Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/972FAAC0695611EE9ED10D824AD9E6FC.roa
File: 972FAAC0695611EE9ED10D824AD9E6FC.roa (raw, json)
Hash identifier: 7QDMQnna185RUd3VbS6kFQRmBH7dnJ7b1efyAdSvaTk=
Subject key identifier: 45:01:01:B6:D2:C5:FE:67:9C:F7:9B:62:E0:F7:4C:03:47:C7:5E:14
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 01F5
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/972FAAC0695611EE9ED10D824AD9E6FC.roa
Signing time: Thu 12 Oct 2023 23:25:12 +0000
ROA not before: Fri 13 Oct 2023 23:25:08 +0000
ROA not after: Sun 13 Oct 2030 23:25:08 +0000
asID: 25818
IP address blocks: 102.177.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Oct 13 23:25:08 2023 GMT
Not After : Oct 13 23:25:08 2030 GMT
Subject: CN=65288058-67e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c9:a4:ce:de:8b:65:a3:e3:bd:4c:8e:cb:2c:
64:1a:65:76:d0:ec:01:45:3d:1d:d5:34:0f:d7:42:
23:05:85:2b:b8:78:85:9c:34:1b:a0:da:6a:16:a5:
4c:bb:bd:d1:a2:5d:05:31:91:89:2e:1e:b6:74:29:
f5:1e:1a:59:44:c4:44:6c:81:f2:45:f5:40:af:43:
50:6c:d7:ed:0a:c5:6d:48:e4:a4:2b:6f:b8:a2:d9:
ee:b8:bb:17:11:f9:a6:73:61:a5:5a:f4:ff:ba:e3:
a6:13:6d:6b:19:0f:06:ef:a9:5e:1e:7b:3d:88:0d:
c0:a8:05:b7:e9:67:4e:9a:0d:31:65:70:e1:c2:87:
b5:4d:f3:67:c2:19:2c:9b:b2:33:a4:f9:15:f9:54:
ba:d2:41:25:c8:20:e9:76:0e:22:33:e1:a9:47:a5:
0b:aa:a8:bb:61:32:34:ff:d6:15:e1:28:58:21:1a:
08:d2:6c:3a:5a:d9:ec:0b:01:46:e0:f9:c3:d9:2f:
15:cd:ff:4d:ab:85:0f:4a:52:bd:a0:70:bf:63:ee:
c8:d5:36:5d:cf:5c:4f:0d:0e:af:c5:59:9b:fb:02:
40:29:7f:88:7d:07:a9:00:00:f1:71:2b:f8:65:53:
77:f0:71:b2:78:c2:f9:2c:71:fc:1c:3b:8f:f5:1e:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:01:B6:D2:C5:FE:67:9C:F7:9B:62:E0:F7:4C:03:47:C7:5E:14
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/972FAAC0695611EE9ED10D824AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ea:ff:bc:51:b6:ba:5a:ba:94:75:f5:8a:d8:19:1b:06:d4:
67:d0:6f:7e:48:a7:ca:ff:c2:7d:52:bd:79:d3:66:fc:69:ce:
48:fd:c4:ba:c7:16:08:5a:ea:c6:4b:6d:26:0f:3d:a2:39:85:
7f:b2:16:f5:7d:62:1d:f0:dd:fb:79:5c:80:3e:a8:b1:f1:21:
1e:86:71:c4:ad:37:08:2f:41:24:59:f4:2a:db:a9:e2:f7:39:
34:1f:82:81:e5:fd:70:a7:29:89:07:d0:da:3e:98:9a:06:29:
8c:7e:24:f9:a8:b3:c8:8b:86:eb:a8:7a:ce:55:33:77:89:86:
6c:9a:45:fc:c8:36:6c:3b:a3:d6:0d:02:bb:14:6f:2d:86:63:
e9:21:ea:d4:a1:3a:f3:9b:96:cc:53:17:6b:cb:78:3f:10:5f:
2a:34:d5:ac:2d:f7:bb:e0:59:eb:26:98:5b:e1:0f:eb:23:dd:
a3:d7:a9:81:a0:9e:11:b1:fa:af:81:fa:f9:f4:5c:52:71:1f:
77:34:5b:fd:61:bd:9a:24:06:79:fc:77:5a:08:8f:c3:74:8d:
5b:49:5f:b0:9d:d2:d7:aa:e9:59:37:56:9a:43:b4:0b:74:b4:
bd:a4:59:b3:f0:37:04:67:56:ca:52:83:bc:4d:00:b3:f3:09:
95:3a:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:15 2024 by rpki-client on console-ams.rpki-client.org