Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/827F90845D0011EE980A5D534AD9E6FC.roa
File: 827F90845D0011EE980A5D534AD9E6FC.roa (raw, json)
Hash identifier: RO0CGeTcKaXK/FdlxdtP2CmOyKygLBbmktPBpckxE3M=
Subject key identifier: CD:51:77:90:37:C4:52:CB:19:55:16:AA:AB:F4:CE:E5:11:7C:67:61
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0320
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/827F90845D0011EE980A5D534AD9E6FC.roa
Signing time: Wed 27 Sep 2023 06:38:47 +0000
ROA not before: Wed 27 Sep 2023 06:38:43 +0000
ROA not after: Tue 30 Sep 2025 06:38:43 +0000
asID: 328327
IP address blocks: 102.140.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 11:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800 (0x320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 27 06:38:43 2023 GMT
Not After : Sep 30 06:38:43 2025 GMT
Subject: CN=6513cdf7-5f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:df:dc:48:f9:46:92:e2:4a:c9:05:b5:f5:
8a:0a:a3:b9:47:e8:f3:da:49:67:ff:5b:10:58:3d:
e7:ed:7b:f3:ec:c4:f1:50:9e:56:fe:8a:9c:ae:ec:
25:26:5f:ab:38:8b:dd:3d:d3:35:98:80:51:e1:47:
02:5b:58:65:94:2e:08:b1:3f:2e:4d:ee:f6:93:07:
e8:62:3a:9b:b2:96:aa:f2:37:2c:7e:aa:2e:4e:e2:
09:14:e5:c2:60:b8:f7:cd:41:2d:4f:74:cf:a0:03:
b5:ec:b8:49:fa:9b:e5:b2:ee:ca:ce:68:fc:ef:71:
1f:2d:d8:43:26:dc:a9:e8:ca:04:39:3c:2f:23:d7:
be:0a:f1:85:93:44:eb:4a:c6:ca:ba:d9:df:db:d6:
91:c4:e4:09:17:04:26:44:30:ed:3e:28:94:18:54:
7b:c0:97:b9:b9:18:12:63:7a:a4:15:6c:43:2c:09:
ae:0f:46:3c:96:6c:92:69:15:08:d8:d1:4a:05:f9:
ba:3e:fd:7e:8a:f2:7a:74:99:92:47:d7:40:a3:ce:
cf:fb:02:6f:99:f0:0e:aa:3e:ac:8d:68:c6:35:52:
97:11:18:6b:cd:56:ae:16:d5:fb:4c:dd:fc:14:cd:
cc:2b:b0:ce:05:fe:84:8b:20:aa:ad:39:39:26:4e:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:77:90:37:C4:52:CB:19:55:16:AA:AB:F4:CE:E5:11:7C:67:61
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/827F90845D0011EE980A5D534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8e:e6:8f:b2:6b:75:21:ae:20:7c:c7:5d:dd:01:23:91:41:
08:7f:b1:b6:a1:09:fa:01:dd:93:a8:78:30:88:37:46:df:de:
9a:0b:89:77:51:f9:1e:b9:37:a4:ea:4f:31:8a:90:3d:c7:9d:
59:fb:b2:78:e4:ba:6f:d3:98:7b:ef:11:92:aa:a5:ef:bf:bb:
ae:3f:bb:4b:47:4a:64:a9:71:45:71:f8:8c:9b:df:3e:0e:88:
d5:04:0a:21:c8:3a:78:94:d3:49:75:c8:21:73:f6:9a:d0:d6:
5a:8b:c4:39:20:99:18:50:62:0f:ab:12:b4:0b:d7:1e:9e:fc:
7e:50:1a:77:03:02:d1:cd:4f:47:ca:2e:39:a5:1e:a2:a8:06:
70:88:81:70:a5:62:7b:39:9f:c2:c1:a8:76:09:92:fe:92:60:
99:d5:b4:d7:84:9e:38:fd:a8:89:29:e5:fb:19:40:aa:d8:40:
e7:b4:5f:74:b4:fe:13:21:ae:cf:a3:78:59:c5:17:a0:89:99:
75:32:6c:08:99:ee:c9:5c:87:c6:f3:38:c5:51:5f:0f:d6:b6:
64:26:68:58:a3:43:18:ba:b8:1d:f7:8f:25:20:9f:d1:0c:60:
35:b4:64:cc:cf:cf:5a:48:40:f6:5a:d0:1c:d0:b3:a9:a3:d0:
e8:92:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:30 2024 by rpki-client on console-ams.rpki-client.org