Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C1DD39CACFBF11EEA8FB4574775412E6.roa
File: C1DD39CACFBF11EEA8FB4574775412E6.roa (raw, json)
Hash identifier: Q5pUSksntCvIgKgWSWWYT5WZcxdon8uSCDfTyZBPILk=
Subject key identifier: B8:FD:AB:42:6B:77:9D:F2:2D:61:DA:F7:BA:A5:E5:9E:AC:37:D0:AA
Certificate issuer: /CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Certificate serial: 01B7
Authority key identifier: 78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C1DD39CACFBF11EEA8FB4574775412E6.roa
Signing time: Tue 20 Feb 2024 07:14:59 +0000
ROA not before: Tue 20 Feb 2024 07:14:56 +0000
ROA not after: Mon 19 Jan 2026 07:14:56 +0000
asID: 328341
IP address blocks: 102.164.0.0/19 maxlen: 24
2c0f:ec70::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Validity
Not Before: Feb 20 07:14:56 2024 GMT
Not After : Jan 19 07:14:56 2026 GMT
Subject: CN=65d45173-bf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:39:e5:7f:11:1b:af:19:ed:2f:8c:c9:f3:
0d:71:41:16:a6:aa:18:fa:f1:d5:35:39:7c:ab:b5:
ea:a0:dd:6f:5e:86:77:e3:d4:fb:27:99:69:66:cf:
cb:d7:4b:77:d1:4e:35:0d:78:d3:66:d6:32:42:fa:
7c:21:81:b8:60:9a:9a:de:ca:3d:fe:1b:0a:eb:a2:
b3:9a:0d:25:29:88:9d:34:04:73:b0:82:bd:98:9f:
5f:bf:a8:28:1e:eb:86:67:29:c6:0d:74:80:ca:2a:
87:d0:95:80:26:49:f8:1d:09:28:6e:94:a6:ed:57:
e5:1c:f6:98:60:19:bd:5b:52:23:27:29:75:c6:15:
ac:c6:76:9c:2b:15:2c:65:a2:1e:0c:6d:94:43:4a:
43:90:65:4b:b1:9b:68:63:65:75:84:bc:90:cc:08:
db:6d:07:a3:9b:f1:a7:4b:af:1c:bb:cd:74:4e:92:
b0:55:f8:04:8f:da:08:9f:f9:d6:ca:39:bf:c7:b8:
ad:4b:19:c6:88:36:63:04:90:27:88:4e:08:fa:ac:
e1:19:1d:9a:72:34:67:90:40:35:54:90:89:0a:43:
f2:05:57:77:a4:c7:12:d6:e5:43:53:f3:12:d1:6c:
54:1c:33:83:32:26:de:fa:61:4a:79:9e:23:50:af:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:AB:42:6B:77:9D:F2:2D:61:DA:F7:BA:A5:E5:9E:AC:37:D0:AA
X509v3 Authority Key Identifier:
keyid:78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C1DD39CACFBF11EEA8FB4574775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.0.0/19
IPv6:
2c0f:ec70::/32
Signature Algorithm: sha256WithRSAEncryption
5e:9f:fb:9d:72:28:59:6c:9d:c4:8b:2c:4f:3e:29:c6:77:b0:
e3:d7:8e:0f:63:cf:36:bd:9a:8d:12:d9:e8:b6:55:8a:b7:3e:
f7:f1:8e:57:45:ea:8b:70:bc:82:a3:48:c8:ac:79:84:1a:d5:
53:2f:9c:54:97:7c:61:e3:8e:e9:11:6b:b9:14:51:18:4c:82:
ef:cb:1e:0c:93:2a:b6:5d:78:87:9b:7c:5e:2b:7d:86:e9:84:
ae:40:b7:09:bf:75:67:a3:01:64:6d:28:fa:29:06:26:e5:75:
12:4c:ea:96:02:94:38:02:bd:68:ee:96:e3:9d:be:67:22:8c:
f9:9e:69:1b:6b:3b:43:51:61:a7:df:40:5f:0f:67:63:39:a3:
2a:78:b2:a7:d6:6e:0a:a0:86:ad:58:43:ce:a1:8b:08:7f:f0:
c5:71:b8:11:d2:63:18:a2:d7:6f:82:7b:ee:d1:5b:52:3c:f0:
ac:5d:ac:99:10:72:ba:64:90:79:5d:1c:dc:31:29:10:0f:51:
52:ec:13:fd:15:5b:11:33:48:cf:e1:d9:60:4a:c0:f2:82:dd:
8f:28:12:63:97:72:2d:04:f2:77:36:1a:e9:88:13:ed:63:f6:
7a:73:c9:0d:df:b6:9e:58:5d:a3:33:3f:05:ec:92:d7:08:49:
d1:c6:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:42 2024 by rpki-client on console-fra.rpki-client.org