Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/902EBEC6960311EEBE7A780ED25BE465.roa
File: 902EBEC6960311EEBE7A780ED25BE465.roa (raw, json)
Hash identifier: RI1NH59VXYSwoVvD3QSrzuux5c6I6SJhdTOnik9vzQs=
Subject key identifier: A3:EA:12:33:4A:E6:83:FE:AB:98:F4:10:27:BD:FE:2C:09:D8:25:21
Certificate issuer: /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial: 2F
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/902EBEC6960311EEBE7A780ED25BE465.roa
Signing time: Fri 08 Dec 2023 19:54:14 +0000
ROA not before: Fri 08 Dec 2023 19:54:11 +0000
ROA not after: Mon 08 Dec 2025 19:54:11 +0000
asID: 327907
IP address blocks: 102.135.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Validity
Not Before: Dec 8 19:54:11 2023 GMT
Not After : Dec 8 19:54:11 2025 GMT
Subject: CN=65737466-8395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:ac:93:61:e5:6d:d1:16:1a:a0:9a:06:ae:
e5:8a:8f:4a:79:aa:e4:dd:6c:f4:09:5f:b4:f6:0e:
89:77:2e:11:a1:6b:bb:43:32:63:7a:11:83:64:87:
14:93:e2:8d:9d:dd:78:9d:21:7e:52:f4:0f:95:dc:
0f:d1:94:68:70:2c:85:fc:38:67:c7:96:c6:75:da:
43:c2:27:cf:d5:17:5f:dd:02:d7:c2:4a:35:84:cd:
6e:ab:be:23:e1:6c:fe:5b:2c:90:46:ce:1f:aa:20:
b6:af:06:f1:f7:20:53:9d:a7:89:9b:dd:38:c4:14:
67:15:87:09:de:d2:ae:5d:f3:b7:42:c2:66:7b:75:
4c:62:af:d8:56:47:a6:dd:74:8e:18:e1:13:1d:9e:
29:c7:d2:da:ce:86:6d:80:ff:14:93:6f:09:c6:e4:
fd:19:33:0d:56:9c:18:3e:10:f4:3f:1e:dd:21:7a:
05:3f:45:77:b4:e3:c5:ae:5a:de:26:8d:b6:48:e3:
27:1b:f0:0e:44:d7:c2:cd:4d:f8:e6:58:5f:46:98:
6e:09:6d:f0:97:a2:58:08:1e:ee:1c:a9:62:15:cc:
e2:f6:f2:4b:bc:f8:0f:82:da:48:82:12:12:01:c4:
78:5b:d2:8b:0e:47:e0:d3:00:a1:9c:74:93:0f:7d:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:12:33:4A:E6:83:FE:AB:98:F4:10:27:BD:FE:2C:09:D8:25:21
X509v3 Authority Key Identifier:
keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/902EBEC6960311EEBE7A780ED25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:b6:af:92:a5:69:b8:4d:be:b5:5d:c5:4c:74:aa:c4:ff:2e:
ef:df:1a:34:64:23:6f:47:bb:50:01:ac:36:d0:b1:c8:bc:9e:
0a:98:fc:b4:e8:11:db:9f:79:89:c9:c5:69:d4:58:58:b5:7b:
46:ac:9a:b0:71:f3:85:f9:99:2d:12:6f:1c:81:86:96:f7:ac:
38:16:d7:49:97:ac:8a:83:f0:7d:f8:f2:c0:e5:51:ec:f3:10:
98:7f:c7:23:39:f0:cb:2b:c5:bb:ce:82:31:e9:65:28:a6:d4:
a7:02:3b:3a:90:54:57:f6:a3:59:d6:fc:d1:46:ef:34:f9:5b:
5b:d6:55:1b:5e:1a:42:7c:21:31:b0:80:2b:6e:03:6a:5e:11:
3c:95:ab:28:34:25:54:c6:6e:f7:9b:ae:ae:b9:9b:dd:7b:77:
77:40:b4:a8:21:76:7c:db:dd:20:47:3c:15:e2:ae:02:59:c6:
d8:79:6b:c4:85:38:1b:59:c7:32:34:c6:1e:55:f1:79:0f:7e:
5e:f0:ba:73:96:8a:da:e5:0e:d5:95:c4:52:04:cd:c7:2b:d2:
36:2e:2e:6d:ce:ea:39:b1:8d:95:80:1d:90:5a:30:84:68:63:
b3:00:9c:a8:c5:49:f2:9b:32:45:2c:80:ad:4b:a1:23:4b:83:
eb:d5:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org