Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/AB8709D8776A11EEAA4DA77C4AD9E6FC.roa
File: AB8709D8776A11EEAA4DA77C4AD9E6FC.roa (raw, json)
Hash identifier: OjX8uJ+ABNT4DUBU6lytMh4nPK90i9veD0YAxN/KxA4=
Subject key identifier: AE:8F:32:D0:5F:A5:CB:51:93:BA:D3:8F:58:F9:68:F3:0C:7D:80:04
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0429
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/AB8709D8776A11EEAA4DA77C4AD9E6FC.roa
Signing time: Mon 30 Oct 2023 21:24:12 +0000
ROA not before: Mon 30 Oct 2023 21:24:09 +0000
ROA not after: Mon 21 Oct 2024 21:24:09 +0000
asID: 140867
IP address blocks: 102.177.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 30 21:24:09 2023 GMT
Not After : Oct 21 21:24:09 2024 GMT
Subject: CN=65401efc-05cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:4e:2a:e5:f5:f7:b5:21:72:ef:99:59:25:
6d:af:6f:c7:25:43:37:a3:0b:97:72:0a:30:dd:c0:
71:83:6e:3a:9b:7c:1b:4c:02:5a:5d:5a:3d:5a:99:
2f:46:54:83:4b:3b:13:b2:29:52:85:fc:6e:11:bb:
ea:dc:25:f4:7c:92:fe:96:e0:6a:9d:e0:f8:0d:78:
ec:d7:34:05:fd:b6:2e:e3:8b:4b:a8:89:00:1d:71:
12:e0:0e:82:ac:5b:a1:09:81:dc:39:76:2e:9a:31:
22:c2:7e:90:7b:75:f1:c9:e3:b6:36:e9:f8:80:11:
30:b1:6b:ca:a4:e1:a7:16:ad:6a:8a:8b:67:48:3c:
8e:08:f7:3a:0f:45:1e:54:9d:c3:c2:3c:11:82:df:
30:88:7b:7f:32:8e:44:f4:de:87:1c:33:a2:5a:39:
64:98:9b:8e:67:f5:87:20:f1:80:2a:a6:5f:2a:cf:
b9:f9:b6:fd:71:50:f2:2d:8c:da:4f:35:5d:91:66:
91:fc:4a:81:42:ef:cd:06:8d:be:fd:54:0e:b3:ad:
d2:45:6b:b4:dc:02:82:6c:ca:df:ec:da:48:96:68:
8b:77:52:14:66:4c:a3:fc:48:15:90:99:bf:2a:ac:
68:c9:fa:b5:50:d4:79:c0:95:ed:aa:33:5f:cb:e4:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:32:D0:5F:A5:CB:51:93:BA:D3:8F:58:F9:68:F3:0C:7D:80:04
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/AB8709D8776A11EEAA4DA77C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.179.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:a3:a3:9b:7d:97:8c:af:4b:88:85:d5:15:76:5e:fc:5d:f7:
cd:67:b1:ad:13:33:8b:94:83:f2:72:f6:c2:f7:a4:21:4a:6c:
dc:3f:d5:68:d4:d6:35:44:4c:6a:61:ac:1f:a0:1d:70:be:31:
e9:c0:ec:ce:7f:f0:07:28:1a:96:3d:ca:67:25:48:49:eb:87:
37:90:5b:59:14:80:77:ad:49:b4:5e:0b:fa:9b:e5:6d:ad:ab:
26:f2:ae:85:79:c5:24:91:f3:8d:f5:4f:23:8e:4a:f1:f5:a7:
7c:e3:94:1d:59:14:7d:0b:8a:39:f8:e5:9d:02:64:63:f3:a6:
16:11:ed:2f:66:80:ec:1b:6e:bb:38:40:75:a2:e6:0f:0e:0c:
a9:89:3f:23:d7:a1:13:d3:ac:7d:c6:8b:97:e6:9c:2a:e9:55:
3a:81:83:38:c8:0b:99:20:89:d0:8f:4c:d4:81:1f:16:cb:8f:
62:27:bb:af:42:45:ad:0e:7d:f9:01:c3:7f:0c:b8:01:9a:0b:
20:92:bb:3d:f4:b8:b0:36:f7:96:73:c7:76:e3:12:26:ca:c4:
22:e9:d0:02:9e:1a:66:a1:1b:15:ff:6e:07:47:39:c9:36:6b:
c6:d9:33:22:e0:8b:f6:9a:6e:27:f0:46:ea:51:f4:58:25:8c:
d5:c3:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:36:59 2024 by rpki-client on console-ams.rpki-client.org