Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/B6AEA76A386E11EFB22C58AC762E951A.roa
File: B6AEA76A386E11EFB22C58AC762E951A.roa (raw, json)
Hash identifier: 5SrWot373DcY7xlbNxOXtSFJ3m3pxtYBX1fR6afzMgw=
Subject key identifier: AA:EF:8E:AE:58:57:B2:50:CF:03:6B:1E:EC:45:11:30:33:3A:B4:4A
Certificate issuer: /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial: 02F0
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/B6AEA76A386E11EFB22C58AC762E951A.roa
Signing time: Tue 02 Jul 2024 12:29:24 +0000
ROA not before: Tue 02 Jul 2024 12:29:20 +0000
ROA not after: Wed 31 Dec 2025 12:29:20 +0000
asID: 328857
IP address blocks: 102.220.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Validity
Not Before: Jul 2 12:29:20 2024 GMT
Not After : Dec 31 12:29:20 2025 GMT
Subject: CN=6683f2a4-c4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:e6:5f:5d:47:b9:af:98:26:b0:02:d8:9f:
4b:ac:f5:39:01:dd:3e:0a:bb:2d:4e:4a:08:0b:00:
18:da:da:fc:cc:c7:68:8a:5b:fc:97:a9:b5:2e:96:
18:fb:8b:01:ab:b5:eb:ac:39:5a:17:2c:88:8d:c1:
8a:75:a4:23:bc:b4:a3:df:5c:f4:aa:80:41:8b:08:
d4:bb:91:51:96:2b:ac:89:82:fb:a5:ea:a3:7c:f2:
54:b7:8f:38:a1:26:36:19:8a:e0:3e:0f:a7:1f:77:
8c:44:bb:02:72:c0:02:e0:5e:09:e4:2f:2d:2c:3d:
ee:0a:5d:01:a9:00:f1:2a:54:2c:bc:aa:2d:e3:de:
a2:cc:8b:bd:fd:f3:56:9e:13:6f:78:b5:80:e3:09:
ce:70:bc:25:dc:12:eb:ab:1f:2a:0f:8d:84:85:2e:
3d:29:9d:0a:d1:77:80:26:4f:a1:cc:aa:48:0e:2b:
ec:a3:71:ac:70:98:c9:05:b8:a9:04:47:5d:22:f9:
b4:7d:23:d3:b3:cc:52:5e:ef:61:51:95:9d:49:43:
d2:d0:48:9c:69:77:0d:a9:ab:00:e1:57:20:fd:a5:
08:52:7a:14:46:17:8e:ea:21:1f:51:ed:30:ba:3d:
53:31:6e:46:59:ab:ac:4f:6f:b9:00:23:c2:1e:95:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EF:8E:AE:58:57:B2:50:CF:03:6B:1E:EC:45:11:30:33:3A:B4:4A
X509v3 Authority Key Identifier:
keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/B6AEA76A386E11EFB22C58AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:df:18:8a:d7:81:b1:77:d3:d0:20:e5:6b:bf:0c:da:e4:be:
2d:e0:1f:81:75:ac:24:d7:41:28:2d:1d:fe:e0:56:97:ac:1c:
c5:79:05:e4:59:f9:92:9e:6b:9a:7f:39:d9:d4:63:64:50:24:
0c:e6:71:e4:a8:96:e7:d2:35:1f:59:04:50:29:80:27:35:4e:
91:69:02:b0:92:75:d3:f6:d7:29:de:30:46:04:b1:45:42:84:
ba:c6:d2:64:75:6e:95:f3:a3:0d:d2:06:98:8b:3f:43:5d:a5:
21:d6:02:17:c7:95:00:ef:8f:37:28:b1:12:88:b6:ce:d7:5c:
70:cd:3d:d8:eb:65:60:ca:a5:a3:30:c5:ee:bb:bb:2d:bd:33:
16:a5:57:51:97:89:3c:29:2e:b1:88:59:30:80:14:a4:6a:bc:
7e:04:0a:ef:d3:e9:d3:cf:17:39:04:98:e6:fd:e3:1c:59:85:
b5:4a:84:92:73:56:29:ff:e3:f8:df:4e:5b:3b:39:4a:2d:65:
f5:e9:3c:e3:d3:42:4c:2c:95:53:03:cb:d7:e9:18:67:b6:bf:
aa:df:93:86:fa:a5:81:8e:7c:2e:52:f7:1f:a9:9e:a6:90:01:
60:c9:c2:e1:7a:08:8d:6a:dd:53:9c:c8:03:b8:03:03:c7:e7:
23:b2:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org