Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/5607C3B0BEE211EFA4CEA589762E951A.roa
File: 5607C3B0BEE211EFA4CEA589762E951A.roa (raw, json)
Hash identifier: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=
Subject key identifier: 1A:08:03:9F:E8:68:FC:F9:4C:7F:1F:C1:31:1A:78:3C:E6:67:B8:48
Certificate issuer: /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial: 02
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/5607C3B0BEE211EFA4CEA589762E951A.roa
Signing time: Fri 20 Dec 2024 14:54:39 +0000
ROA not before: Fri 20 Dec 2024 14:54:35 +0000
ROA not after: Tue 19 Dec 2034 14:54:35 +0000
asID: 328696
IP address blocks: 102.222.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 03:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628288AF
Validity
Not Before: Dec 20 14:54:35 2024 GMT
Not After : Dec 19 14:54:35 2034 GMT
Subject: CN=6765852f-5696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:e5:04:ba:13:bd:70:1f:76:b7:55:de:6b:
c7:11:15:1a:2e:1d:ee:a6:cc:71:57:38:21:42:ae:
7e:b6:cd:eb:5e:7c:23:14:94:6f:df:82:7c:86:4e:
4e:62:32:49:5c:67:be:9d:11:34:3f:ca:7c:9a:6a:
cc:6f:ca:17:18:1d:fe:a9:1e:9d:c5:18:db:c6:25:
ea:5d:63:d5:c1:7f:a0:fe:03:78:01:7f:6d:ef:42:
e2:02:e5:8d:37:ac:69:98:f7:16:9a:c4:7f:59:02:
40:2f:28:52:5f:47:64:df:6d:b7:86:f5:19:72:09:
75:18:04:ac:be:1a:34:4c:16:70:7c:f1:41:e9:cb:
93:52:59:f7:6f:96:cf:3c:31:da:da:ad:a0:c4:0b:
b8:ba:b4:86:8c:33:85:85:2b:8a:3f:f4:67:d0:e7:
00:20:23:bb:1e:67:ff:06:93:96:99:83:af:e7:5a:
f1:64:98:6c:46:ca:22:22:8c:dc:c6:7b:89:57:a5:
3b:a4:e5:13:fa:2a:78:fe:4c:22:a9:4d:bf:f0:61:
73:13:1d:ab:47:d1:cd:ef:68:c0:e2:50:89:f8:7d:
df:b1:b8:de:3b:8e:63:58:ff:4a:4d:6b:d4:b9:fe:
45:7a:ea:aa:59:aa:b1:13:d0:64:1a:93:c0:ad:98:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:03:9F:E8:68:FC:F9:4C:7F:1F:C1:31:1A:78:3C:E6:67:B8:48
X509v3 Authority Key Identifier:
keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/5607C3B0BEE211EFA4CEA589762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:7a:08:93:35:2e:65:9f:4c:c3:e3:2d:e5:92:49:2c:bf:b9:
d3:b3:6e:37:6c:5b:b9:89:4b:94:2f:cc:e9:44:b3:ed:50:04:
83:8d:8c:d3:b2:37:29:a7:f5:95:35:49:79:22:85:28:eb:8f:
a7:e5:b4:86:b5:2a:69:9b:18:e3:f2:12:dc:7a:e4:ea:19:1b:
1c:b7:79:d7:6a:a3:e2:f8:68:70:96:83:38:e7:53:94:71:24:
ee:31:b0:17:2d:2e:a7:6c:25:68:7e:55:c1:a6:12:c3:2e:0f:
ff:d0:6f:ee:88:dc:13:26:11:75:80:2b:37:55:53:9d:24:73:
eb:c2:b3:dd:3c:28:a1:dd:f4:ac:ad:d0:76:8a:69:0b:b2:f9:
6a:2c:83:99:94:cf:9d:60:eb:4d:de:6d:e3:fc:86:e4:de:fa:
aa:ba:e8:2f:27:91:26:32:8a:31:b8:7b:0f:1e:ea:33:51:fa:
b1:08:2c:9d:84:b5:fa:54:01:a9:b0:f7:a7:a9:34:0e:bc:94:
d1:d2:52:1d:0f:4d:a9:c7:fe:21:a9:90:47:c0:16:48:5d:9c:
86:23:a6:36:d5:51:69:ef:81:47:77:e4:7d:01:fa:f6:3e:62:
f0:94:65:ad:65:e7:39:9d:07:b6:d4:56:ad:8c:da:b9:6d:90:
c7:8d:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:53:10 2025 by rpki-client