Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/ACB50F14905311EF9F4DCCB4762E951A.roa
File: ACB50F14905311EF9F4DCCB4762E951A.roa (raw, json)
Hash identifier: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=
Subject key identifier: 2D:95:5D:97:E6:C1:81:A4:A0:B1:43:45:47:65:69:61:1F:F6:C8:FB
Certificate issuer: /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial: 0172
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/ACB50F14905311EF9F4DCCB4762E951A.roa
Signing time: Tue 22 Oct 2024 08:57:33 +0000
ROA not before: Tue 22 Oct 2024 08:57:29 +0000
ROA not after: Sun 22 Oct 2034 08:57:29 +0000
asID: 16509
IP address blocks: 102.210.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656BB8AF
Validity
Not Before: Oct 22 08:57:29 2024 GMT
Not After : Oct 22 08:57:29 2034 GMT
Subject: CN=671768fd-09b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:38:70:3a:b2:3b:bd:d1:1d:36:c7:7e:8a:
59:67:ae:b2:7b:9b:a1:30:fc:57:12:7a:ce:73:b2:
f4:3f:fa:c2:fe:91:e2:02:9a:e9:90:0d:b7:ca:8d:
21:eb:3d:cd:9a:1e:da:08:39:e3:43:83:66:ad:f6:
90:e3:ae:96:ec:f4:53:3e:ae:99:78:3d:6d:1a:2a:
74:6d:26:cb:13:72:74:75:86:3a:38:a8:ee:53:32:
de:6f:aa:24:38:f0:54:a0:85:1c:a6:8e:39:a5:33:
68:44:f9:b5:87:d3:17:31:f6:7a:e4:3c:08:aa:c6:
94:f5:88:e5:14:df:32:9e:8b:4b:32:c3:5a:4e:99:
d1:69:77:d2:93:c8:91:eb:77:25:bd:37:a4:1d:d5:
ed:d4:fc:f6:1b:47:90:cf:ee:20:e5:ba:3d:05:fd:
05:46:f5:da:2c:44:fa:5d:19:2c:5e:90:64:d1:9e:
e4:58:b3:79:4c:4e:3f:f7:0b:d1:5e:26:fb:38:82:
3b:12:f0:1f:98:b8:bc:13:35:f1:8c:ef:23:a1:b5:
28:1a:b4:83:4f:f8:8e:93:2e:95:69:c7:93:7a:65:
03:f4:12:13:48:83:b4:84:f2:f8:0d:ce:02:55:71:
e3:bb:0a:cf:3a:bc:aa:b5:2e:d4:21:96:cf:e0:74:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:95:5D:97:E6:C1:81:A4:A0:B1:43:45:47:65:69:61:1F:F6:C8:FB
X509v3 Authority Key Identifier:
keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/ACB50F14905311EF9F4DCCB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.191.0/24
Signature Algorithm: sha256WithRSAEncryption
69:01:15:d6:df:00:47:95:be:b6:2c:29:1d:5c:92:6a:2a:e3:
ee:aa:83:58:fa:a4:df:d9:b8:60:48:fb:2b:a7:7e:05:c8:ca:
bc:c6:f7:c7:ee:43:7d:57:8d:2b:5b:b1:20:2d:98:0b:06:2b:
72:b5:ab:58:dc:1a:39:31:43:0f:d9:ea:43:2f:07:20:95:b4:
16:13:91:8e:31:55:5b:ac:b5:ba:3e:05:a1:e2:b8:52:fc:7c:
c9:d2:43:88:f0:ff:60:a0:16:6c:1c:cc:31:af:d1:60:c1:c6:
58:ab:4d:e0:6b:bf:38:ba:2c:6f:f1:24:b2:53:c3:d7:87:8d:
a7:32:b7:d1:90:65:3f:7e:6d:73:41:a7:2f:bb:61:5c:b0:81:
15:de:c4:c1:70:4c:4f:44:ab:d0:83:41:a7:f1:eb:3b:c3:92:
39:6c:dc:6b:2d:11:21:5e:8f:bf:94:4f:20:ac:34:c9:7e:a2:
a3:69:c7:77:0d:31:dc:5e:67:cc:db:26:7c:31:ed:83:02:11:
8a:c8:b4:e9:e5:0d:30:c7:a3:67:bf:a8:ff:d4:86:98:18:25:
61:27:65:3f:da:cb:e8:b7:5e:9c:f8:fe:06:5c:cb:6b:72:2f:
f1:12:1a:7e:6a:5e:60:06:53:1a:5b:07:be:c3:54:43:75:06:
e0:41:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:31 2025 by rpki-client