Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/5CB6A91E5D0011EE80E803534AD9E6FC.roa
File: 5CB6A91E5D0011EE80E803534AD9E6FC.roa (raw, json)
Hash identifier: YPxRfQMFs/bFGF0nwNini75XzzE5w/R2cSJRMlDRuBU=
Subject key identifier: 60:D6:3F:B0:64:D6:DD:CF:CD:AD:04:75:39:CC:BF:3D:90:AA:03:C4
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 031E
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/5CB6A91E5D0011EE80E803534AD9E6FC.roa
Signing time: Wed 27 Sep 2023 06:37:43 +0000
ROA not before: Wed 27 Sep 2023 06:37:40 +0000
ROA not after: Tue 30 Sep 2025 06:37:40 +0000
asID: 328327
IP address blocks: 102.140.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 798 (0x31e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 27 06:37:40 2023 GMT
Not After : Sep 30 06:37:40 2025 GMT
Subject: CN=6513cdb7-7cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:f8:1e:97:0e:62:f8:16:51:3a:5a:94:94:
27:a9:15:ea:b4:ba:1a:74:0a:9d:d4:68:55:1d:64:
04:af:c9:ac:77:78:fc:c5:6d:6e:b0:a4:07:fe:13:
1d:a7:c2:a4:b9:ac:1c:25:1b:c2:df:ea:54:ce:61:
f3:7c:05:d6:b2:57:3a:21:5b:89:fc:69:49:77:3e:
cd:30:88:54:b8:b4:76:7b:10:d9:b5:ad:27:a3:36:
5b:cc:70:c8:6e:c2:b5:69:4c:7a:3a:a5:59:4c:22:
2d:4b:93:1c:97:93:d7:85:b2:d2:94:f1:3b:a0:cb:
fc:aa:fc:19:1f:b3:0c:ff:3d:33:59:ab:60:c9:f9:
b3:ae:55:a9:41:b0:b0:c9:4d:94:fa:84:bb:ba:91:
ef:e0:2f:f2:ff:e1:bf:9d:7f:68:de:d3:12:d9:e3:
d6:02:60:e3:30:7f:ba:be:df:7d:f0:19:e7:84:90:
78:2f:4f:cf:1a:7a:f7:79:95:25:bb:21:bd:3b:54:
6d:9a:03:cb:87:b6:61:a1:cf:5b:0a:35:eb:b5:5b:
b3:95:ca:ca:20:72:f7:b9:34:58:12:b9:aa:b5:e2:
cc:64:8f:67:0b:78:07:53:be:fc:75:b2:25:4c:56:
6f:38:05:c0:11:0c:82:e1:40:0d:5f:d2:62:8a:ac:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D6:3F:B0:64:D6:DD:CF:CD:AD:04:75:39:CC:BF:3D:90:AA:03:C4
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/5CB6A91E5D0011EE80E803534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.66.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b3:c1:e9:b0:1e:70:c1:34:b1:aa:4b:34:0e:8a:71:f2:76:
3e:12:92:5c:00:01:4b:19:85:81:85:87:22:a0:73:13:d4:69:
74:fc:5b:37:37:7b:07:1d:a9:d9:a6:42:f0:a1:79:70:bb:f1:
21:7d:ed:c1:52:aa:cd:a6:17:49:05:15:de:14:b0:e0:6a:22:
29:5d:d1:29:93:5a:19:5a:0a:a2:0c:a2:bc:eb:71:fb:99:91:
1d:24:0b:12:98:70:65:c6:87:66:bb:7f:40:e2:64:b3:b3:c6:
4c:75:fc:f5:0c:f2:b3:35:e5:10:40:1a:9e:26:1b:c9:d9:69:
5d:00:e1:49:41:b4:c1:a5:94:94:59:22:13:0e:4a:bf:76:b6:
32:69:24:6e:e7:2a:f1:d5:41:27:7c:50:33:57:64:c9:72:cb:
13:5b:5b:39:72:a1:7c:ef:0e:95:0f:55:ed:bb:7d:06:4a:98:
5e:a4:50:ad:86:c9:00:49:15:f9:4c:2a:85:1e:86:35:3b:5f:
05:3f:a8:96:29:06:e7:e3:90:a5:a6:77:81:02:3c:c6:4c:69:
d9:5d:80:70:77:8f:ed:64:6f:d2:40:4f:ee:27:5f:58:dc:91:
d2:a9:23:57:1d:bb:16:d4:5b:24:1a:bc:7b:7f:6a:55:c4:6d:
c6:7d:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:18 2024 by rpki-client on console-ams.rpki-client.org