Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2483AF905D0211EE83B992584AD9E6FC.roa
File: 2483AF905D0211EE83B992584AD9E6FC.roa (raw, json)
Hash identifier: Aw4/RA9K4Ykb7IK+5WQ/phdBFNqQbpFmRoAfqfKXPLQ=
Subject key identifier: B6:39:5A:F1:5C:81:DF:BC:B2:17:83:50:C7:1E:1F:D4:F0:4B:8A:E5
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0335
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2483AF905D0211EE83B992584AD9E6FC.roa
Signing time: Wed 27 Sep 2023 06:50:28 +0000
ROA not before: Wed 27 Sep 2023 06:50:25 +0000
ROA not after: Tue 30 Sep 2025 06:50:25 +0000
asID: 328327
IP address blocks: 102.140.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 27 06:50:25 2023 GMT
Not After : Sep 30 06:50:25 2025 GMT
Subject: CN=6513d0b4-494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:76:77:28:a5:c7:ee:76:7e:ed:27:e2:26:
f8:b6:cb:5b:ea:ec:99:b0:df:e5:e9:7b:5d:d0:2c:
ea:a7:07:73:0e:85:47:43:a5:b3:0d:b2:56:6a:b5:
67:53:69:1f:78:79:c9:33:f4:81:81:d3:3a:42:07:
ab:0f:41:b8:d2:5b:42:98:3e:f0:30:7d:e6:ca:17:
c5:fb:36:d3:6c:f9:d2:1b:13:34:0c:88:9f:8b:71:
39:5c:1e:53:2c:3f:f8:0e:0c:c1:b0:1c:35:9d:9f:
9c:eb:e3:73:42:fb:a4:0f:11:fe:1f:45:c0:4c:25:
61:ad:57:61:08:26:7f:1f:c8:bf:72:6c:92:1f:71:
f5:af:8e:55:a2:7d:49:b2:47:64:dd:55:93:69:69:
f5:3c:b6:e0:8b:a7:58:0e:c2:b4:21:16:43:6c:d8:
3f:9a:14:ec:9f:75:7b:d3:3f:57:ab:bc:27:9d:82:
85:d7:36:f7:08:ce:2c:fa:c9:9e:76:6d:3e:96:bd:
c2:49:af:79:c7:92:04:ce:f7:36:14:5e:c3:65:20:
b7:1d:a8:b7:38:c4:d7:2b:4d:fc:42:45:72:37:48:
be:76:9e:f0:c5:a1:44:08:52:3c:e4:41:43:4f:3f:
58:7b:2e:a1:7a:c1:d8:f2:ee:70:2a:c2:bc:40:9d:
24:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:5A:F1:5C:81:DF:BC:B2:17:83:50:C7:1E:1F:D4:F0:4B:8A:E5
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2483AF905D0211EE83B992584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.76.0/24
Signature Algorithm: sha256WithRSAEncryption
58:24:fb:84:aa:04:f9:5a:2e:f6:ed:2d:ce:5e:fa:0e:20:93:
4d:25:42:3e:98:de:e5:03:70:54:e1:07:64:0b:f6:89:4a:63:
33:94:51:e8:64:8c:76:d4:f0:b4:4e:4b:23:06:32:b0:4c:e6:
3c:1a:2e:03:28:a5:6f:4f:dc:65:4d:71:87:d8:e1:ac:41:7e:
93:ac:7d:93:ba:e3:24:6f:4b:ce:24:3e:36:b9:bb:0c:9b:73:
b6:77:86:f4:5c:50:be:d3:ce:4e:7f:d6:d6:27:4f:a4:18:18:
3b:2e:ef:b3:d7:4f:c4:ac:60:85:65:70:25:34:a7:17:5f:ca:
a5:b6:87:b7:ea:10:10:5c:4e:93:9e:3b:6f:56:0d:be:7c:58:
5b:84:2c:98:eb:0e:0a:e0:49:50:b6:22:04:2a:54:57:34:5d:
4c:37:3a:b3:26:97:3a:92:bb:3f:cf:9a:89:15:b4:04:b4:1b:
79:d9:0c:ff:ec:72:29:c6:d7:14:38:46:c7:f6:77:5a:cd:ef:
9c:1b:96:ca:8c:ef:70:88:ca:53:c9:ee:ec:17:4f:02:92:96:
4f:03:5f:7f:23:a2:ad:63:9f:0b:1d:1e:24:82:77:6a:0a:38:
bc:49:11:de:53:39:b3:ce:5a:f0:db:c7:14:0b:b0:b5:2c:5d:
85:ae:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:28 2024 by rpki-client on console-ams.rpki-client.org