Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/A860D670B24D11EF9178D468762E951A.roa
File: A860D670B24D11EF9178D468762E951A.roa (raw, json)
Hash identifier: CZNA+65qRaZByZrXC7MwxwGK34lyEikm+CF4MxQgD/4=
Subject key identifier: 6D:E6:CB:F4:E1:8B:4E:87:18:40:A9:44:F2:78:40:A0:BE:F2:50:D3
Certificate issuer: /CN=F368CC63AF/serialNumber=3F2D44F5035BD76916935671263D1F1FE22D3FD1
Certificate serial: 02
Authority key identifier: 3F:2D:44:F5:03:5B:D7:69:16:93:56:71:26:3D:1F:1F:E2:2D:3F:D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/A860D670B24D11EF9178D468762E951A.roa
Signing time: Wed 04 Dec 2024 14:40:08 +0000
ROA not before: Wed 04 Dec 2024 14:40:04 +0000
ROA not after: Mon 04 Dec 2034 14:40:04 +0000
asID: 36924
IP address blocks: 102.207.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl
rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 03:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368CC63AF
Validity
Not Before: Dec 4 14:40:04 2024 GMT
Not After : Dec 4 14:40:04 2034 GMT
Subject: CN=675069c8-3df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:4a:8c:f4:f0:7f:c5:c5:9c:44:fd:d1:8f:
74:92:d2:fb:dd:64:d8:64:b4:fa:cf:fa:ab:41:5c:
a2:03:9d:ad:f3:20:39:4e:d8:2b:b1:e2:fe:fb:68:
c3:69:49:c9:ee:68:66:92:cf:f1:c1:6c:2a:f0:6f:
bc:22:de:b5:4e:e5:5c:34:1f:e2:f5:ae:50:ab:d6:
d4:0a:14:4b:d4:32:1b:f0:c0:7a:2b:f0:45:57:f6:
06:83:7e:28:ac:bc:e0:5b:f2:17:87:d3:a7:ee:6a:
9b:17:86:f3:bf:0b:c2:d8:75:31:a9:3e:50:91:82:
91:02:d8:f2:68:7f:bd:e1:6c:1d:94:a4:6a:b3:f3:
75:fc:51:87:d3:bf:76:ad:d7:bc:82:18:04:a1:72:
2a:af:10:b2:f6:53:5e:9f:33:d2:05:08:95:af:4f:
a0:e5:cb:2f:83:e1:27:23:35:c3:20:b8:ac:6a:2b:
3f:54:a9:41:1c:35:c3:56:9a:07:ab:c4:35:46:59:
a2:62:f6:e0:29:15:88:ab:26:c0:0b:4b:a4:a7:bf:
86:3b:3d:11:37:00:7a:b4:57:e4:93:bf:4a:68:a1:
ca:ea:cd:8e:74:36:b1:36:cc:5d:48:1a:17:f0:f2:
42:4f:84:d5:7f:6b:8c:d3:d5:34:7a:81:06:b6:fb:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:CB:F4:E1:8B:4E:87:18:40:A9:44:F2:78:40:A0:BE:F2:50:D3
X509v3 Authority Key Identifier:
keyid:3F:2D:44:F5:03:5B:D7:69:16:93:56:71:26:3D:1F:1F:E2:2D:3F:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/A860D670B24D11EF9178D468762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.72.0/22
Signature Algorithm: sha256WithRSAEncryption
72:41:5c:47:06:68:bc:32:15:fd:0d:a2:07:a0:cb:8c:bc:b6:
f8:02:eb:f5:88:89:93:08:17:5c:0d:79:6f:81:b9:01:d8:fd:
fa:2b:f1:04:a6:4c:fe:d1:c3:df:31:9f:f3:f0:bb:d4:57:a0:
04:66:5c:1e:da:ec:9f:32:b0:74:3a:42:4d:dd:14:77:9b:11:
28:68:50:e1:ff:c7:6f:5c:fe:a5:70:0a:dc:67:62:f8:b1:6f:
45:cf:9f:f1:5e:e1:11:db:0d:cc:25:b2:fe:b0:be:b0:29:51:
e7:ab:78:0c:0a:2b:70:02:24:f8:a1:2b:f6:c0:1d:2a:3d:6e:
8e:b3:8b:45:6a:a0:e3:14:af:60:f4:50:4d:1b:c3:1f:ed:fe:
c0:b1:59:b8:67:86:a4:1b:bc:49:72:7a:41:05:f7:77:0c:f6:
5e:f2:93:7d:5c:9c:dc:48:61:1f:71:70:ae:83:19:9b:8a:12:
59:39:48:35:6c:0e:10:21:40:f0:7c:f1:19:88:bb:25:50:85:
2f:7e:8a:77:7c:9c:a8:24:ef:bc:b1:2d:e4:bb:f0:09:2c:0d:
33:13:7c:71:91:3c:2c:cb:56:4a:de:96:4e:66:0f:e5:b8:de:
77:a9:8c:55:cb:47:8b:3e:8c:a9:1e:8b:d3:88:d2:be:61:c5:
d4:69:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:05:19 2025 by rpki-client