Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/33681320D7DC11EE9259264F775412E6.roa
File: 33681320D7DC11EE9259264F775412E6.roa (raw, json)
Hash identifier: b5C9mOpkyivNZP5nj1Xz3UEoIi/Rbog0RSzap2Ofofw=
Subject key identifier: BE:6F:46:87:12:B6:95:D6:61:72:1F:5C:DB:49:1D:4C:DC:BA:43:B2
Certificate issuer: /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial: 0F
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/33681320D7DC11EE9259264F775412E6.roa
Signing time: Fri 01 Mar 2024 14:58:45 +0000
ROA not before: Fri 01 Mar 2024 14:58:42 +0000
ROA not after: Thu 31 Dec 2026 14:58:42 +0000
asID: 328331
IP address blocks: 102.135.168.0/24 maxlen: 32
102.135.169.0/24 maxlen: 32
102.135.170.0/24 maxlen: 32
102.135.171.0/24 maxlen: 32
102.135.172.0/24 maxlen: 32
102.135.173.0/24 maxlen: 32
102.135.174.0/24 maxlen: 32
102.135.175.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 24 Jun 2024 00:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Validity
Not Before: Mar 1 14:58:42 2024 GMT
Not After : Dec 31 14:58:42 2026 GMT
Subject: CN=65e1ed25-5d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:62:85:f3:79:a6:9a:65:23:43:a2:41:b4:
dc:cd:8f:e2:ee:46:5f:5c:24:ae:f5:b3:7e:35:b6:
1d:34:e5:4e:5d:57:4f:af:04:e4:6b:88:34:4b:93:
4f:b6:e3:ad:b4:fe:5c:a9:98:19:5e:0c:67:5c:56:
10:83:be:8b:5d:9a:bc:56:70:a4:c3:2d:78:70:21:
dc:e3:5c:20:99:99:f2:12:08:c5:53:9a:9f:26:2a:
9e:22:80:37:9e:23:97:29:99:8e:ba:d9:92:77:b9:
67:6f:c1:3e:49:bc:15:cc:a7:79:9d:c5:0d:a9:8b:
b4:0d:02:b2:3d:44:9a:aa:e6:a5:15:62:e1:01:7e:
e0:f2:05:70:33:41:6c:a7:a9:64:08:f4:b6:b9:cf:
54:39:8c:56:fb:e9:18:8f:8c:49:a9:93:ec:d1:b2:
fb:57:cc:46:ca:37:cb:35:3a:13:4a:47:4c:ac:26:
54:8e:42:cb:27:91:04:44:f5:a3:44:cc:50:6a:d5:
d1:43:4e:fd:f4:1b:01:03:a7:15:6a:06:bd:8c:ce:
e6:ac:c4:62:f2:ab:42:e6:4e:f9:c6:03:2f:b2:3b:
d9:bf:29:50:4e:40:79:6f:82:47:40:f5:0c:af:fe:
3d:06:3c:ac:4c:cd:81:11:69:6d:b0:42:d5:e6:cd:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:46:87:12:B6:95:D6:61:72:1F:5C:DB:49:1D:4C:DC:BA:43:B2
X509v3 Authority Key Identifier:
keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/33681320D7DC11EE9259264F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.168.0/21
Signature Algorithm: sha256WithRSAEncryption
56:43:2d:4a:06:53:9c:45:d1:71:52:f6:a9:88:f2:c4:7e:28:
c9:40:59:9b:13:da:c1:2e:ff:b6:90:66:98:a0:35:4f:eb:b1:
01:b8:ca:f9:9f:dc:1a:08:04:53:8a:51:fa:ed:de:f4:30:45:
11:ad:ec:3b:99:f5:20:f1:e7:b5:d3:7f:eb:d9:4e:54:e9:ad:
5f:93:05:4b:64:88:06:13:38:2d:bc:76:fd:84:37:e3:a5:90:
97:50:9e:d5:66:d6:01:6c:5b:e2:59:5d:b3:40:9d:60:8f:39:
d1:a7:dd:a6:9c:2f:2c:6b:ad:af:31:0e:81:8f:77:ed:ec:ca:
17:43:a1:1d:a8:21:05:c2:b3:0b:9c:24:7c:15:de:31:da:3b:
d7:a9:35:c7:3a:2f:fe:ae:9a:2d:9a:ce:84:fa:9b:1f:ec:f3:
ac:4c:40:68:6e:c3:df:8a:03:0b:62:28:25:dc:bd:34:88:d2:
e7:e0:5c:fe:af:1f:85:6e:cf:3f:4c:82:19:30:f3:4e:d5:1c:
05:f7:d2:14:29:15:89:b8:c5:f4:c4:88:c5:a8:b8:fe:10:da:
b5:31:4e:71:ca:b9:90:53:f0:02:cf:f9:23:35:87:2e:75:d1:
cd:84:88:4a:28:6b:f1:88:52:bd:69:d3:be:cd:11:03:18:af:
cf:46:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:18:14 2024 by rpki-client on console-fra.rpki-client.org