Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/B690F15AEA3F11EB95F0A53BD8A014CE.roa
File: B690F15AEA3F11EB95F0A53BD8A014CE.roa (raw, json)
Hash identifier: zcL/xyLFW6ScnLFhDbmKjK12jh4EIgZ+FnDPZ3ww0Pc=
Subject key identifier: 9B:2E:39:B5:C9:BB:AB:F2:31:D2:70:68:E5:9F:E2:BE:6C:E0:F5:D4
Certificate issuer: /CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Certificate serial: 04
Authority key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/B690F15AEA3F11EB95F0A53BD8A014CE.roa
Signing time: Wed 21 Jul 2021 16:21:43 +0000
ROA not before: Wed 21 Jul 2021 16:21:37 +0000
ROA not after: Wed 31 Jul 2030 16:21:37 +0000
asID: 328210
IP address blocks: 102.128.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Validity
Not Before: Jul 21 16:21:37 2021 GMT
Not After : Jul 31 16:21:37 2030 GMT
Subject: CN=60f84997-9cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:61:33:36:ad:63:a7:d2:40:fb:94:da:f6:
b1:96:2a:71:ac:40:59:ff:8f:19:b4:87:49:79:9a:
51:70:09:54:1d:65:ad:8f:9b:ef:4c:0f:30:e6:6d:
d0:de:fc:1f:60:12:07:59:16:7d:ab:66:08:c1:79:
94:d2:3e:7a:61:cb:71:8b:9a:b1:4c:a4:3c:a4:39:
1b:0f:f6:e7:3c:ca:b4:86:e4:ee:63:37:77:29:d8:
39:34:a2:80:c4:dc:9e:19:2c:c9:20:0b:2e:01:4e:
96:4b:d2:44:06:2d:74:d2:f4:5a:90:a4:bc:44:02:
ac:3c:12:30:98:76:14:ab:06:a5:1b:82:e3:d3:41:
99:08:be:83:38:e4:37:1b:3b:c7:41:5f:7f:c6:a9:
96:d6:30:c3:07:4a:2c:e4:df:66:3c:5e:7f:a8:d9:
ba:44:ca:b4:c6:65:2c:48:af:cd:f7:73:db:0c:8b:
25:b3:00:c9:a3:c0:c1:4a:c5:84:4b:83:04:af:0f:
4e:dc:0f:b2:9c:df:2a:d6:3d:3b:55:81:62:f6:29:
06:82:a8:5e:60:57:af:10:1f:4a:35:0b:1a:36:ad:
32:ac:34:a0:31:e3:40:19:91:78:65:c5:39:f2:90:
00:a7:e8:0d:24:66:3e:b2:c7:a6:79:7b:dc:7f:e7:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:39:B5:C9:BB:AB:F2:31:D2:70:68:E5:9F:E2:BE:6C:E0:F5:D4
X509v3 Authority Key Identifier:
keyid:D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/B690F15AEA3F11EB95F0A53BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.144.0/20
Signature Algorithm: sha256WithRSAEncryption
38:a3:d1:64:ba:99:b3:9a:e9:d7:4d:ef:8c:d4:1b:fe:d5:2b:
9d:ba:75:33:12:1c:8c:db:89:80:9b:24:ff:ae:1d:12:93:5a:
4d:09:96:fc:cf:06:e5:62:30:45:1f:f5:81:fd:fe:6a:5b:0c:
3b:e8:1c:80:85:8f:bb:de:da:d7:99:23:2b:29:1a:ed:e4:2a:
0c:84:50:22:69:01:36:20:32:b1:78:87:2b:27:e3:fd:29:fc:
1c:19:f9:99:b5:36:9c:66:ea:38:d5:66:a1:21:b1:63:d7:55:
a4:1e:d6:2e:7a:fc:3f:81:53:3a:e1:67:06:92:ec:78:63:b3:
35:09:93:2b:63:b8:2a:7c:af:fa:82:66:b0:18:4a:0e:c9:69:
e1:1e:9c:20:3c:6d:98:cd:e9:5b:05:df:83:81:a7:24:a9:54:
91:a1:55:6a:4b:f9:c0:c5:c9:69:16:26:3e:0d:e2:b6:bc:e5:
23:40:4a:c3:e3:d5:4b:a0:a4:23:07:6d:59:59:a5:26:24:c1:
39:99:0c:9d:f3:59:68:07:12:f7:27:15:08:c4:74:ec:8c:73:
ef:be:5d:f8:4a:9c:0c:9f:3b:c4:20:b4:ab:85:ab:06:a7:9b:
49:e3:87:85:f8:a2:3b:54:f7:e8:0f:95:f1:b5:0e:b9:36:1c:
8b:66:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org