Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3BA89F7EC74511EFB913F8BC762E951A.roa
File: 3BA89F7EC74511EFB913F8BC762E951A.roa (raw, json)
Hash identifier: r31DEOOcMxqWuyYxSuL7E+LyMqbWwnDCqF5E4HURob4=
Subject key identifier: 59:5A:9D:F3:A3:1F:15:84:E9:D7:34:A4:74:35:DF:59:67:86:30:A7
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 05B7
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3BA89F7EC74511EFB913F8BC762E951A.roa
Signing time: Tue 31 Dec 2024 07:02:44 +0000
ROA not before: Tue 31 Dec 2024 07:02:40 +0000
ROA not after: Sun 31 Dec 2034 07:02:40 +0000
asID: 37053
IP address blocks: 102.206.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 01:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1463 (0x5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF
Validity
Not Before: Dec 31 07:02:40 2024 GMT
Not After : Dec 31 07:02:40 2034 GMT
Subject: CN=67739714-2e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:b2:a9:c9:03:bc:01:4b:7d:14:46:99:b2:
8d:29:fb:b1:07:22:d0:e6:0f:bf:18:d9:cd:4b:7d:
1b:11:cd:91:84:bc:c1:8a:95:22:b5:85:82:17:7a:
ef:09:52:ca:a2:aa:9c:ec:88:8d:33:f7:72:c4:77:
03:77:7e:3c:40:14:f7:36:6a:14:36:02:79:a8:b9:
7e:0c:8e:64:12:58:e1:f8:05:ba:91:b2:91:3d:b2:
d2:29:60:0a:c8:50:71:93:6b:25:09:bf:15:72:68:
4b:23:1a:c8:28:70:f2:de:f3:f9:ad:28:2e:d8:83:
b6:ab:a2:7b:61:a9:ef:75:23:ad:b5:20:20:9f:40:
06:5e:f5:23:40:8a:bd:7c:76:05:45:a0:01:de:0e:
61:37:16:13:92:2a:a6:ef:4b:65:e9:28:8e:e1:21:
09:d3:78:d1:e3:8f:7e:09:76:17:fd:34:47:d6:3c:
f8:d0:ae:80:04:1e:fd:ff:a6:7f:46:1e:81:43:f5:
d9:f6:24:f8:97:07:3d:41:8c:96:af:4b:7b:4a:b5:
2d:96:4b:4c:b7:0c:93:b4:72:10:04:2b:6a:97:1d:
69:17:d0:b1:82:83:e4:73:3f:62:4b:58:38:95:a6:
87:3f:49:37:99:63:ee:1d:b7:fc:3d:5c:68:24:b9:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:9D:F3:A3:1F:15:84:E9:D7:34:A4:74:35:DF:59:67:86:30:A7
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3BA89F7EC74511EFB913F8BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.208.0/22
Signature Algorithm: sha256WithRSAEncryption
87:65:d3:26:80:7d:d1:84:c2:03:2a:ae:db:27:d8:da:80:60:
3a:4f:fd:9d:f2:7b:7d:22:cf:8c:57:61:86:ee:66:8c:20:dd:
5b:cb:91:ad:97:0f:ea:b7:c5:60:d3:51:9e:d5:98:20:63:56:
e5:e9:0a:ff:01:76:27:fa:ef:99:9c:f7:74:89:e1:02:15:5e:
d6:09:b1:b3:47:0b:38:a7:f7:71:48:e6:5d:d8:24:12:0d:0f:
c5:21:9d:2d:c5:f0:8f:7e:74:c2:03:ba:0c:f3:bc:54:2b:ba:
fe:1c:85:8a:be:1c:a6:15:aa:a3:d5:08:de:56:57:27:6b:56:
fc:44:9d:1a:48:17:d2:ff:27:18:64:e2:2c:87:29:2a:04:26:
0d:ae:38:dc:f5:8f:11:4d:43:3d:0a:88:8c:f8:82:56:06:a0:
3f:44:2d:a7:ba:d0:57:45:1b:92:6a:a3:5e:f3:e4:f6:db:bb:
0c:6e:d3:0b:8e:2e:ab:76:c3:49:ab:4f:58:5a:44:84:74:61:
ab:ca:56:c7:a7:cb:a3:43:dc:82:af:9f:b2:be:e6:0c:ae:85:
d4:f8:70:b1:22:8f:85:9c:f0:e6:3c:6e:aa:04:95:86:88:aa:
a8:c0:c6:09:d3:98:7e:b3:e4:ca:f5:c0:98:38:22:8a:44:21:
ab:45:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:01 2025 by rpki-client