Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/20289B309D8511EF8A56A467762E951A.roa
File: 20289B309D8511EF8A56A467762E951A.roa (raw, json)
Hash identifier: G5InreV+s/mDjPnREuW/+fXZ42uW0S7SWpUVDZ23oTk=
Subject key identifier: C7:DA:89:90:E9:74:EB:0F:95:84:0B:D3:71:D8:76:B7:71:9E:F5:A2
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 083D
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/20289B309D8511EF8A56A467762E951A.roa
Signing time: Fri 08 Nov 2024 03:54:17 +0000
ROA not before: Fri 08 Nov 2024 03:54:13 +0000
ROA not after: Fri 01 Dec 2028 03:54:13 +0000
asID: 328366
IP address blocks: 102.207.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 Nov 2024 00:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Validity
Not Before: Nov 8 03:54:13 2024 GMT
Not After : Dec 1 03:54:13 2028 GMT
Subject: CN=672d8b69-8fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:41:c5:0b:9b:52:9e:02:a8:9d:e6:73:38:
97:db:81:84:b9:65:c9:cf:b5:3a:e4:46:79:77:7b:
d8:b7:af:e0:f9:56:26:63:5e:d5:68:5f:b5:4d:b4:
b3:f6:72:16:ac:b9:bd:6b:6d:c8:a4:bf:65:e0:91:
78:a3:1c:ed:ea:3e:c4:44:8d:de:6e:99:ce:2e:56:
da:fb:b7:53:44:a2:71:25:b9:59:f0:3c:d9:ea:9e:
4a:db:4a:eb:ef:65:39:21:88:d2:51:b9:1d:15:5c:
f2:9e:47:78:c6:1c:1d:f4:7e:62:4e:6e:df:6b:ff:
f9:ac:8f:7d:fa:48:c7:65:88:29:61:9c:62:f1:9d:
91:38:44:cc:83:b0:69:55:0d:c3:6b:7f:4b:84:c1:
0e:d8:3e:f7:45:43:30:97:0e:44:88:26:89:c2:e2:
5f:c9:b7:3e:87:3c:21:2c:3b:c3:5f:2b:5b:a6:28:
12:e5:2e:64:91:94:1f:35:37:0d:bb:88:56:14:09:
46:3d:86:d6:5e:80:4a:eb:ab:20:a9:c2:60:7c:eb:
b9:d9:5a:62:67:25:b1:f5:78:c5:c0:0f:12:bc:a8:
11:69:7b:01:e0:f2:87:f7:d4:55:75:d2:79:92:81:
71:e3:98:94:1e:74:a7:79:4c:71:7c:76:eb:69:fe:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:89:90:E9:74:EB:0F:95:84:0B:D3:71:D8:76:B7:71:9E:F5:A2
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/20289B309D8511EF8A56A467762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:6e:33:a9:e1:8e:c4:a3:fa:a9:ea:2b:1d:92:64:b9:9c:60:
67:18:a5:9b:45:e6:8e:c5:da:3c:cb:00:de:31:7e:54:27:66:
db:88:e9:09:7e:44:d0:64:df:60:98:5d:48:70:f1:df:d2:36:
24:00:d1:3e:cf:0a:ed:30:f5:77:13:30:3a:f9:06:71:18:5c:
6f:cb:a1:01:08:ea:d3:9c:ae:ca:65:4c:4d:c2:a3:4e:5d:d5:
91:3c:78:e4:2f:d2:1e:3a:d5:30:66:c2:51:4d:df:77:3a:6d:
b0:3e:af:a0:4d:cf:d6:f7:81:6b:be:06:3e:8a:74:bb:50:f9:
0d:92:a6:bd:05:f8:1a:2b:34:e1:8a:e7:3a:9f:cd:ee:8b:12:
d9:b8:43:5f:04:b5:f6:48:9e:b3:40:eb:3b:fa:01:08:c8:04:
04:39:c1:71:1e:1a:de:ec:e3:5f:57:b2:53:a8:51:ae:77:bc:
7b:2b:2a:7c:c0:e5:c8:48:11:85:4c:aa:ed:39:f6:73:fb:f5:
af:e2:c8:58:9a:f3:18:c2:68:c5:12:bc:43:8c:9b:c5:1a:ea:
cc:0f:23:54:59:c2:30:51:92:92:e6:7e:fa:af:14:8c:e1:bf:
ab:c4:93:f8:42:91:64:69:1d:0c:95:f9:84:23:e6:65:ca:19:
1b:bd:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:29:24 2024 by rpki-client on console-ams.rpki-client.org