Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/5A2E307A36A511EF9A374E85762E951A.roa
File: 5A2E307A36A511EF9A374E85762E951A.roa (raw, json)
Hash identifier: 1bOt+FhFIXXisYLPLzrSXRkpo4OkPSIicQ17PtfC3mM=
Subject key identifier: BE:A4:68:7D:CA:5D:D3:70:A2:F9:F3:3A:BF:1D:7A:1E:51:EB:BA:C4
Certificate issuer: /CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Certificate serial: 01D5
Authority key identifier: 6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/5A2E307A36A511EF9A374E85762E951A.roa
Signing time: Sun 30 Jun 2024 05:55:28 +0000
ROA not before: Sun 30 Jun 2024 05:55:23 +0000
ROA not after: Mon 29 Jun 2026 05:55:23 +0000
asID: 17400
IP address blocks: 196.29.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362CE41AF
Validity
Not Before: Jun 30 05:55:23 2024 GMT
Not After : Jun 29 05:55:23 2026 GMT
Subject: CN=6680f350-caa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:86:91:06:45:db:3c:10:6d:91:69:e0:c7:
1b:49:76:7c:0a:a4:98:e9:c0:18:b1:92:b1:0b:a3:
df:84:cb:35:92:a2:59:d7:1f:5a:1a:f1:dd:6e:90:
48:f0:4e:0f:19:8f:1d:8b:85:6c:2a:9a:53:f2:c6:
8f:bb:5d:44:af:82:07:3c:3b:d5:52:88:1c:41:fa:
d5:11:a7:d9:3b:25:9a:1d:e9:da:d9:38:c9:fa:e7:
be:1f:4a:54:81:0b:f6:c2:35:cf:97:37:71:b6:cf:
3b:c9:03:83:12:0a:5a:94:85:9b:a3:dd:a3:59:e5:
76:78:30:ae:6b:05:a1:96:9a:78:d4:01:98:c9:2f:
d3:64:2a:4d:de:aa:a7:bd:84:a7:84:b4:7d:1e:98:
cb:cd:00:4e:e3:2a:62:78:7a:38:45:5b:8e:9a:61:
25:ba:26:c6:7e:34:dd:64:c1:66:cb:d8:10:d2:e7:
f8:c0:25:42:ff:79:2d:31:4e:ac:16:1c:9b:95:ea:
4b:59:ee:bf:a9:44:4e:46:01:91:72:ae:6e:33:ca:
3b:24:54:1e:59:e4:b5:dd:7b:5c:61:02:fb:a7:a8:
ee:10:35:ae:b5:4d:52:ec:f0:45:60:c5:c1:01:19:
64:55:b1:2f:6f:7a:6d:c8:df:40:be:1e:e8:1a:ea:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:68:7D:CA:5D:D3:70:A2:F9:F3:3A:BF:1D:7A:1E:51:EB:BA:C4
X509v3 Authority Key Identifier:
keyid:6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/5A2E307A36A511EF9A374E85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.29.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:62:65:26:ea:a0:08:f7:39:9d:a7:58:ee:cd:64:a6:a5:4b:
45:c7:7d:84:43:38:fb:81:95:43:90:96:d4:11:bc:30:53:a4:
93:b4:e1:59:c1:83:21:02:e1:8e:9b:97:5c:6d:84:0b:19:6e:
3f:2e:51:31:2e:c6:81:2d:b5:44:86:7a:44:7f:12:4d:69:ba:
bb:46:93:0a:23:f3:41:69:8c:b2:69:a1:f7:cb:9d:69:e8:72:
51:a5:38:4c:65:94:ae:ee:6b:ab:e5:bb:e0:35:4f:22:03:5e:
47:42:00:1d:b6:ef:e1:a4:43:22:2d:19:41:47:11:9e:b6:ef:
b6:d0:1e:3d:31:a2:6e:bd:0d:6f:b3:9d:55:6d:31:8b:73:ce:
69:8b:fc:ca:b6:09:64:ba:e9:19:eb:e9:ab:e4:2a:32:a7:ec:
c2:27:1a:2c:9a:6b:ee:82:d6:93:c3:4a:00:0d:2f:32:dc:7b:
13:6a:6d:11:41:a3:13:fc:a5:e3:00:e1:c2:48:a0:d2:fc:04:
1d:de:82:e9:ca:dd:da:55:6e:3b:bf:41:be:14:64:79:f7:47:
58:25:99:5e:41:4a:a4:66:cf:8b:46:df:2a:2e:12:64:3f:2d:
4f:18:06:fb:5c:a4:1a:7a:ee:7c:3a:a8:81:93:c2:bb:2b:10:
0c:24:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:12 2025 by rpki-client