Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/F56FFE86912911EFAEEF2B78762E951A.roa
File: F56FFE86912911EFAEEF2B78762E951A.roa (raw, json)
Hash identifier: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=
Subject key identifier: 5E:5E:E7:14:AB:91:FD:20:BF:4B:84:81:E8:C8:2C:EC:A2:76:A0:01
Certificate issuer: /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial: 02
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/F56FFE86912911EFAEEF2B78762E951A.roa
Signing time: Wed 23 Oct 2024 10:31:27 +0000
ROA not before: Wed 23 Oct 2024 10:31:23 +0000
ROA not after: Mon 23 Oct 2034 10:31:23 +0000
asID: 329471
IP address blocks: 102.208.176.0/22 maxlen: 22
2c0f:40c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Validity
Not Before: Oct 23 10:31:23 2024 GMT
Not After : Oct 23 10:31:23 2034 GMT
Subject: CN=6718d07f-7bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:bf:ce:8d:56:3a:36:b3:5b:10:b8:23:7e:
fc:2c:90:c3:41:b2:28:94:cf:2b:e1:22:b5:f9:bb:
bc:7c:a6:22:bd:46:71:26:dd:08:68:6c:75:e3:31:
4a:fa:e2:f8:e5:6b:63:ec:39:cf:ac:ae:e8:03:19:
76:8e:b3:f6:cc:38:b9:53:dd:c0:57:5b:3d:83:8f:
5a:c0:86:24:25:de:ac:51:bc:9e:18:53:b6:f1:c1:
b5:05:5d:3d:18:7f:0a:9c:a7:5b:d7:a6:30:ef:dd:
85:bb:d7:36:f8:c3:a7:f5:23:1e:29:34:d6:bf:f8:
54:26:c1:dc:1c:0a:72:d6:3b:f4:66:ba:d3:ac:9b:
ac:a6:6b:4f:a8:0c:32:9d:26:08:e0:a3:48:e1:4d:
1b:2a:35:1c:b1:1a:24:65:08:c2:38:0e:28:e5:16:
e3:53:d3:da:5b:e8:73:d9:64:4e:da:6f:23:79:b3:
49:fe:e0:34:6b:83:d9:e8:6e:3c:96:ec:e5:a3:cc:
63:87:c7:95:f1:2a:23:26:7b:e2:85:25:37:89:9f:
65:01:a0:36:95:11:87:07:4f:c7:22:84:1b:bb:80:
6a:60:c9:1f:0e:61:17:47:bc:2f:3d:1e:22:0f:01:
60:33:88:ee:04:50:88:7f:5a:c3:bf:1d:11:0c:ca:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5E:E7:14:AB:91:FD:20:BF:4B:84:81:E8:C8:2C:EC:A2:76:A0:01
X509v3 Authority Key Identifier:
keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/F56FFE86912911EFAEEF2B78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.176.0/22
IPv6:
2c0f:40c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:fd:1f:3b:67:9d:5c:bb:c6:dc:b5:1a:21:ae:59:33:89:fd:
3c:25:4d:da:0d:44:db:9b:08:d2:15:0a:de:60:e2:c9:3e:23:
ef:cf:19:5d:e0:38:41:dc:17:9b:df:63:27:ba:fa:73:5d:42:
cf:d4:3f:ec:5a:e4:b0:86:d2:21:23:7d:f4:41:3f:4f:dc:82:
1c:da:20:f7:cd:e7:ec:46:5c:05:10:fd:d4:13:da:86:59:7b:
48:51:af:db:7e:11:47:29:0e:56:ee:b5:2a:9e:46:34:57:f5:
93:13:1b:a6:a1:bf:ed:29:59:09:70:12:8f:6c:b1:65:ed:1c:
04:e5:96:2b:fb:9c:5a:fa:7d:17:55:81:2e:0d:b8:cc:64:c5:
9e:f1:07:44:a6:c0:2d:ee:08:4d:24:a0:e8:06:98:09:14:5a:
b5:ec:c9:d4:95:db:9d:0e:e7:2a:38:ca:35:0d:6b:07:dc:f1:
a8:b4:be:67:f2:ed:75:a6:65:a3:8a:2b:98:fd:55:c9:4b:e4:
f2:85:52:4e:e1:4a:b5:31:17:02:fa:22:9a:24:a5:c3:af:ae:
d7:83:1b:25:f2:77:0e:80:9d:f4:e6:cb:34:b5:5a:45:87:4d:
f8:c1:9d:62:86:a8:b5:60:b3:56:e5:67:ea:b5:5b:cc:4b:78:
5a:77:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:49 2024 by rpki-client on console-fra.rpki-client.org