Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/51EA1054D17E11EF9366CFB4762E951A.roa
File: 51EA1054D17E11EF9366CFB4762E951A.roa (raw, json)
Hash identifier: B3nApvJ8m0Yk/cqqKudal7rWevnRDx5f/X0VDhxZiWk=
Subject key identifier: 1B:A6:11:C0:8B:8B:DB:E4:D2:B0:23:9A:9E:67:29:2F:D5:AC:C9:AB
Certificate issuer: /CN=F366115BAF/serialNumber=13658DF7E987A11FF568723C7B71DAD7071E33DF
Certificate serial: 06
Authority key identifier: 13:65:8D:F7:E9:87:A1:1F:F5:68:72:3C:7B:71:DA:D7:07:1E:33:DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/E2WN9-mHoR_1aHI8e3Ha1wceM98.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/51EA1054D17E11EF9366CFB4762E951A.roa
Signing time: Mon 13 Jan 2025 07:16:34 +0000
ROA not before: Mon 13 Jan 2025 07:16:31 +0000
ROA not after: Sat 13 Jan 2035 07:16:31 +0000
asID: 328562
IP address blocks: 102.23.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/E2WN9-mHoR_1aHI8e3Ha1wceM98.crl
rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/E2WN9-mHoR_1aHI8e3Ha1wceM98.mft
rsync://rpki.afrinic.net/repository/afrinic/E2WN9-mHoR_1aHI8e3Ha1wceM98.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 03:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366115BAF
Validity
Not Before: Jan 13 07:16:31 2025 GMT
Not After : Jan 13 07:16:31 2035 GMT
Subject: CN=6784bdd2-23ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:88:c7:75:c5:e5:9b:41:fd:5d:8e:cf:5c:
aa:78:c4:76:7e:e5:70:41:0f:2c:78:b1:3f:ea:ed:
22:9a:a4:31:b3:7c:10:24:f7:27:47:83:61:be:47:
12:1d:9a:37:e8:00:c9:b8:b2:74:a5:4e:f0:2b:d8:
33:49:c2:eb:f6:a3:ce:bb:66:35:5b:e7:76:bf:93:
a1:f7:6a:be:e0:90:65:a2:b8:16:0f:e2:b1:74:31:
14:7a:2b:ad:41:0f:08:8b:69:f3:74:cf:45:34:8d:
81:0f:e8:bb:5a:5f:40:80:4d:fc:9b:a2:bf:7d:c1:
d5:19:aa:5f:38:59:29:96:5a:3d:d0:d2:bf:aa:9f:
e6:3e:19:2e:68:b0:6c:f6:40:12:7c:3c:b6:ad:eb:
46:8f:9b:ab:48:c3:3c:9d:89:d0:23:53:8e:ce:45:
bf:8b:63:71:77:09:e5:38:df:59:34:46:3d:ea:5a:
cd:6a:2f:a5:3a:2d:8c:93:e2:02:98:f3:40:75:42:
8a:11:34:f2:29:4f:3d:7b:07:11:d5:d0:4c:4b:f9:
b0:56:a6:86:97:56:b0:a8:b9:41:eb:02:20:cb:9c:
bf:29:68:7b:e0:b9:e8:60:d0:2a:9e:5f:b5:dc:b8:
fe:ae:97:f7:16:01:03:08:5d:c2:9e:76:4f:c7:a3:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A6:11:C0:8B:8B:DB:E4:D2:B0:23:9A:9E:67:29:2F:D5:AC:C9:AB
X509v3 Authority Key Identifier:
keyid:13:65:8D:F7:E9:87:A1:1F:F5:68:72:3C:7B:71:DA:D7:07:1E:33:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/E2WN9-mHoR_1aHI8e3Ha1wceM98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E2WN9-mHoR_1aHI8e3Ha1wceM98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/51EA1054D17E11EF9366CFB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.152.0/21
Signature Algorithm: sha256WithRSAEncryption
04:85:16:54:61:1b:30:88:d8:4c:b6:69:cf:62:56:26:af:86:
2a:08:fd:bc:62:6d:6d:4c:b6:e0:2e:28:90:70:87:bf:68:2a:
ce:c6:6a:c3:9f:e2:d3:d3:02:e3:5e:a7:34:9c:fe:fe:1b:98:
85:e4:7d:f8:1f:bb:73:df:fb:7b:0b:be:ff:a1:4b:ff:70:74:
ed:1a:7d:e9:02:57:e9:e3:0c:51:a4:95:d5:bf:92:98:cf:5d:
16:0e:b2:aa:86:c1:be:2a:5c:d5:59:8a:32:31:49:b6:2a:b5:
c7:a4:23:bb:9a:b7:5e:41:9f:6b:9e:a8:95:7b:54:9a:f0:63:
0b:f3:d7:f6:b4:e8:84:bb:f1:88:b9:fa:23:c3:03:b7:a2:84:
2a:db:22:49:f1:44:9d:ee:74:0b:f3:43:c9:4b:43:e5:62:af:
46:40:63:8b:e1:28:4c:7e:2b:f1:f9:9d:6a:20:99:de:b7:ea:
9a:79:bc:c2:19:51:3b:45:9d:db:98:05:9c:1f:67:4e:d8:b9:
8f:c3:7b:4c:89:ef:81:e0:d6:cd:54:5a:5c:35:02:15:2e:85:
fe:c5:02:1d:16:cd:af:5b:5b:86:16:40:2c:d7:1d:71:24:2c:
d4:4f:c0:5a:dd:3a:92:a2:45:39:cc:cb:cd:40:c3:99:ca:0f:
3e:25:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:48:52 2025 by rpki-client