Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/FF0A93E0400B11EE8807FE7B4AD9E6FC.roa
File: FF0A93E0400B11EE8807FE7B4AD9E6FC.roa (raw, json)
Hash identifier: d4ujJVZEWVPL68c5XEuS1b7DDCDSn2VVtrxCjnaqarE=
Subject key identifier: 1D:2B:05:60:8D:E3:12:4B:3C:CD:03:B2:AD:BE:97:05:D8:6F:7D:28
Certificate issuer: /CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Certificate serial: 67
Authority key identifier: A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/FF0A93E0400B11EE8807FE7B4AD9E6FC.roa
Signing time: Mon 21 Aug 2023 10:17:56 +0000
ROA not before: Mon 21 Aug 2023 10:17:53 +0000
ROA not after: Tue 24 Aug 2027 10:17:53 +0000
asID: 14618
IP address blocks: 102.135.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Validity
Not Before: Aug 21 10:17:53 2023 GMT
Not After : Aug 24 10:17:53 2027 GMT
Subject: CN=64e339d4-dd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:61:ff:17:aa:94:b5:26:86:85:e3:42:8a:
a2:fb:9f:4f:ee:14:71:ce:d5:a7:df:8f:f5:7d:ff:
64:4d:03:e2:2c:9f:d6:d2:85:74:4c:72:26:f9:31:
c8:f0:a6:aa:b4:c6:2f:25:e1:a3:d3:1f:f3:5b:ae:
68:a7:4e:44:ee:6f:49:4a:37:a3:ae:50:28:73:6b:
9d:94:5c:78:71:66:30:4c:92:17:3f:64:a0:0d:49:
58:4e:89:39:80:8d:64:e5:89:f7:7a:6a:66:87:9a:
5b:aa:4b:f6:dd:d6:8a:fa:07:82:46:35:f5:5e:f2:
66:4a:e7:90:e7:31:5f:82:e8:d4:0f:78:80:86:f3:
fb:78:87:3c:1d:e7:f3:17:d8:53:b7:37:c8:f1:ca:
99:ce:36:3a:fe:f2:27:a2:da:c7:fa:39:89:22:e8:
42:67:54:17:b4:64:37:96:92:9c:84:6e:f6:51:02:
88:6b:49:68:7c:de:87:43:a1:0c:60:39:ea:e6:f3:
10:98:09:b3:91:da:f9:24:93:6a:e6:0f:27:20:71:
1e:94:78:dd:e7:d0:f4:ee:ee:fb:55:dd:34:cb:ca:
2e:6d:4f:92:05:aa:c0:75:c2:e3:7e:f0:69:0c:98:
eb:a9:04:b0:72:88:2f:58:e4:60:b5:9b:c8:51:9f:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:05:60:8D:E3:12:4B:3C:CD:03:B2:AD:BE:97:05:D8:6F:7D:28
X509v3 Authority Key Identifier:
keyid:A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/FF0A93E0400B11EE8807FE7B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
48:11:69:6f:2c:cc:88:b5:4c:4b:05:f3:a4:f5:55:2c:83:f0:
00:80:9d:b4:18:b1:b0:45:95:72:b9:c3:00:87:65:7f:8a:40:
16:3c:7b:e7:b6:d7:7e:bf:66:7e:46:92:c6:69:07:1b:c2:c8:
1b:ad:53:43:69:d3:0f:6a:d8:ab:64:a1:e2:bd:04:b7:f4:22:
47:09:38:b6:55:54:fa:fb:a8:1f:4b:e6:9b:8e:88:c6:bb:ca:
11:bd:4a:5a:a3:28:4a:9d:a5:7b:7a:7c:fd:d3:30:37:03:18:
4f:45:b6:6d:b2:a6:d8:a7:a1:12:a0:99:e6:35:88:88:0f:79:
8c:ca:73:f4:19:48:90:41:30:1e:4d:c5:fe:d1:a9:0d:36:e5:
68:7b:27:a8:d8:b5:8f:9c:82:01:00:9a:96:02:4a:f0:b8:75:
34:99:c4:70:b9:a2:86:fb:18:90:70:b8:6b:96:f4:89:c6:48:
94:65:d4:8c:91:ec:97:cb:53:7d:ae:3e:56:33:c9:3b:d5:69:
cc:f7:b9:32:f4:a9:12:d4:75:8d:2e:c2:03:36:1f:35:b8:c5:
03:c5:e3:51:e5:3b:53:5b:57:5d:65:6b:96:5d:87:7b:58:94:
38:06:ba:bc:47:69:05:2d:77:e8:9e:79:16:f5:d9:47:b6:bb:
37:8d:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:28 2024 by rpki-client on console-fra.rpki-client.org