Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/C4815F54D81E11EFB891499E762E951A.roa
File: C4815F54D81E11EFB891499E762E951A.roa (raw, json)
Hash identifier: wuzVVrhPQApx6Smw2Hs9Pgr/IoLeBCq0Aedko2SwUlE=
Subject key identifier: 5D:8E:66:BB:CB:8F:6C:DA:AA:C6:6A:37:8C:A0:AA:0F:6C:63:98:02
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 0160
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/C4815F54D81E11EFB891499E762E951A.roa
Signing time: Tue 21 Jan 2025 17:40:13 +0000
ROA not before: Tue 21 Jan 2025 17:40:09 +0000
ROA not after: Wed 31 Jan 2035 17:40:09 +0000
asID: 328866
IP address blocks: 41.92.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF
Validity
Not Before: Jan 21 17:40:09 2025 GMT
Not After : Jan 31 17:40:09 2035 GMT
Subject: CN=678fdbfd-70f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:9a:7c:78:c1:94:bb:a2:b3:b1:d1:d6:f2:
87:dd:e0:47:f2:71:c6:ba:d0:93:df:06:b5:fb:64:
de:4b:83:67:ae:79:cf:fb:98:70:ba:da:3b:61:0e:
9c:7f:4a:58:fc:68:42:c8:21:59:4a:f7:a1:0c:70:
f6:5e:16:e3:3b:96:b5:20:48:eb:9f:4c:25:0b:c4:
a5:5e:f3:02:48:d2:23:67:d5:0f:9f:5d:c1:41:bf:
13:0c:bf:36:46:68:7a:43:a8:1e:04:ae:4c:cd:5f:
b0:7b:dd:3f:90:44:23:95:25:d0:0d:58:d9:5a:20:
9e:09:08:d0:08:e5:84:7e:f6:2c:2a:6c:df:0e:dc:
7a:99:00:bc:e7:d6:b9:ec:48:16:5f:d4:df:e8:63:
32:59:56:cd:d1:f7:f3:15:21:2c:cf:2f:27:68:b5:
e5:eb:59:a0:74:5a:32:58:90:34:c0:c9:ce:fc:52:
3e:bd:d6:67:0e:c7:c7:3c:03:25:74:96:17:69:18:
e1:e8:3c:c6:7f:44:0e:f4:05:0b:09:6e:b2:16:db:
2c:f8:58:93:dc:41:67:dd:ef:74:c9:55:32:b4:cd:
2e:72:09:3c:06:ae:34:bb:53:0d:40:fb:d2:44:59:
05:c6:58:d6:94:23:56:b8:88:5e:8a:43:78:cf:b2:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:66:BB:CB:8F:6C:DA:AA:C6:6A:37:8C:A0:AA:0F:6C:63:98:02
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/C4815F54D81E11EFB891499E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.208.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:6d:be:c2:db:66:e1:15:1f:5a:36:35:15:98:c9:76:3b:9a:
8b:7b:3f:a0:2c:f7:ce:62:0b:fd:6e:07:dc:e7:f6:f9:83:a6:
25:47:d9:b8:4c:28:20:99:41:5a:96:b5:1c:15:e6:e9:e0:f2:
5e:a6:42:78:e6:f4:ef:b5:63:25:8c:55:d7:cf:ed:3a:f9:a0:
d7:38:4e:6a:94:7e:84:fc:e3:0b:0c:a3:99:47:51:3f:a8:9f:
db:7d:51:0d:c1:14:61:5a:24:5a:71:46:c2:0a:fa:7b:8c:f6:
80:f4:dd:48:62:c2:e0:af:c9:22:a5:aa:e2:ce:02:4d:b8:2f:
2b:4d:0a:4d:7f:f4:37:21:f4:a8:e0:a9:a3:fe:3c:0e:e9:f7:
dc:c4:c9:e7:50:d6:36:3f:65:c0:19:55:cd:83:3b:87:5f:90:
c7:3a:b4:e6:fa:86:5e:de:4a:ed:66:eb:76:f1:94:09:28:d6:
09:9c:3b:0e:d5:02:20:46:e3:7b:e2:79:71:20:b5:95:ac:0d:
a4:18:61:73:74:64:b6:66:db:3a:66:11:29:24:41:53:43:3b:
3a:19:51:b3:15:64:98:e7:99:b8:88:7f:ea:bb:eb:53:c4:75:
92:ba:76:a1:83:3b:67:c9:b2:b8:e4:c3:67:e6:aa:cc:4a:e6:
92:fa:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:50 2025 by rpki-client