Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/A864F076BE9611EE998D299D775412E6.roa
File: A864F076BE9611EE998D299D775412E6.roa (raw, json)
Hash identifier: 1SOFM20prFpQpyBQ79yS3b8vfUM/+4DhWbKvJj39ado=
Subject key identifier: CB:76:5D:37:A7:D6:47:21:EC:74:CA:2A:45:0F:C7:E4:80:38:F1:EB
Certificate issuer: /CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Certificate serial: 02
Authority key identifier: 92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/A864F076BE9611EE998D299D775412E6.roa
Signing time: Mon 29 Jan 2024 11:07:57 +0000
ROA not before: Mon 29 Jan 2024 11:07:54 +0000
ROA not after: Mon 29 Jan 2029 11:07:54 +0000
asID: 329336
IP address blocks: 102.210.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Validity
Not Before: Jan 29 11:07:54 2024 GMT
Not After : Jan 29 11:07:54 2029 GMT
Subject: CN=65b7870d-92ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:72:39:b0:fd:7d:4b:61:22:d7:ca:3b:6f:
fb:14:82:67:26:74:46:de:94:3d:1d:97:05:b8:b3:
9d:57:50:02:e6:bd:b6:b4:84:c9:89:b7:fc:fd:06:
ef:0c:a3:90:0e:75:92:cc:1e:a5:bd:1f:d6:41:e3:
b1:6b:ba:94:c6:49:ff:ce:6d:10:58:a0:ac:f3:ed:
a5:60:e0:fe:d9:3c:d3:52:62:51:30:cc:f2:d4:cd:
95:b9:ba:53:4f:6e:88:db:fb:94:c8:5d:28:e1:c5:
67:a4:b0:6c:b8:23:20:b6:f6:fc:eb:a7:8c:b8:8f:
16:82:ae:3d:0a:79:fb:c8:88:49:3b:d6:fc:e7:bd:
32:e9:68:3c:aa:04:90:40:c3:fb:bc:58:58:69:84:
33:3b:85:42:5f:e7:48:a3:57:02:10:5e:d4:96:23:
76:89:e0:ef:8f:98:1c:1c:3c:a0:8c:b9:bc:72:87:
2a:1a:f8:16:69:64:37:29:e3:f9:b6:83:f9:d3:1c:
ac:65:7a:26:fd:e7:e2:70:8e:a5:12:cb:47:d4:22:
c0:9e:71:4f:2b:9e:c2:ba:30:f5:d2:9b:e1:ce:4c:
1a:15:1a:31:e9:c1:2a:a1:3e:9b:fe:c2:df:f9:32:
8a:ba:04:c2:fa:7f:75:f4:68:f3:d7:19:83:77:0a:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:76:5D:37:A7:D6:47:21:EC:74:CA:2A:45:0F:C7:E4:80:38:F1:EB
X509v3 Authority Key Identifier:
keyid:92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/A864F076BE9611EE998D299D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.254.0/23
Signature Algorithm: sha256WithRSAEncryption
93:6d:44:43:f1:1d:49:4b:7f:49:13:46:a7:b4:ad:05:9d:3e:
21:4c:dd:d4:e2:fe:ed:36:52:1b:93:07:71:2f:86:40:d2:b4:
db:9d:82:61:7e:1d:ac:b1:42:c8:a7:5b:1f:9c:da:79:88:00:
b9:d6:0e:a7:d2:75:65:15:2f:67:3d:58:f8:cc:10:4c:03:80:
05:e3:ff:23:a8:cb:6f:d4:85:0c:ff:93:b5:a4:97:3e:85:93:
af:41:bb:05:3d:25:5f:9e:00:27:a1:c6:34:ee:ca:5a:69:9f:
5b:e6:b5:90:d0:b7:62:79:f6:a5:aa:2b:99:7a:a3:65:f9:52:
8e:cd:ac:9c:b7:9d:b2:8e:4c:66:6e:08:63:50:de:3e:b9:ee:
da:fa:e6:1c:48:b4:a1:6c:ce:1f:a5:07:71:5d:1b:06:c2:d9:
67:3f:80:a5:ed:5c:5c:f4:e1:d2:df:65:5a:1c:5f:27:d5:31:
33:ef:f3:ee:1e:73:3d:88:22:fd:1a:cc:b3:94:9b:dd:05:ca:
c4:a6:b1:03:7a:72:ef:a0:19:21:8e:a8:ed:23:9a:01:e9:14:
18:00:04:8e:4c:18:45:91:45:8f:6f:78:bc:3f:90:fa:bb:22:
34:b5:11:ea:d0:8f:54:d1:ad:c0:49:3d:e8:c7:90:f1:0d:5e:
83:ef:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:43 2024 by rpki-client on console-ams.rpki-client.org