Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/311C4904CA4B11EEB1A20B86775412E6.roa
File: 311C4904CA4B11EEB1A20B86775412E6.roa (raw, json)
Hash identifier: 6Jipg/U2Wzl+hCZ+uZdXwq1gTXKTDFOFMoiu2FzO3Lc=
Subject key identifier: DC:7A:7D:A4:C3:24:5B:DC:13:53:82:AC:4B:FB:22:48:19:32:75:31
Certificate issuer: /CN=F368D658AF/serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
Certificate serial: 02
Authority key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/311C4904CA4B11EEB1A20B86775412E6.roa
Signing time: Tue 13 Feb 2024 08:37:59 +0000
ROA not before: Tue 13 Feb 2024 08:37:56 +0000
ROA not after: Wed 13 Feb 2030 08:37:56 +0000
asID: 328443
IP address blocks: 102.68.152.0/22 maxlen: 24
2c0f:eca8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368D658AF
Validity
Not Before: Feb 13 08:37:56 2024 GMT
Not After : Feb 13 08:37:56 2030 GMT
Subject: CN=65cb2a67-2d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:50:23:bf:ac:84:7a:d6:b5:cb:21:3f:31:
26:d4:fc:8a:0c:b6:e6:e1:8c:1d:29:9b:15:c6:66:
20:40:f9:c9:5a:1e:61:65:27:c6:4d:fe:33:ce:2a:
2d:43:5b:18:4e:06:84:e7:48:1b:d2:14:a5:e5:fd:
47:28:f8:e3:95:c5:21:57:47:34:69:90:17:96:6b:
c6:52:0d:70:1d:e1:98:e2:d5:63:8c:15:0e:17:18:
ad:fb:9a:51:b6:52:fa:da:d0:28:83:3d:2a:85:88:
a2:5d:d9:b7:a1:f4:36:ae:33:53:43:09:af:8d:57:
64:20:14:e3:04:d4:c6:1f:bb:65:d6:b1:cc:a0:01:
7b:bc:ed:e2:6c:28:ef:8c:15:31:35:a0:9b:69:0b:
99:8c:8a:9b:8c:1a:91:f9:bf:8d:33:10:29:5a:b8:
86:cf:10:92:c7:95:70:6a:7d:53:8e:92:22:11:f4:
9a:52:43:47:0c:9e:84:c2:1d:fa:88:2f:e7:15:c7:
7e:35:65:29:ed:48:ab:e1:8e:25:16:af:74:24:fb:
b2:d1:1a:80:53:1f:39:a0:72:25:34:1a:99:4d:6a:
bd:79:8e:30:37:fc:f8:a2:63:4a:4b:50:a1:2d:e6:
94:c5:52:d7:80:c7:83:70:90:51:90:23:47:9f:d9:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7A:7D:A4:C3:24:5B:DC:13:53:82:AC:4B:FB:22:48:19:32:75:31
X509v3 Authority Key Identifier:
keyid:FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/311C4904CA4B11EEB1A20B86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.152.0/22
IPv6:
2c0f:eca8::/32
Signature Algorithm: sha256WithRSAEncryption
19:af:b4:8a:a3:41:44:ed:01:35:09:0d:92:0e:5c:ab:7d:3a:
4b:90:9e:9a:1b:7a:61:cf:c4:51:ec:3d:42:95:e7:89:fb:54:
ee:f4:b8:49:48:ae:15:69:5e:b2:c6:9f:d0:f8:8c:51:d4:68:
92:2e:82:d0:ef:b8:1b:21:95:73:13:93:6c:d4:eb:90:71:33:
2e:bc:bc:b2:d3:ff:78:98:1d:19:40:d2:6a:8d:ff:19:4e:5b:
0f:44:83:eb:db:75:2a:40:2f:93:03:e3:6c:17:8b:4c:e7:65:
ab:32:ec:d4:40:af:9d:82:79:41:5a:83:bc:87:32:0d:22:5e:
db:cd:e9:b8:51:91:5f:88:6b:e8:0c:32:8d:49:fe:ae:0b:5e:
4b:30:ed:1c:f9:d2:4c:4d:a1:e0:0b:63:bf:ff:f5:39:cf:15:
49:bd:c7:75:c9:71:7c:c5:af:9a:ab:d5:1d:52:b8:61:dd:14:
67:da:47:7b:2d:43:08:c3:e0:c7:a8:be:0f:ac:24:1c:89:f2:
f5:1f:fe:fa:8a:2a:fa:74:aa:a8:c8:c2:1b:3d:96:47:5d:f1:
cc:09:78:53:72:9e:05:a6:71:bf:3c:c8:8f:9a:0e:fa:05:3d:
98:9d:0b:ef:59:fd:57:3e:fe:ed:33:63:46:cd:b6:84:94:56:
34:90:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:10 2025 by rpki-client