Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/72BABCF46FFC11EFBB10279D762E951A.roa
File: 72BABCF46FFC11EFBB10279D762E951A.roa (raw, json)
Hash identifier: rlDq1sLVRqkoMbUERI8asuL0sKn6qOkKebzRsYaYfgo=
Subject key identifier: 6B:09:BF:70:2D:84:8C:F1:03:C6:B1:4E:AE:9A:6A:FF:77:60:83:D5
Certificate issuer: /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial: 03B2
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/72BABCF46FFC11EFBB10279D762E951A.roa
Signing time: Wed 11 Sep 2024 05:12:32 +0000
ROA not before: Wed 11 Sep 2024 05:12:29 +0000
ROA not after: Mon 11 Sep 2034 05:12:29 +0000
asID: 36914
IP address blocks: 197.136.0.0/14 maxlen: 28
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615A34AF
Validity
Not Before: Sep 11 05:12:29 2024 GMT
Not After : Sep 11 05:12:29 2034 GMT
Subject: CN=66e126c0-beed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:8e:71:99:ed:7b:a8:2c:41:86:ca:0d:1a:
4d:2c:64:5f:2e:5a:19:7d:bd:fb:5d:59:34:6d:4c:
7b:cd:eb:c2:cc:a3:83:80:64:83:0d:97:f7:d4:c8:
82:01:01:bd:6d:0b:99:41:db:33:27:0f:25:69:aa:
d9:b1:4b:5c:e5:bd:bd:b2:bc:8c:c7:23:bc:89:44:
ad:a8:e3:ea:0a:ce:e4:39:bc:fe:7a:d7:88:d4:46:
c3:df:89:d6:6a:2c:e5:3a:2a:d1:48:93:29:6c:e4:
48:ad:4a:1b:7f:a0:8d:e7:a3:a7:f2:52:a7:3a:57:
27:c4:2c:c7:d8:24:49:2e:53:f1:e2:e0:49:fc:2f:
1b:60:0a:74:32:68:91:f8:da:2f:30:69:9b:38:5c:
31:a0:a6:47:e3:09:84:dc:42:f7:90:ad:25:31:b1:
56:6a:31:60:ea:43:03:70:fb:18:73:bf:64:6f:8c:
da:c2:04:62:48:5e:9c:bf:7a:fe:97:e8:15:28:88:
e7:a4:0f:de:96:1c:b7:6e:e8:63:7b:64:e4:d6:e3:
35:59:df:e3:72:4e:33:5b:6e:b8:71:ae:cd:ee:67:
90:c9:40:a2:11:b1:24:33:b7:cd:71:e9:33:43:01:
2c:40:57:25:99:20:ca:e9:c2:17:e7:5e:50:76:66:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:BF:70:2D:84:8C:F1:03:C6:B1:4E:AE:9A:6A:FF:77:60:83:D5
X509v3 Authority Key Identifier:
keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/72BABCF46FFC11EFBB10279D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a6:67:0b:8a:47:cd:96:74:e1:b2:1c:9a:19:24:02:ec:f9:ce:
56:c4:b2:86:f5:40:7a:8f:55:04:45:8f:a2:64:25:96:e7:ff:
4b:9a:2a:db:a7:bb:3d:64:7f:0f:9f:9b:c8:e5:cf:dc:f7:a5:
e1:03:55:48:07:04:55:e4:35:ca:8d:f3:1f:a5:e1:78:7d:ab:
eb:7f:52:9b:86:d6:f4:78:3b:c9:66:f3:0d:8c:61:ef:95:9d:
62:8c:62:92:33:24:fb:78:5c:31:27:57:8d:11:fd:c4:5b:f8:
a8:9f:3d:56:88:52:22:cd:97:f2:62:ab:93:bb:0b:28:33:5e:
7a:da:02:f3:f9:b2:f6:30:51:cf:5a:5f:e9:41:ef:de:84:66:
83:89:95:7a:4d:6f:27:63:59:5a:a8:56:e8:f4:e6:ce:b6:12:
a3:15:7a:3f:05:f0:79:86:c3:eb:7b:5b:9c:c8:0b:1d:ea:19:
48:76:07:21:fa:d3:ae:18:fa:47:e8:2d:70:a4:b3:ef:12:d1:
98:1b:b9:22:51:d3:42:9a:4c:e6:06:54:d1:aa:49:16:90:3c:
42:8d:a7:dd:ba:8d:6f:3f:13:26:06:0e:7c:36:7c:dd:76:10:
52:9b:6a:92:38:d6:ae:7e:a8:b6:c8:5e:fa:3b:7d:28:29:0c:
c9:af:9c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:04 2025 by rpki-client