Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/1F1EBBDC2ABA11EEAB2F107B4AD9E6FC.roa
File: 1F1EBBDC2ABA11EEAB2F107B4AD9E6FC.roa (raw, json)
Hash identifier: TKXrZbkJmrjaai3QalwQx/2/kEy/M/ZPnjH0SS3lcwQ=
Subject key identifier: D6:29:80:38:27:CE:44:72:45:7B:88:D3:00:86:D6:6E:3D:90:FD:CD
Certificate issuer: /CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Certificate serial: 02B7
Authority key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/1F1EBBDC2ABA11EEAB2F107B4AD9E6FC.roa
Signing time: Tue 25 Jul 2023 07:08:57 +0000
ROA not before: Tue 25 Jul 2023 07:08:53 +0000
ROA not after: Mon 25 Jul 2033 07:08:53 +0000
asID: 60171
IP address blocks: 102.211.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Validity
Not Before: Jul 25 07:08:53 2023 GMT
Not After : Jul 25 07:08:53 2033 GMT
Subject: CN=64bf7509-657a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:02:52:ea:0e:a4:b6:95:ea:c8:05:ed:a4:
4a:ae:24:de:ea:65:2a:00:ae:eb:fa:e8:b2:c8:df:
3b:83:89:cc:e6:ad:b1:51:ff:e4:c0:89:69:ec:2f:
44:cc:6c:4a:e9:5b:1d:52:f2:e5:83:e5:af:63:ba:
3e:a9:59:7c:b1:d6:11:f7:e8:50:9f:ac:e5:f1:05:
cc:07:21:fe:43:c3:72:26:3d:98:ba:50:7a:dc:12:
90:a8:e6:3c:03:9b:a8:76:ca:e5:ae:eb:8c:5e:3a:
38:21:75:55:34:6a:7f:64:83:7f:ab:4a:e6:70:8a:
71:e6:0b:bc:2d:73:3b:ff:21:11:9c:de:4b:40:94:
40:93:db:75:96:bf:4e:96:a8:b5:44:5b:fc:1a:b1:
10:5a:62:e3:e3:79:f8:f0:c4:fe:6f:20:12:1b:7d:
68:3b:28:d1:20:44:9e:62:15:3f:be:a4:f6:a9:bb:
bd:e1:b8:5a:74:25:64:8b:e0:46:16:da:c3:24:07:
d7:03:12:6b:1a:81:e5:69:e9:2f:42:86:ea:a0:93:
cd:96:78:b5:d3:43:12:6a:5b:10:9f:e5:f5:7c:dc:
4a:5e:4b:a1:be:52:ba:91:6e:e6:83:81:4f:82:87:
33:56:9e:6a:b0:44:16:1b:fd:cc:62:43:a5:f8:5d:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:80:38:27:CE:44:72:45:7B:88:D3:00:86:D6:6E:3D:90:FD:CD
X509v3 Authority Key Identifier:
keyid:14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/1F1EBBDC2ABA11EEAB2F107B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.176.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:5a:c5:5b:f8:45:f2:44:87:7d:00:3b:00:ca:19:19:58:97:
d9:c5:2a:d9:3a:4b:52:78:ba:21:3b:2e:5a:bd:17:3e:20:ca:
2b:f1:40:d6:88:c5:df:2b:c3:b0:5a:c7:f9:16:5b:45:80:e1:
ce:9c:12:92:d0:ce:4a:fc:97:8b:22:3f:f3:7b:ee:df:f0:ec:
a7:5f:4d:7f:d5:0a:e7:67:c3:8b:8e:ef:f8:a0:b0:97:d9:94:
21:94:d6:13:44:05:35:74:b2:dc:27:f6:11:27:90:d6:63:12:
fb:0a:b7:ec:79:ee:10:da:ee:4f:d5:42:a5:b4:a9:cb:b6:4e:
64:9e:02:66:7c:54:8c:94:a6:43:ac:a1:f4:20:df:ba:4c:cb:
48:b8:04:91:cd:17:5f:a6:cf:ab:f1:97:ca:c9:18:0e:04:db:
72:3b:8d:37:08:3f:c4:dc:b1:8e:49:73:23:d7:c5:82:2d:eb:
3d:7a:4d:c6:ee:70:04:70:79:79:3c:33:2a:65:1e:2d:91:46:
48:5f:8f:a5:8f:84:51:02:79:2d:d3:83:bb:12:43:fe:52:93:
0a:c2:06:9e:76:c5:48:94:96:cf:64:56:3c:e9:a0:68:82:87:
7d:0c:fc:da:5c:50:a4:2e:7f:78:70:f4:f9:ea:98:da:b7:fc:
35:b5:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:24 2024 by rpki-client on console-ams.rpki-client.org