Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/3566B206A65F11EFA911EDB9762E951A.roa
File: 3566B206A65F11EFA911EDB9762E951A.roa (raw, json)
Hash identifier: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=
Subject key identifier: DE:A2:72:1B:52:80:7B:81:F5:9C:71:17:33:03:D8:FB:32:C8:38:B7
Certificate issuer: /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial: 012B
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/3566B206A65F11EFA911EDB9762E951A.roa
Signing time: Tue 19 Nov 2024 10:15:32 +0000
ROA not before: Tue 19 Nov 2024 10:15:28 +0000
ROA not after: Mon 22 Nov 2027 10:15:28 +0000
asID: 328331
IP address blocks: 102.135.175.240/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Validity
Not Before: Nov 19 10:15:28 2024 GMT
Not After : Nov 22 10:15:28 2027 GMT
Subject: CN=673c6544-3411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:2f:9c:09:50:3b:8d:3e:65:ec:60:0f:ec:
4f:f6:b4:62:6b:6f:d3:f5:dd:3d:8f:41:dd:8a:1f:
ed:27:dd:51:bd:b5:9b:8a:33:49:93:a2:9e:73:8e:
73:36:fd:7f:d7:6c:c1:d0:dc:f6:3b:4d:8f:cb:5e:
d3:f2:65:a3:3e:85:34:a8:92:37:35:cd:84:46:ed:
7e:2b:28:02:56:bd:eb:ea:f3:81:27:a2:7b:29:1d:
1c:c2:56:7a:d7:53:15:c3:11:dc:ad:f8:fe:1a:4c:
bb:75:48:f0:01:0c:39:df:13:40:e7:fa:5e:fe:ad:
36:b4:eb:4a:69:8c:60:e0:db:19:65:ea:f1:a3:2c:
e2:d7:67:d2:11:2c:70:62:86:e8:f3:8f:4a:27:21:
10:06:85:a6:fe:0a:ea:a2:93:e9:9c:fb:9c:b1:8c:
98:15:f8:ae:c7:97:ca:b4:48:ce:f5:ef:d8:97:9a:
4d:44:39:0d:e1:05:15:70:9c:30:95:0a:d2:7b:ab:
25:c9:53:26:fc:4a:50:66:f9:6a:a0:e8:46:be:86:
b7:f4:3a:4a:60:6b:f8:7c:6d:62:0b:8d:60:10:e7:
14:af:2e:19:52:31:d7:1c:1e:aa:81:0e:70:37:26:
86:d1:ff:16:77:da:03:2f:f2:fb:31:49:81:9b:a7:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A2:72:1B:52:80:7B:81:F5:9C:71:17:33:03:D8:FB:32:C8:38:B7
X509v3 Authority Key Identifier:
keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/3566B206A65F11EFA911EDB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.175.240/28
Signature Algorithm: sha256WithRSAEncryption
b5:b2:99:00:7f:ad:28:16:82:34:9e:44:ea:c3:ea:9d:55:77:
b6:33:10:c1:00:0f:04:a9:57:1e:5a:43:1d:03:1d:7c:6b:86:
c8:01:41:a9:bc:fe:b2:0f:a8:51:fb:ff:98:e5:d8:57:7f:39:
3e:59:bb:1e:a0:b5:78:c5:75:93:13:e3:4b:7b:44:a7:08:c2:
f7:57:f8:83:d3:99:4f:0f:c4:46:9b:a5:b9:cd:b8:39:7c:c6:
0b:fc:7a:02:f0:e7:ca:f3:fe:de:5e:c7:31:c9:3f:fb:42:d8:
8b:e3:a9:73:a9:5b:f0:9a:a2:27:fd:55:17:91:7f:82:a5:c8:
7e:66:3b:e7:c1:ab:a3:57:28:82:88:f4:77:1a:b3:6b:9d:3b:
4b:e8:8e:b6:15:29:c0:f6:41:92:2e:88:58:58:2c:e9:23:fe:
ac:5e:51:f2:d0:40:12:22:85:91:ed:0d:63:2a:3c:d6:69:90:
a0:9b:a0:5c:30:57:77:af:92:45:31:08:2e:d3:d3:67:96:88:
6b:76:5e:d2:34:5b:ba:fc:05:b0:bf:a3:5c:df:72:ee:9c:9b:
66:df:b7:8a:87:f4:66:23:4e:af:c5:27:f0:ea:f5:35:9d:1d:
73:a5:08:22:5a:57:74:a5:f9:1e:07:2a:62:40:42:78:52:36:
8a:42:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:19:31 2024 by rpki-client on console-ams.rpki-client.org