Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/EBC72644C12011EFA34E2AAC762E951A.roa
File: EBC72644C12011EFA34E2AAC762E951A.roa (raw, json)
Hash identifier: FBA7XhhYZKd8zAiwrkhqOdWNSKf23ZrcRwoec3JtQJI=
Subject key identifier: C1:B6:AF:3B:30:9E:2E:78:13:97:F6:A5:EE:26:9D:C4:BF:DC:18:02
Certificate issuer: /CN=F367B3D1AF/serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
Certificate serial: 02
Authority key identifier: F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/EBC72644C12011EFA34E2AAC762E951A.roa
Signing time: Mon 23 Dec 2024 11:27:41 +0000
ROA not before: Mon 23 Dec 2024 11:27:37 +0000
ROA not after: Sat 23 Dec 2034 11:27:37 +0000
asID: 37163
IP address blocks: 41.78.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 03:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B3D1AF
Validity
Not Before: Dec 23 11:27:37 2024 GMT
Not After : Dec 23 11:27:37 2034 GMT
Subject: CN=6769492d-488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:26:3a:47:21:6f:8a:9a:5f:e3:d6:00:45:
6f:c4:91:ea:22:16:16:46:45:b9:0c:1d:69:8e:2a:
ce:62:18:2a:b9:82:e1:85:4c:ff:35:49:82:c5:c4:
a3:d6:db:3d:2e:15:35:da:ee:4b:b8:d3:33:ba:31:
19:4f:7d:26:58:18:c7:75:13:47:e3:fa:f0:be:5c:
b1:d7:0b:7a:61:c5:41:ed:29:e2:e3:58:39:85:51:
5a:a4:82:35:b9:c2:23:0d:08:57:20:24:0b:28:ab:
a0:08:dd:5b:94:b3:76:60:73:a7:9c:60:23:4c:be:
82:75:24:47:cf:c8:b6:14:ee:7c:a4:a6:52:d8:d1:
04:c6:7e:82:1b:ec:db:56:c8:9d:86:11:b5:41:6c:
e6:ec:6e:df:7d:cd:c8:6c:89:fd:2e:b4:b0:4a:76:
18:47:bb:af:e8:c3:48:9b:f2:dc:83:6d:1f:63:05:
45:ca:ce:35:dc:60:f1:29:c9:85:d8:09:93:2b:2b:
38:1b:2f:41:5f:8b:4e:d0:f7:8a:79:93:5f:fc:e5:
c8:b0:2b:78:b1:06:85:32:0f:75:4a:b2:e5:e4:3c:
92:2d:9c:8d:02:47:35:88:6d:a7:7e:40:fd:3e:39:
e1:22:ac:c0:b9:68:4a:bb:8a:1c:82:da:ca:3c:0d:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:AF:3B:30:9E:2E:78:13:97:F6:A5:EE:26:9D:C4:BF:DC:18:02
X509v3 Authority Key Identifier:
keyid:F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/EBC72644C12011EFA34E2AAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.48.0/22
Signature Algorithm: sha256WithRSAEncryption
99:7f:92:28:1f:9f:47:c5:87:67:f1:74:03:04:84:01:1c:30:
a8:49:f6:5c:ba:d4:b3:d3:96:18:6c:ee:b5:cd:cd:9a:f0:45:
59:12:25:3c:ec:f0:b0:c2:c2:e3:8f:07:49:d2:5c:71:b5:7f:
e6:38:f0:eb:f7:61:a1:e7:cc:4a:42:b6:98:69:2d:b1:1e:4f:
8a:cf:e0:99:8f:c1:54:5f:07:af:22:ec:75:9f:3a:07:47:50:
44:b0:d7:7f:7c:e1:18:5c:ef:11:a1:28:51:98:12:f2:94:0b:
4c:04:84:01:af:b9:37:5c:27:c6:c6:80:0f:80:92:db:77:25:
37:23:d3:94:12:ce:bf:0a:49:4e:98:65:a7:27:f4:8d:c6:09:
bc:df:fc:59:5f:4a:a8:ce:c8:cf:ca:e1:4a:8d:67:d4:76:31:
33:cc:a2:fd:97:66:47:c7:3f:22:12:3e:91:d1:62:9b:4d:2c:
d6:94:93:18:a4:d4:b5:f0:37:57:4e:74:7f:e7:08:f1:6c:1f:
c5:b4:4e:e0:e6:b9:b6:40:86:95:65:70:47:72:7b:da:c9:67:
64:36:1f:02:d4:ed:d3:1a:47:8a:e2:8a:d0:ae:26:d0:c9:90:
85:85:bd:64:ef:5a:e3:d1:e2:a8:51:bd:17:26:7c:64:09:77:
92:7b:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:47:02 2025 by rpki-client