Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/19898F16B14311EEB7E11552775412E6.roa
File: 19898F16B14311EEB7E11552775412E6.roa (raw, json)
Hash identifier: +/RwK+I1WkKS4IaagRSpEIFuSZ3Cbb2TY87PgIROgtw=
Subject key identifier: 73:88:47:B8:D0:5B:AE:45:BC:79:40:37:36:87:90:96:5D:8B:B6:3A
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 0200
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/19898F16B14311EEB7E11552775412E6.roa
Signing time: Fri 12 Jan 2024 12:07:04 +0000
ROA not before: Mon 15 Jan 2024 12:07:01 +0000
ROA not after: Mon 20 Jan 2025 12:07:01 +0000
asID: 328271
IP address blocks: 102.210.56.0/24 maxlen: 24
102.210.57.0/24 maxlen: 24
102.210.58.0/24 maxlen: 24
102.210.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Jan 15 12:07:01 2024 GMT
Not After : Jan 20 12:07:01 2025 GMT
Subject: CN=65a12b68-49ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:bb:0f:de:a6:dd:58:63:72:50:cb:53:71:
62:51:40:94:5f:d0:51:b4:0a:e5:4f:78:e8:03:5a:
8b:dc:bf:b2:db:76:82:3d:16:c2:4a:51:2f:a8:b6:
7f:af:57:a4:2a:e0:16:b5:89:c4:c9:d4:5f:aa:82:
10:8c:a9:9b:3c:5a:35:08:53:d0:f6:1c:90:5d:4d:
ef:28:96:1e:36:44:c2:a7:3b:b0:73:37:84:65:1a:
b8:1b:c2:c7:33:59:1c:3f:82:49:f1:6f:6d:3f:89:
47:99:3c:51:11:17:be:03:de:e1:fe:2a:03:fb:e8:
e5:83:0b:79:36:f3:fa:71:05:8a:74:28:48:64:61:
53:0d:3c:39:9a:6b:4f:08:14:3d:5d:3a:1b:54:52:
09:66:10:96:a3:c6:05:04:54:65:34:d8:e0:c3:07:
44:5d:d0:14:98:a9:7b:22:fc:a0:14:12:3c:ed:13:
5c:06:02:87:9d:3f:b4:c1:92:2c:ff:0c:e4:6d:20:
31:8a:ab:ae:bb:42:4a:66:e8:5f:d7:48:a9:4e:4c:
96:45:ad:f4:f1:2e:2c:26:18:96:0c:a8:63:c3:1f:
d8:e0:fc:62:ce:9c:69:d5:74:c7:1f:ee:d4:66:c7:
46:f1:3b:ea:65:cc:83:f1:84:ac:8e:54:dd:1c:24:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:47:B8:D0:5B:AE:45:BC:79:40:37:36:87:90:96:5D:8B:B6:3A
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/19898F16B14311EEB7E11552775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.56.0/22
Signature Algorithm: sha256WithRSAEncryption
16:ba:65:d7:e0:6c:78:24:32:1d:e9:57:0f:3c:40:be:a6:f3:
1f:ef:08:a5:b1:51:88:88:d9:c6:0b:a4:19:88:03:e8:e8:1e:
f0:05:23:85:31:25:ee:1a:16:ef:fd:fd:37:20:c4:bd:d0:4f:
12:0a:69:72:5a:5e:31:15:49:64:42:93:d3:59:f7:c7:3d:9b:
bf:6a:ed:ad:8d:fb:53:85:d4:37:5a:46:2e:2f:63:c5:99:e1:
a4:eb:2e:f0:c8:ed:5e:5d:1c:9e:d1:66:db:d5:1e:80:2a:48:
40:c7:86:b4:20:d3:50:9e:2e:c9:28:aa:36:cb:1d:dd:1c:55:
74:b0:14:4a:9a:b5:c4:2a:39:dc:e6:34:7c:7b:56:a8:b2:e3:
0f:fe:15:22:8f:2b:b9:0f:b5:d6:d3:a7:8b:83:cc:98:90:05:
6d:9f:77:c6:f7:47:5c:b9:58:0e:58:d2:44:ca:9e:cf:32:18:
45:74:9f:b9:75:ff:01:bb:18:87:47:31:0b:87:d1:70:95:e9:
49:b6:f8:7a:98:8e:ae:ca:39:d3:9d:8f:15:02:3b:44:e1:d6:
a6:66:9d:23:60:5b:2d:be:72:77:c1:58:51:e0:56:0e:cd:76:
a3:cc:03:81:2a:a8:67:2a:15:0f:7a:13:69:8e:6d:c7:5c:dd:
81:4e:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:26 2024 by rpki-client on console-fra.rpki-client.org