Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/E3806EB4BE9C11EE8AD4BEA7775412E6.roa
File: E3806EB4BE9C11EE8AD4BEA7775412E6.roa (raw, json)
Hash identifier: vi1SaeJ/he/8I4o22H/PsR8oFaPMpVTP4SEKAR/gzwk=
Subject key identifier: 72:25:CF:A0:0B:2C:23:A1:2D:21:19:7B:6B:8A:72:51:AE:F1:49:AB
Certificate issuer: /CN=F36114AAAF/serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
Certificate serial: 0E
Authority key identifier: CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/E3806EB4BE9C11EE8AD4BEA7775412E6.roa
Signing time: Mon 29 Jan 2024 11:52:34 +0000
ROA not before: Mon 29 Jan 2024 11:52:30 +0000
ROA not after: Thu 29 Jan 2026 11:52:30 +0000
asID: 21003
IP address blocks: 102.68.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36114AAAF/serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
Validity
Not Before: Jan 29 11:52:30 2024 GMT
Not After : Jan 29 11:52:30 2026 GMT
Subject: CN=65b79181-8ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:70:c9:5e:d6:86:e7:f3:9b:9f:74:5e:39:
70:85:20:80:91:f3:98:f3:5c:dd:71:df:5c:85:a6:
b5:0b:0e:35:b4:36:77:7d:c2:09:07:2a:0f:2e:03:
67:8b:a6:01:10:2b:5e:72:0d:c0:aa:54:88:dc:11:
25:02:7c:bd:ec:d3:f8:e2:a2:7d:ab:1b:5c:d4:a0:
b5:0d:bf:9d:a6:5f:af:02:34:ef:ba:f3:3c:29:05:
57:a1:a7:8e:ff:9b:c5:14:6a:e4:a6:59:f6:68:ef:
42:fe:e1:9d:26:bb:45:6f:a3:9d:7c:ec:5b:65:4a:
91:ec:9e:db:47:1d:3f:76:93:9f:51:99:ca:e7:78:
6d:2b:67:22:2f:d9:6a:17:11:12:ec:15:82:18:10:
7d:4a:df:be:54:60:ba:a0:44:05:5e:d9:48:f3:24:
3a:44:39:6c:05:ff:4c:a8:da:9e:c5:d4:92:e4:7c:
95:62:7a:68:c8:9a:d1:70:6a:1a:80:44:b8:df:46:
6b:d3:f8:fc:42:91:a7:a9:8d:d4:48:bc:c4:a2:df:
1a:cc:38:68:0e:ec:7c:ee:5b:5a:05:4c:0b:18:c4:
9f:2b:1d:dc:1b:7d:1a:88:b4:76:52:2b:71:be:ca:
97:e0:11:e9:ed:7c:c1:bc:59:76:4e:0a:ef:e3:c1:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:CF:A0:0B:2C:23:A1:2D:21:19:7B:6B:8A:72:51:AE:F1:49:AB
X509v3 Authority Key Identifier:
keyid:CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/E3806EB4BE9C11EE8AD4BEA7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:34:14:55:95:26:6b:e3:96:81:05:34:65:bc:5c:86:e8:b9:
ec:dc:c4:4e:fd:8e:5a:bc:c9:a0:9e:be:b6:03:60:b7:35:62:
ac:2d:c4:f3:20:23:e0:1f:07:66:f8:7b:dd:35:c1:3e:f2:70:
aa:20:8b:12:1d:a1:df:6b:26:b8:55:8b:9a:45:93:f9:bf:1c:
ba:a4:d8:ec:56:7e:bd:67:50:cd:ea:bc:0e:8b:74:51:3e:6f:
00:59:9c:12:dd:5a:86:e4:7e:04:39:c9:40:18:da:b7:93:3c:
ee:ad:f2:45:09:6c:43:19:2e:0e:d6:be:c9:00:b7:91:94:fe:
4e:1b:ca:96:18:6b:c7:d1:3f:36:36:c8:40:2e:17:57:ee:56:
8c:d7:5b:99:62:2e:ae:84:a7:f1:e2:89:a1:bd:d7:23:54:33:
d8:aa:ed:dc:a2:4e:b0:44:cb:b5:a5:55:d8:65:f5:d5:b8:c7:
92:ee:d3:60:16:4e:7a:85:48:84:c0:67:32:0c:b4:83:be:74:
02:76:da:44:76:b7:e7:c9:ab:5e:67:dc:60:cc:ca:06:64:21:
ce:2b:c3:1a:93:2b:d7:16:ff:74:4b:9b:0d:a2:f7:3d:6c:79:
28:fb:50:63:df:05:59:a5:c3:be:f5:0f:ec:ec:5b:ff:fb:08:
c0:e4:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:30 2024 by rpki-client on console-ams.rpki-client.org