Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/FA863D0C695411EEB38C227D4AD9E6FC.roa
File: FA863D0C695411EEB38C227D4AD9E6FC.roa (raw, json)
Hash identifier: KWNdkRrOLJM0mFFXSv0+LOkZ0cLjkGQ0cmkV6KDH3Fg=
Subject key identifier: 30:13:DB:DA:61:3C:DB:7C:F6:75:8E:80:95:EB:AD:E3:05:F4:CB:C4
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 01E9
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/FA863D0C695411EEB38C227D4AD9E6FC.roa
Signing time: Thu 12 Oct 2023 23:13:40 +0000
ROA not before: Fri 13 Oct 2023 23:13:36 +0000
ROA not after: Sun 13 Oct 2030 23:13:36 +0000
asID: 25818
IP address blocks: 102.177.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Oct 13 23:13:36 2023 GMT
Not After : Oct 13 23:13:36 2030 GMT
Subject: CN=65287da4-e530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8f:10:de:0f:d9:98:93:5f:23:12:34:88:98:
92:99:b8:19:ce:49:c6:cd:cf:7c:7e:14:ed:8c:77:
bb:69:68:de:2b:bb:f8:ab:9d:93:f0:89:12:0b:b7:
14:20:10:eb:b0:58:16:22:3c:12:17:f6:4f:9a:4f:
71:c3:a9:61:40:b9:93:21:ce:e7:f2:a4:e7:69:21:
3d:41:14:68:5a:48:c1:6a:2b:f4:1b:43:44:1c:41:
eb:47:26:9c:4e:01:88:5e:2e:b3:db:3e:cb:d2:e7:
62:f2:d0:c1:0e:56:2b:99:f6:82:de:f7:2f:5f:3f:
38:66:f3:c2:0d:72:bc:02:06:00:44:86:f7:6a:92:
e3:f3:cc:a0:b2:3f:58:cc:8b:7e:9e:8f:3a:69:42:
4c:5e:07:4f:fa:46:5a:e7:6a:40:ee:66:8c:33:6a:
c4:78:fa:32:38:36:a7:74:8a:e3:48:7b:b7:3a:e1:
29:f0:ea:0f:9c:82:9e:cd:b2:72:25:d7:35:c4:3c:
e4:a1:d4:f5:9b:5a:a2:3a:ae:5e:5a:37:cf:f3:91:
57:9d:9d:29:e1:f7:94:17:3c:04:98:ab:81:64:66:
b8:8d:dc:d5:9b:7c:8f:a3:b0:f1:71:59:bc:9f:6e:
28:c5:05:96:7d:21:d9:28:6e:89:95:6a:a1:f6:f4:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:DB:DA:61:3C:DB:7C:F6:75:8E:80:95:EB:AD:E3:05:F4:CB:C4
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/FA863D0C695411EEB38C227D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.120.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4e:57:36:e6:44:54:e7:ed:ee:b6:13:2e:a3:83:56:ab:12:
47:91:96:d9:ca:6d:1c:27:d1:50:58:2f:1e:cf:0e:9f:86:a0:
bb:31:92:73:8b:6b:6d:d9:bf:4a:f7:fa:81:9f:8b:9a:58:72:
75:0b:13:d6:de:58:d1:17:e4:d7:4c:35:4d:7d:33:3d:fc:df:
15:22:2f:bc:0d:f9:49:d4:4c:24:e3:88:f6:88:d1:66:cd:98:
81:90:e1:0b:dc:8b:65:0a:b0:9f:68:86:1a:db:07:c8:3b:83:
79:03:38:5d:d9:1b:7e:48:d9:29:1a:5f:0e:2a:22:30:b1:2d:
58:07:3d:40:c2:f6:c2:23:d3:b5:36:42:45:0b:65:29:a6:d1:
cb:ad:b4:64:3b:2a:15:a1:f4:47:0f:29:c2:7d:48:19:d6:db:
2a:55:0b:55:9c:a1:23:23:a5:9e:0a:6d:46:fa:2b:68:f3:f1:
b3:94:0c:cb:3f:ea:8b:8e:6e:14:6b:42:00:2a:68:7d:78:4c:
d6:04:16:c4:e8:eb:29:ae:96:d3:b8:6c:63:d3:08:3d:a9:73:
dc:5b:03:8d:4d:79:38:2c:fe:1e:e0:f7:8d:d8:69:e7:33:64:
d2:fb:20:cf:cd:eb:c3:01:20:94:1a:d1:78:0a:0e:05:9c:14:
23:7a:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:08 2024 by rpki-client on console-fra.rpki-client.org