Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/A2FF32042FC511EFBE676196762E951A.roa
File: A2FF32042FC511EFBE676196762E951A.roa (raw, json)
Hash identifier: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=
Subject key identifier: 15:A4:4E:BD:EF:15:0D:5A:03:82:BB:20:3B:DF:B7:B2:F2:71:82:5E
Certificate issuer: /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial: 02
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/A2FF32042FC511EFBE676196762E951A.roa
Signing time: Fri 21 Jun 2024 11:58:56 +0000
ROA not before: Fri 21 Jun 2024 11:58:53 +0000
ROA not after: Fri 31 Dec 2049 11:58:53 +0000
asID: 37125
IP address blocks: 41.217.204.0/22 maxlen: 32
102.164.32.0/21 maxlen: 32
2c0f:fff0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Validity
Not Before: Jun 21 11:58:53 2024 GMT
Not After : Dec 31 11:58:53 2049 GMT
Subject: CN=66756b00-d756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:01:9a:63:6e:e2:48:92:7e:de:35:bf:f0:
de:fd:e9:41:6e:14:4b:43:ad:e5:3b:59:ac:2a:3f:
31:3e:44:a0:27:4f:6e:eb:35:fe:42:b6:59:11:94:
bf:28:e1:ec:c3:96:48:79:b3:4f:5e:2e:a4:48:4c:
fa:d6:93:a3:8e:9d:83:24:4e:45:75:87:67:a3:da:
df:09:a7:71:78:c0:2c:be:0c:80:14:3d:2d:c6:01:
8e:1b:72:95:6f:a5:8c:82:90:01:98:e7:bb:48:74:
05:21:fe:8d:a8:0c:90:24:2d:31:92:f5:fa:6d:11:
bc:11:5a:be:77:29:5f:9e:b4:23:87:a4:e3:f5:24:
f4:14:e2:35:79:d3:a1:cf:34:b3:09:02:98:f4:1d:
3f:ea:d1:28:de:77:35:f5:ff:ae:99:41:e0:bc:fd:
72:4b:a6:4d:94:d1:2c:55:c7:f7:f9:5b:e7:90:d0:
8a:d2:f7:ca:68:b9:bc:c9:3b:1f:10:ee:9a:03:7f:
8d:de:eb:32:e4:53:43:b3:7f:9a:2e:15:e7:2a:31:
8d:e2:73:d5:a3:cf:64:d0:c8:59:95:c7:f7:b4:23:
95:59:76:48:9c:32:bd:ac:73:9e:e9:84:4f:5b:e4:
ca:35:a1:21:88:c9:96:4d:3a:e1:f6:e7:28:ac:c5:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A4:4E:BD:EF:15:0D:5A:03:82:BB:20:3B:DF:B7:B2:F2:71:82:5E
X509v3 Authority Key Identifier:
keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/A2FF32042FC511EFBE676196762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.217.204.0/22
102.164.32.0/21
IPv6:
2c0f:fff0::/32
Signature Algorithm: sha256WithRSAEncryption
18:7b:ce:9f:24:6f:d6:00:88:34:89:c3:3c:2a:cd:2c:44:15:
ad:d3:6a:48:70:9f:8d:c0:89:c5:76:b4:f7:f8:e8:19:ff:75:
ad:01:72:c1:38:5b:a5:7c:99:a1:50:b3:c6:00:f4:28:6d:e7:
63:58:c9:e2:9f:66:11:7a:de:33:d8:e5:da:df:71:b5:81:1a:
a8:ad:e9:16:e3:02:5b:43:7d:65:1c:6b:6b:c5:98:0a:d7:c6:
f4:13:a0:87:ea:8d:01:e4:82:1b:c4:b6:56:1d:36:ec:a5:27:
29:d6:c4:00:ee:0b:f8:e9:88:b7:54:08:a6:bc:7f:27:19:5f:
f5:ad:a4:90:df:e2:1d:e6:1d:90:55:0c:74:0e:00:96:a8:2b:
8d:d6:9b:f5:aa:ed:3a:f1:23:67:f5:23:9f:f1:60:f1:f9:11:
fe:ea:95:f3:b9:b4:60:a8:aa:67:af:a6:25:78:e9:fd:8e:2a:
64:25:09:82:56:01:83:59:fd:cc:62:64:0e:02:6f:24:2b:48:
5b:67:fc:03:e3:82:5b:99:18:2b:e2:43:5c:47:48:b1:a6:5e:
01:c0:09:45:1e:1a:d2:77:51:4b:b5:df:40:0f:3e:02:a0:f0:
81:cf:2e:0a:14:51:23:14:ea:1a:a8:4f:a1:81:b1:0e:d3:36:
81:c7:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:49 2024 by rpki-client on console-fra.rpki-client.org