687775412E6.roa (raw, json)
Hash identifier: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=
Subject key identifier: 1F:20:5F:5D:5A:5C:7C:82:DD:F5:B7:C0:D5:35:A8:B5:59:E3:0C:C0
Certificate issuer: /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial: 02
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/60A31C9CB9E411EE910C0687775412E6.roa
Signing time: Tue 23 Jan 2024 11:41:42 +0000
ROA not before: Tue 23 Jan 2024 11:41:39 +0000
ROA not after: Thu 31 Jan 2030 11:41:39 +0000
asID: 36993
IP address blocks: 102.219.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Validity
Not Before: Jan 23 11:41:39 2024 GMT
Not After : Jan 31 11:41:39 2030 GMT
Subject: CN=65afa5f6-85e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:3b:a0:a9:8a:c0:f2:71:a5:84:13:af:cc:
bd:70:29:2c:52:63:0b:53:7a:ed:78:02:a7:36:87:
11:dc:2d:c2:cb:6a:04:26:d3:63:3d:37:8c:d5:28:
de:73:c0:48:8a:87:5e:de:d2:f8:4c:cf:d4:46:58:
e8:c1:7a:82:a1:ee:5a:5f:f3:ed:6c:d4:3f:74:39:
02:ba:bb:60:62:b1:45:3f:52:9f:a1:f8:3d:ae:f2:
40:e0:ec:3e:7a:cc:5a:4b:1d:4d:89:5c:a5:10:01:
68:e4:d6:75:25:2c:fe:13:90:ce:67:23:2c:fc:7b:
b5:13:8e:11:70:c0:9b:6d:e0:70:20:dc:cd:dc:62:
cb:f7:24:d6:fd:4b:d8:7d:17:bb:04:e5:57:19:fc:
a0:cb:3a:f1:3e:c4:8f:60:28:9b:24:e7:8f:af:f2:
08:58:fd:14:62:26:2e:24:5d:53:70:76:28:ac:c6:
5b:82:d5:40:0c:94:12:48:cc:d7:e9:a6:bb:60:d3:
d5:d5:f5:0d:b1:30:d9:5f:78:53:9b:6b:7c:51:8d:
95:82:72:fa:54:3f:64:93:32:63:0a:f2:41:f6:fc:
5b:2e:ea:7c:44:34:6b:5f:f8:f7:b2:4e:59:68:a9:
67:2b:4e:0f:68:60:67:68:21:9a:78:79:2b:cc:66:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:5F:5D:5A:5C:7C:82:DD:F5:B7:C0:D5:35:A8:B5:59:E3:0C:C0
X509v3 Authority Key Identifier:
keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/60A31C9CB9E411EE910C0687775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:db:bd:3e:70:fd:e2:48:85:62:b2:dd:af:eb:6c:29:0e:7f:
19:27:cb:80:f7:7d:ce:0e:36:51:f5:41:07:73:77:e9:55:21:
c0:c8:02:af:2f:ea:db:09:be:52:8d:16:f3:39:d5:8a:9c:58:
1e:e6:33:81:0e:97:cd:40:e2:60:a8:d4:1c:29:95:57:4d:78:
2e:ce:1c:73:91:13:c4:e9:2a:28:9e:fa:5c:d4:de:97:79:93:
b1:8e:e5:38:3a:f3:0b:28:b6:be:8e:cc:08:d3:f4:13:48:19:
23:90:48:3e:df:39:87:0e:7c:1f:7a:24:ba:53:ac:2e:be:9c:
08:37:5c:21:fe:88:2e:87:6a:5f:27:1b:b9:95:17:c0:3f:36:
c0:e6:f6:24:52:e2:0d:cf:94:5b:de:d6:a0:24:a7:07:1c:2e:
1e:db:87:fd:8b:80:46:03:8f:8e:4f:b9:d6:dc:84:dd:1c:65:
32:a8:65:7b:fe:dc:16:33:09:66:4d:b4:0c:cd:90:ff:99:d0:
7a:b9:9d:b9:42:02:55:66:3b:61:74:03:7b:2c:05:be:a9:15:
d2:54:52:eb:21:df:c7:cd:83:bd:ce:c3:3d:8c:33:61:bd:fe:
fd:8b:03:6f:53:85:e0:24:02:d9:47:50:f3:bb:78:89:b9:b4:
de:f5:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:30 2024 by rpki-client on console-ams.rpki-client.org