Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/509B5B80154B11EFAAF66569017001B1.roa
File: 509B5B80154B11EFAAF66569017001B1.roa (raw, json)
Hash identifier: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=
Subject key identifier: D4:2E:05:A3:16:B1:A6:7F:05:8B:A0:FB:56:3D:4E:1F:D1:96:8D:74
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0467
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/509B5B80154B11EFAAF66569017001B1.roa
Signing time: Sat 18 May 2024 19:17:49 +0000
ROA not before: Sat 18 May 2024 19:17:44 +0000
ROA not after: Sat 18 May 2030 19:17:44 +0000
asID: 151872
IP address blocks: 102.217.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127 (0x467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 18 19:17:44 2024 GMT
Not After : May 18 19:17:44 2030 GMT
Subject: CN=6648fedd-a605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:72:94:13:21:c1:d1:72:81:ac:88:6b:91:
3a:da:c3:b9:63:76:a7:da:3e:f8:60:32:97:1b:47:
04:78:60:84:ba:a9:cb:20:77:62:b2:6c:af:93:7a:
a2:ba:71:ad:d7:37:1d:31:e6:df:1f:33:ca:5d:0e:
06:a2:90:c5:f7:16:13:b8:a8:ee:61:f3:d4:e6:54:
fe:92:e6:f1:74:39:84:e0:78:c0:c0:49:11:92:a0:
bc:d8:a3:f6:de:5b:64:1a:19:ff:50:a3:05:74:4f:
65:2c:c0:bd:0a:21:c3:7d:39:ff:09:2d:93:5e:9e:
3f:eb:08:b6:41:69:43:5a:a9:47:c9:62:92:ba:de:
45:a2:4e:af:30:37:36:39:59:9b:c2:77:fe:2d:68:
b7:2d:d1:2a:02:21:87:11:df:41:18:6f:04:f8:14:
a8:d1:03:e9:14:8e:df:c4:8c:ca:c1:74:00:7e:9c:
04:b6:6a:3a:f5:c8:64:dc:d2:18:f5:59:2f:f4:2c:
5b:0b:b4:4d:35:d4:bf:91:b6:bb:c5:ee:7f:8c:0b:
02:12:4e:f9:fb:e6:83:c0:99:fb:da:f2:e0:58:e1:
22:4f:e5:9e:f2:dd:34:fa:76:34:42:e9:06:b7:84:
c2:31:7b:bb:01:db:d3:8f:a6:dd:b3:dc:21:8f:63:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2E:05:A3:16:B1:A6:7F:05:8B:A0:FB:56:3D:4E:1F:D1:96:8D:74
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/509B5B80154B11EFAAF66569017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.105.0/24
Signature Algorithm: sha256WithRSAEncryption
68:11:b0:aa:4f:69:3c:a0:45:5c:0e:cf:4c:54:11:89:71:7f:
77:79:f3:8b:6c:ee:3d:70:ca:4e:92:b7:33:76:bc:87:b6:be:
b9:32:68:4c:cb:52:e6:27:75:bf:26:24:aa:ed:5f:de:38:55:
31:1d:14:4c:f5:e7:a2:07:d2:c4:28:74:10:25:f7:79:4c:ae:
2b:48:df:e7:dd:cc:d8:84:53:4e:6d:bf:e5:49:2c:71:04:34:
15:cf:eb:0d:27:fc:bf:6a:c5:31:5b:5f:89:61:20:3f:ea:3a:
0e:b5:cf:70:1d:e8:b0:2a:a9:2b:9e:3f:33:09:34:55:f9:7d:
b2:bd:5e:20:af:0f:98:d1:3e:97:1c:15:bf:b2:10:84:98:b8:
92:43:ac:ea:18:1e:c7:da:58:74:5d:16:38:b2:c7:93:c3:76:
85:ba:20:50:4a:ae:7c:13:32:44:70:87:79:9a:d7:08:da:6d:
e1:8c:e7:24:ac:18:30:ef:59:33:fa:bb:bd:56:5c:2e:0e:4b:
9b:9f:bb:7f:14:11:fa:3f:fb:c6:2c:20:79:74:1a:05:dd:21:
c5:df:3e:1f:e1:ac:81:75:62:49:68:40:54:21:14:f5:5a:9e:
64:ce:5c:63:46:de:67:7a:ef:75:47:b6:2a:52:6b:92:ad:a4:
39:6a:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org