Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/6C3012C266AA11EF8E812E87762E951A.roa
File: 6C3012C266AA11EF8E812E87762E951A.roa (raw, json)
Hash identifier: n7zkATB1H4RlSuKLcrCB/Jgsgt6yqHll4YIJhTQe0fI=
Subject key identifier: 57:AA:5D:DD:12:D9:ED:9E:94:AC:13:B7:AE:DC:85:82:0E:B3:67:8D
Certificate issuer: /CN=F366553AAF/serialNumber=C07079E5175605888D9BE4767F7C2BFD9714E027
Certificate serial: 07D1
Authority key identifier: C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/6C3012C266AA11EF8E812E87762E951A.roa
Signing time: Fri 30 Aug 2024 08:32:42 +0000
ROA not before: Fri 30 Aug 2024 08:32:38 +0000
ROA not after: Thu 31 Aug 2034 08:32:38 +0000
asID: 328441
IP address blocks: 102.68.24.0/24 maxlen: 24
102.68.25.0/24 maxlen: 24
102.68.26.0/24 maxlen: 24
102.68.27.0/24 maxlen: 24
102.68.28.0/24 maxlen: 24
102.68.29.0/24 maxlen: 24
102.68.30.0/24 maxlen: 24
102.68.31.0/24 maxlen: 24
2c0f:ecf8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.crl
rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366553AAF/serialNumber=C07079E5175605888D9BE4767F7C2BFD9714E027
Validity
Not Before: Aug 30 08:32:38 2024 GMT
Not After : Aug 31 08:32:38 2034 GMT
Subject: CN=66d183aa-7040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:fd:8f:95:bf:d1:0e:be:ba:42:4c:4b:9a:
7f:87:b0:30:fa:9d:4e:3a:ff:a5:b9:19:06:61:8b:
a6:86:fc:b8:37:fd:ed:6d:fe:9f:4f:8d:a8:8b:b0:
8c:12:7e:43:69:33:16:a9:c3:07:01:40:a1:c5:82:
8c:5d:f5:be:7e:3f:a2:35:7e:e8:fa:d1:02:44:eb:
f3:24:f4:92:9e:71:eb:b7:52:74:58:b9:5c:21:20:
1e:c5:37:cd:d6:d7:2f:2a:60:15:1a:91:0a:97:98:
a9:23:ff:11:db:5c:8d:89:2f:8e:eb:4e:64:e5:30:
b2:ff:d2:bd:e7:71:f4:a5:7a:b8:b9:60:3e:f9:c3:
4a:6c:f0:36:ff:f6:66:d6:6f:9a:00:5b:b8:46:bb:
32:c1:d3:00:0f:03:3d:4b:8a:b7:22:2b:b6:90:47:
37:3b:7c:de:48:1c:65:48:59:38:fd:e5:eb:e0:62:
d0:d7:5f:5a:72:a2:bb:a9:be:4c:dd:47:21:42:ff:
be:3a:07:12:11:d7:e0:3b:df:ec:fa:a7:33:d1:c6:
01:ed:9b:41:69:c9:77:d3:e1:b6:6d:d4:d8:ab:86:
24:ba:39:bd:98:23:4c:cd:c6:a3:6f:91:42:30:2b:
ed:e9:28:bf:3c:de:dc:0d:e6:57:96:1f:67:13:5a:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AA:5D:DD:12:D9:ED:9E:94:AC:13:B7:AE:DC:85:82:0E:B3:67:8D
X509v3 Authority Key Identifier:
keyid:C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/6C3012C266AA11EF8E812E87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.24.0/21
IPv6:
2c0f:ecf8::/32
Signature Algorithm: sha256WithRSAEncryption
42:83:14:bb:6b:e6:2b:43:08:54:7e:02:94:1f:0b:6c:5b:8a:
64:c5:7f:a1:ed:49:30:b7:25:4e:9c:59:24:97:a8:1a:26:50:
89:0c:6b:c8:ed:56:73:4a:46:48:76:86:b2:4e:44:a3:76:99:
35:30:dc:d6:32:a2:54:d7:9d:ca:e6:5e:b5:be:48:e9:51:67:
33:11:da:fc:5d:bb:95:0f:2f:56:55:d6:ca:c6:f8:76:d0:4e:
81:6f:51:aa:9a:02:98:3e:a7:82:ee:69:c1:82:5e:3b:39:33:
9e:27:82:cc:60:3b:c6:83:a9:98:10:4e:1f:c0:86:69:d7:7f:
c6:57:c3:a3:13:84:cb:40:45:51:29:36:7b:bd:c2:a2:e7:23:
06:88:af:0f:cb:27:77:e3:c7:01:1c:cb:6d:f5:8f:b8:75:23:
13:0c:6e:2c:6f:5c:82:81:f8:0f:ad:55:21:4f:21:29:e2:42:
6c:34:24:dc:71:62:14:7a:6d:58:ac:09:c5:51:d7:23:e0:c4:
24:d7:9b:00:03:70:21:d4:a8:b8:97:57:4a:23:c8:65:c1:21:
e7:c0:d2:31:a8:bc:0f:d5:a9:fd:16:38:c7:d4:b1:cc:80:3b:
c2:e2:46:d2:e7:4f:3f:19:25:99:1a:05:7e:b5:e6:ca:53:a7:
fd:bb:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org