Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/5110E694031F11F0BEF24185762E951A.roa
File: 5110E694031F11F0BEF24185762E951A.roa (raw, json)
Hash identifier: WjTHo5/2GMgpz/biHo/PTtID/ZgNKHDsBiz50asiS8I=
Subject key identifier: CE:9C:43:FB:82:EB:82:3B:1B:76:F9:56:30:3B:BC:D7:33:87:48:B2
Certificate issuer: /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial: 0301
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/5110E694031F11F0BEF24185762E951A.roa
Signing time: Mon 17 Mar 2025 11:02:29 +0000
ROA not before: Mon 17 Mar 2025 11:02:25 +0000
ROA not after: Sat 17 Mar 2035 11:02:25 +0000
asID: 37014
IP address blocks: 102.215.0.0/24 maxlen: 24
102.215.1.0/24 maxlen: 24
102.215.2.0/24 maxlen: 24
102.215.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAF
Validity
Not Before: Mar 17 11:02:25 2025 GMT
Not After : Mar 17 11:02:25 2035 GMT
Subject: CN=67d80145-6c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:6e:4c:ea:d1:24:21:c3:d0:26:7e:6f:97:
a3:86:4b:78:80:cc:79:c4:2a:cc:b5:66:a1:44:ad:
17:bd:9f:3d:88:8b:43:46:5b:4e:19:bf:10:57:ad:
3b:3f:f9:8d:41:23:4a:ff:2d:90:84:9f:40:c8:2b:
62:18:96:5d:0e:09:b1:3d:74:e8:f7:27:29:2a:6f:
4e:75:86:85:b7:d1:e5:fa:d0:25:27:bb:5a:0d:05:
dc:1a:fa:a5:37:08:35:bb:c3:35:92:62:e1:f6:0d:
08:7f:33:95:4c:15:a4:8c:f8:1c:c1:96:3c:4e:06:
7a:9a:d7:2f:34:49:12:41:01:8a:7b:54:94:14:82:
08:e5:24:2a:ca:a1:1d:7d:a7:42:75:d8:69:06:20:
48:b5:5e:90:c7:3b:b7:8e:55:7d:17:fa:33:69:07:
92:ce:47:a9:78:80:a0:2f:d2:9a:4b:45:88:2f:37:
b2:2b:7d:4b:40:7a:12:32:74:6b:08:46:de:36:5c:
d8:2a:27:e0:69:98:30:9a:4b:f6:0b:cd:61:4b:4e:
ec:41:14:42:b2:64:19:46:70:8d:23:ea:9d:db:98:
4b:2e:86:e3:ba:f2:d1:09:ec:8e:f6:78:3e:d2:01:
48:04:df:42:60:df:ef:9b:88:eb:71:28:10:5c:15:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:43:FB:82:EB:82:3B:1B:76:F9:56:30:3B:BC:D7:33:87:48:B2
X509v3 Authority Key Identifier:
keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/5110E694031F11F0BEF24185762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.0.0/22
Signature Algorithm: sha256WithRSAEncryption
68:98:28:b4:8d:50:32:48:3b:ae:e3:48:7d:5b:63:fd:c4:6d:
56:ec:1e:11:ee:e1:4e:22:87:b8:cc:43:0c:00:ff:19:01:63:
03:3a:3a:1b:34:89:8a:00:a8:a6:d3:99:b8:2b:4c:27:cf:be:
c3:0a:f4:03:75:b2:f7:f6:5b:db:4b:03:a8:32:82:5c:90:0d:
b7:79:7c:64:8a:df:c8:a5:29:dc:76:a9:34:5f:f5:96:4c:be:
7a:e5:90:f5:cc:49:a4:86:20:23:92:fc:d4:04:5d:61:97:03:
c0:1f:29:16:e4:56:90:8e:a6:45:4c:0f:20:88:54:7a:cc:86:
e9:0e:69:2c:92:79:5c:d2:74:92:80:4f:bb:bf:20:6a:27:77:
28:da:4e:a4:b8:2f:b3:a6:e5:09:6a:ca:45:e3:89:65:5d:d7:
40:29:ae:f9:f1:3b:f6:f2:88:5d:6c:d8:8c:05:ef:f6:0b:c2:
ac:4c:39:9c:0c:c3:5e:73:1c:59:2d:db:24:96:17:dd:8e:f5:
af:26:85:64:95:80:2f:d6:33:0c:a8:a1:d9:04:a0:d7:db:ba:
db:98:f3:5d:f5:a6:9f:23:fc:6f:ae:fe:7c:08:d2:44:5e:fb:
af:72:b7:a4:36:3f:f2:88:fb:09:43:fc:bb:eb:20:5c:ee:73:
17:b6:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:58 2025 by rpki-client