Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F4A292E4530211EFA2429060762E951A.roa
File: F4A292E4530211EFA2429060762E951A.roa (raw, json)
Hash identifier: ZE9lc8CUZUNulrngr6NfzabolNWIIxQbBDsBB/CS7u4=
Subject key identifier: EC:7A:B7:36:B7:29:F5:53:2E:16:12:A2:69:5C:AD:03:AD:1B:74:4F
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0585
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F4A292E4530211EFA2429060762E951A.roa
Signing time: Mon 05 Aug 2024 08:16:03 +0000
ROA not before: Mon 05 Aug 2024 08:16:00 +0000
ROA not after: Mon 31 Mar 2025 08:16:00 +0000
asID: 174
IP address blocks: 102.177.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Aug 5 08:16:00 2024 GMT
Not After : Mar 31 08:16:00 2025 GMT
Subject: CN=66b08a43-60c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:17:b3:cc:18:18:e3:0d:12:09:a3:32:ef:
17:65:1c:6e:73:0e:7b:c9:c1:94:20:70:ec:f2:e5:
3d:57:46:be:57:41:0c:0a:98:ad:ca:63:91:71:05:
fe:62:70:db:17:44:1b:4c:18:46:1d:7d:42:0d:d1:
e2:39:11:fa:1a:26:d6:7c:d5:93:a7:95:df:c7:8f:
04:db:db:f9:5c:3b:0b:f6:52:b7:bd:21:e5:5a:d2:
26:7c:b9:56:a3:8a:76:54:43:8b:cb:b7:66:ce:ad:
29:3e:0f:8f:d1:e6:07:fc:dc:77:b2:21:b2:42:b5:
7e:ec:73:55:50:ed:9a:19:ad:e9:24:61:7f:fb:1b:
09:c8:2e:9d:94:cc:93:ca:d8:aa:c3:7d:f4:8b:19:
99:48:a2:36:02:86:f7:50:b8:8d:57:95:f6:85:23:
08:3c:34:d6:4f:49:d1:30:2a:78:72:74:bf:93:80:
7d:03:ca:9c:c0:43:9c:e2:dd:9a:ac:2a:eb:4b:8c:
b5:3f:88:06:15:c1:24:2c:4c:6b:77:47:b4:23:ce:
32:c3:5b:b3:8d:53:54:21:93:9e:16:99:c4:ef:28:
df:b9:b5:e9:cc:bf:24:de:12:67:b0:79:ba:1e:a9:
e9:12:f3:61:d0:70:6a:bf:e7:9e:1e:19:71:1f:fb:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:B7:36:B7:29:F5:53:2E:16:12:A2:69:5C:AD:03:AD:1B:74:4F
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F4A292E4530211EFA2429060762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.146.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:3c:f5:6f:84:69:19:51:73:12:8c:8b:2b:73:89:db:5e:5e:
1f:a5:56:11:79:0d:12:65:4f:6f:50:1e:e4:f5:4f:d8:5d:e7:
d1:14:92:e3:2a:3d:a1:ca:ff:22:a2:02:4a:1c:9c:4d:bc:a9:
13:5b:8a:9d:ab:72:ac:f2:de:60:32:e6:07:94:77:8f:f2:7c:
36:d6:32:52:2f:a7:5d:db:54:2d:b2:2c:7e:6f:9b:8a:0b:4a:
af:1f:71:87:13:c7:61:d6:15:10:27:0f:38:be:59:0d:b5:8a:
5b:a3:31:fe:b1:fc:4c:f1:1b:28:f4:87:0b:e7:47:94:ae:aa:
3c:51:a2:cd:3d:e2:61:4f:60:b6:49:96:d6:27:3c:58:22:14:
e5:4c:72:81:0f:d4:fb:24:2c:0f:d9:33:b4:49:04:f6:ae:5c:
af:61:d4:4a:30:20:73:50:ef:69:84:d3:60:92:b6:e7:c7:d8:
28:bc:fb:dd:9b:ae:8e:4b:52:3f:c2:42:9f:54:2d:d2:13:5f:
6d:ed:a9:a1:bd:74:72:6b:eb:82:86:21:3e:13:7e:99:72:9f:
d5:a1:a8:17:5a:fd:a4:49:12:ba:2f:71:95:b2:d1:83:1b:1c:
e5:01:31:3f:20:f5:d9:dc:53:9a:95:16:30:2d:69:e7:98:da:
15:e6:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:10 2025 by rpki-client