Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/372AC08C8CB511EF9888555B762E951A.roa
File: 372AC08C8CB511EF9888555B762E951A.roa (raw, json)
Hash identifier: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=
Subject key identifier: E8:64:E7:D1:D9:CD:CC:3A:B7:28:E7:CE:66:6D:96:34:70:CE:F1:38
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0543
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/372AC08C8CB511EF9888555B762E951A.roa
Signing time: Thu 17 Oct 2024 18:25:41 +0000
ROA not before: Thu 17 Oct 2024 18:25:37 +0000
ROA not after: Thu 17 Oct 2030 18:25:37 +0000
asID: 399861
IP address blocks: 102.217.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1347 (0x543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Oct 17 18:25:37 2024 GMT
Not After : Oct 17 18:25:37 2030 GMT
Subject: CN=671156a5-282e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:55:18:08:f3:e7:8b:72:cf:cf:20:67:3c:
1d:e4:c8:2e:69:e4:a4:66:d0:fb:ca:d5:b8:8b:96:
56:32:f7:75:ad:27:20:d9:77:dd:88:54:95:c1:1b:
02:12:20:f1:e3:83:a4:eb:a8:8a:6f:c2:a4:7a:96:
a2:af:08:28:8c:14:d8:32:95:91:ed:bd:31:1a:a6:
e9:ec:8a:e5:7f:9d:01:ca:b6:47:5d:ca:2d:ca:f0:
6c:c7:dd:6c:6a:c3:96:33:89:c9:40:95:cf:49:af:
7a:4b:4f:95:73:8d:33:94:e2:85:c9:f1:09:3a:a3:
30:2b:c1:00:e8:a5:e0:e9:1d:a4:7d:c2:78:5a:69:
00:46:3e:7a:1a:0f:aa:25:a6:44:67:d8:92:e0:50:
da:ee:4b:3f:95:5d:6c:e5:ec:00:02:3b:84:3e:b2:
6e:f4:c6:9f:e5:76:ed:b7:ef:e2:50:be:15:9e:2f:
55:6e:9b:04:d0:5f:a7:30:f4:a7:8d:bb:ef:7c:79:
9c:e7:2d:09:a9:f5:ae:8d:96:6b:ee:7c:05:73:bb:
6d:b1:2b:f9:6f:32:b5:58:13:ee:50:e3:af:11:6c:
8e:9f:8e:b0:b6:1a:60:56:5e:c9:19:20:19:97:2a:
a8:4a:3a:81:da:e8:58:7b:dd:37:ed:64:7c:f9:a9:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:E7:D1:D9:CD:CC:3A:B7:28:E7:CE:66:6D:96:34:70:CE:F1:38
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/372AC08C8CB511EF9888555B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b9:26:b5:39:e2:f7:55:90:8c:a0:ed:24:bb:75:53:30:37:
12:c7:90:9f:3d:95:9d:2f:4d:40:8e:a3:17:12:2c:5b:3a:de:
b3:0c:2c:5d:13:b4:25:1b:60:84:6f:cd:dc:93:86:46:92:85:
36:f4:db:35:8c:39:52:48:e9:2e:c3:80:79:e5:d2:56:2e:2e:
57:d3:ff:29:62:07:13:db:5e:00:dc:dc:a9:4a:66:79:b1:10:
4d:91:09:75:88:a7:56:9a:69:7e:df:3c:5f:2c:78:7e:c6:eb:
2c:21:6d:33:cf:0d:a6:a9:f0:01:71:6c:cd:18:74:03:6f:6b:
4b:50:06:21:7a:5d:4b:91:d9:d9:ac:f9:3a:ee:41:83:c7:fb:
21:78:2e:53:d9:69:32:93:fa:af:56:ea:29:fb:fc:9d:b3:5f:
3f:c2:c4:a0:8c:58:0c:1c:05:89:d9:0a:93:55:43:77:c5:41:
19:21:87:65:53:d6:27:39:4b:78:81:cd:c2:3e:be:2e:e9:aa:
e2:8b:9e:5d:d5:ca:8d:7f:a1:85:5c:e9:95:48:d0:c0:22:ce:
7d:3b:7d:ec:26:31:cf:37:c6:6a:c4:73:c5:b9:45:0b:cd:a8:
c7:de:01:87:a4:4e:10:19:bf:06:1d:dd:49:7b:57:4d:0c:45:
0e:d1:10:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:14 2024 by rpki-client on console-ams.rpki-client.org