Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1C584DE2EE5A11ED97CD194B4AD9E6FC.roa
File: 1C584DE2EE5A11ED97CD194B4AD9E6FC.roa (raw, json)
Hash identifier: DfnTU1XnokOPCBX3HY3/RtF1mdn7NiQIN6C09FTFkY0=
Subject key identifier: F5:27:57:08:45:2F:1E:D8:AD:4B:11:03:B9:DF:11:95:D9:5C:56:1F
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 02C9
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1C584DE2EE5A11ED97CD194B4AD9E6FC.roa
Signing time: Tue 09 May 2023 11:10:31 +0000
ROA not before: Tue 09 May 2023 11:10:26 +0000
ROA not after: Thu 09 May 2030 11:10:26 +0000
asID: 328992
IP address blocks: 102.215.224.0/24 maxlen: 24
102.215.225.0/24 maxlen: 24
102.215.226.0/24 maxlen: 24
102.215.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 9 11:10:26 2023 GMT
Not After : May 9 11:10:26 2030 GMT
Subject: CN=645a2a27-851c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:1f:46:bd:4a:8b:65:93:46:44:a3:e2:1f:
39:b5:02:ac:dd:04:59:36:a7:95:a7:8d:26:88:39:
9a:a4:1e:ef:2b:95:e4:cd:39:70:69:78:b2:93:d1:
96:c5:f9:35:74:70:5b:9f:03:1c:c8:47:07:e3:69:
0b:97:fd:30:d3:d5:41:7f:85:50:93:a1:ae:6d:21:
35:e5:c3:89:89:df:1c:d4:f2:96:fd:fc:cd:f8:5b:
24:f3:48:ea:23:44:23:a0:71:a3:5a:fb:21:17:84:
08:e4:07:00:df:13:ff:6f:cd:62:73:f8:18:7c:7b:
97:09:72:b1:48:9e:92:8e:b2:d6:48:fd:ca:3b:05:
08:97:e1:f8:f9:c7:06:8f:e2:c8:19:10:fa:7c:fa:
a3:44:e4:e2:c6:32:26:c2:77:af:f6:a0:9a:91:16:
ab:48:ea:35:58:4b:38:6f:2e:f9:1b:f1:ea:33:fc:
31:e2:3c:55:5a:38:16:bf:65:74:ba:f3:cd:9c:91:
44:0c:5c:d7:e7:11:39:4a:e2:3e:1a:ad:41:39:ea:
2d:ce:24:44:d9:7e:9d:0e:05:6b:8d:fa:ae:57:dd:
55:a6:be:a6:f7:95:6d:8f:6a:74:ae:d1:17:d5:b2:
cf:d1:0d:a2:d5:2c:e4:58:2f:d1:3f:20:1d:74:9b:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:27:57:08:45:2F:1E:D8:AD:4B:11:03:B9:DF:11:95:D9:5C:56:1F
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1C584DE2EE5A11ED97CD194B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
39:1b:87:50:18:16:ac:1e:72:ca:17:ad:b3:41:ed:cd:f9:db:
41:de:34:36:f3:c9:5a:89:cc:5f:f0:8e:3e:5b:aa:3f:11:29:
12:2f:a5:a2:8a:fc:24:66:81:bb:fb:59:f1:f0:41:37:6a:11:
dc:3c:92:28:01:72:dd:bf:f4:70:fe:ca:a6:91:72:d8:82:d3:
06:06:08:1c:9d:7b:00:f1:ee:93:5e:50:40:37:51:2c:89:5b:
c9:9f:bd:fe:35:2f:7e:d2:c5:4f:9c:01:07:3a:0f:b6:50:e4:
4c:96:f4:5d:7d:af:fa:85:d7:43:6c:9b:bf:19:7e:ae:c8:7f:
11:49:0c:40:18:1f:61:cd:cc:b8:59:46:de:90:69:10:8d:06:
5d:23:44:0e:54:9f:52:7a:74:f9:d8:8b:2a:23:53:35:7e:dc:
f9:53:e4:e0:db:b5:da:24:04:5f:b7:e5:8f:8f:17:bc:d3:cf:
a6:80:10:5f:ff:a2:bf:7c:fc:08:18:db:17:fa:78:5c:07:e7:
20:8c:4e:b7:3d:f2:9f:e9:a2:47:a5:e7:5e:48:de:05:dd:48:
c2:3a:91:9e:d3:47:9d:d4:22:dd:b1:bf:ac:58:43:b3:6c:92:
10:c1:f4:8b:a0:5a:17:f9:03:45:5e:94:71:ae:94:e9:c5:e3:
d3:d0:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:32:42 2024 by rpki-client on console-fra.rpki-client.org