Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/7BBFF534DAC011EE9F02A59C775412E6.roa
File: 7BBFF534DAC011EE9F02A59C775412E6.roa (raw, json)
Hash identifier: g+eSyoxBxFaA95GzZtzgap9h90ISnN1S4iw1SJsECZk=
Subject key identifier: 1B:FC:89:92:9B:65:0A:7E:52:96:FB:54:EA:AE:85:CE:8A:58:A0:C5
Certificate issuer: /CN=F361D56AAF/serialNumber=DEEBF5D221B1C48D059FDF894EEA1866B036FCB1
Certificate serial: 02
Authority key identifier: DE:EB:F5:D2:21:B1:C4:8D:05:9F:DF:89:4E:EA:18:66:B0:36:FC:B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/7BBFF534DAC011EE9F02A59C775412E6.roa
Signing time: Tue 05 Mar 2024 07:17:54 +0000
ROA not before: Tue 05 Mar 2024 07:17:51 +0000
ROA not after: Thu 05 Mar 2026 07:17:51 +0000
asID: 328856
IP address blocks: 102.219.208.0/22 maxlen: 24
2c0f:3280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.crl
rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D56AAF/serialNumber=DEEBF5D221B1C48D059FDF894EEA1866B036FCB1
Validity
Not Before: Mar 5 07:17:51 2024 GMT
Not After : Mar 5 07:17:51 2026 GMT
Subject: CN=65e6c722-c5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:0a:6b:02:93:93:d1:98:0e:43:a0:d4:b8:
a9:cd:c8:7e:4c:dd:25:69:6a:c6:30:1e:f2:b1:0c:
76:98:57:2c:96:ef:db:54:63:de:45:47:10:16:29:
d6:25:00:f0:65:dc:2e:98:2b:b2:4a:6b:98:b8:f8:
a7:0e:64:82:2f:9d:a6:a1:ed:e5:6b:df:31:10:0e:
09:be:2d:6c:05:5d:77:4a:45:f3:5c:fb:3a:ac:09:
01:88:92:89:c5:3a:96:cc:d1:23:02:b5:e8:25:e0:
40:17:aa:0a:26:24:42:08:51:92:63:bc:6b:69:7e:
ae:e9:f0:79:67:11:0b:e7:d6:81:3b:c2:96:03:81:
d1:c6:20:90:be:d1:7c:a6:24:a2:d5:c3:97:ff:47:
54:65:09:43:83:fa:9a:db:58:00:d7:18:e5:9c:f6:
e4:a9:d7:5f:02:51:52:6b:7b:8b:f2:eb:50:61:1f:
d9:01:10:a1:e7:0c:84:62:77:8a:a1:77:96:d8:4b:
d6:66:6c:b7:ea:08:ce:ed:da:08:90:70:80:7e:48:
fb:d3:59:3d:48:29:05:38:ae:ec:62:be:f7:36:16:
91:01:79:87:51:21:9a:a7:ae:98:3e:30:19:41:7f:
8d:35:36:7c:64:57:6a:fe:f6:17:fe:21:6e:db:ef:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:89:92:9B:65:0A:7E:52:96:FB:54:EA:AE:85:CE:8A:58:A0:C5
X509v3 Authority Key Identifier:
keyid:DE:EB:F5:D2:21:B1:C4:8D:05:9F:DF:89:4E:EA:18:66:B0:36:FC:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/7BBFF534DAC011EE9F02A59C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.208.0/22
IPv6:
2c0f:3280::/32
Signature Algorithm: sha256WithRSAEncryption
92:21:76:d0:96:69:e3:0a:b4:f0:34:80:0f:ca:0f:d3:bb:84:
81:5a:d8:4d:56:4b:e3:4d:74:9e:39:5f:2b:db:bc:ce:71:dc:
e0:fb:cd:d0:ad:9c:09:eb:e8:55:d2:b9:8f:1e:3a:cf:20:0b:
8d:f5:67:4c:78:16:92:f3:b9:0d:5c:c2:f0:63:53:66:4b:7c:
1a:da:92:95:1b:39:66:c6:a5:9d:a3:65:07:e1:71:0c:24:62:
55:5c:e2:28:c4:98:29:b9:7e:51:b4:c1:f2:aa:91:f8:a7:5e:
a5:c8:49:bf:b1:0d:79:bf:c9:c0:35:c2:1f:86:f8:39:8f:3d:
6d:b5:82:55:0f:38:30:e3:63:a4:2d:ac:49:58:19:68:2f:c9:
ba:a2:53:ba:bc:46:6e:e5:d4:4f:49:32:4a:32:34:1b:23:b9:
1c:47:bb:1e:2d:84:1c:4f:69:45:62:fe:b0:d4:85:98:39:b9:
0b:de:6c:4e:03:80:cb:d1:ef:65:b1:ab:e6:e0:12:6e:d5:f0:
e6:e1:b4:5c:5a:e4:c9:95:56:62:35:b6:02:a9:18:ce:b1:b1:
4f:bf:58:c8:65:6f:5e:ee:b8:f4:4c:b6:ae:f7:6a:62:df:21:
c0:ed:c0:8e:23:9a:80:c0:f5:ac:f5:f8:02:13:0a:93:d9:55:
de:4a:c4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org