Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/A2753E20085E11EFA72EA420017001B1.roa
File: A2753E20085E11EFA72EA420017001B1.roa (raw, json)
Hash identifier: HdajjDnJFTsdeeb8I0ztD/XdQiYbnMj3dOgOhC5cpoo=
Subject key identifier: 46:C7:B4:AF:C0:D0:3A:AF:F0:B2:A9:21:70:64:80:51:57:6B:02:DB
Certificate issuer: /CN=F3692425AF/serialNumber=11E23E8B2C8BC39CFA27519820176ACB343DC846
Certificate serial: 02
Authority key identifier: 11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/A2753E20085E11EFA72EA420017001B1.roa
Signing time: Thu 02 May 2024 08:33:22 +0000
ROA not before: Thu 02 May 2024 08:33:18 +0000
ROA not after: Tue 02 May 2034 08:33:18 +0000
asID: 328492
IP address blocks: 102.68.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3692425AF
Validity
Not Before: May 2 08:33:18 2024 GMT
Not After : May 2 08:33:18 2034 GMT
Subject: CN=66334fd2-3269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:21:42:f3:9c:16:08:89:45:7b:9a:1f:8d:
5c:07:4d:b6:37:b7:08:7b:80:0d:e4:1c:6b:ea:82:
bb:9d:28:b4:b7:df:04:68:4b:2e:8e:5c:78:cd:cd:
f7:18:06:82:66:29:31:c1:b6:8e:da:de:23:a9:0b:
08:64:59:cd:c6:ce:3a:31:ec:dd:6a:b9:91:a7:4c:
16:7e:63:e4:81:b0:d1:e9:c1:c7:9f:2c:00:f0:85:
e4:5f:ba:f9:dc:ce:71:e6:d2:02:b9:14:7f:58:53:
f6:2f:ca:a7:6a:20:26:6e:57:7a:fb:72:51:14:bc:
ea:93:fa:ec:fa:bf:ae:ad:e2:53:8c:67:08:b1:b3:
0f:bf:5f:7a:e9:83:a0:40:3a:4d:ee:83:c0:cb:60:
e8:2c:e8:b6:8e:cb:59:a2:ab:40:f6:18:c1:00:eb:
a9:59:33:80:ed:b9:b2:d6:fd:69:0e:b8:8f:c6:3a:
50:38:d2:da:15:14:22:35:5e:22:c1:22:07:00:b4:
0d:f2:64:7e:da:75:ff:07:a3:01:58:bb:cb:87:2e:
a9:f6:b4:34:03:e8:2f:7b:43:e6:f3:c6:30:e8:72:
4c:ea:a4:1e:49:fe:be:74:9a:a1:4a:6f:48:68:bc:
79:dc:c0:aa:3d:c3:a8:11:16:13:00:13:1d:11:da:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:B4:AF:C0:D0:3A:AF:F0:B2:A9:21:70:64:80:51:57:6B:02:DB
X509v3 Authority Key Identifier:
keyid:11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/A2753E20085E11EFA72EA420017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.143.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ef:64:4a:e6:8f:94:b0:ba:1e:80:43:63:be:a6:fb:e4:a0:
4c:cb:dc:00:fd:e3:87:62:9a:86:0b:56:ee:36:55:bb:96:90:
97:10:0b:ec:3e:58:0c:74:db:2d:87:23:a9:1d:83:86:85:28:
83:7a:c0:06:9e:30:cf:90:1c:66:4f:61:24:20:6e:d5:f6:43:
a8:27:f2:1e:a2:25:9d:0b:27:3f:5d:7c:8d:23:80:8b:0f:30:
16:95:3b:de:84:a1:f3:63:56:dd:d5:22:7f:f5:18:5e:ae:17:
78:2c:a2:e8:1e:d3:68:d0:4e:82:7a:88:a0:6d:92:e7:a9:03:
9f:5f:43:bc:75:2d:f9:6a:b2:a5:72:00:0e:4f:66:19:74:49:
0b:dc:ee:a5:15:0b:37:8c:42:6a:06:11:d4:1c:16:ed:5e:d8:
ba:bd:80:e8:95:8a:66:8a:a1:e7:21:15:97:7a:1f:a0:35:fc:
dc:cf:2f:df:22:0f:26:c6:34:d8:fc:bf:e1:d7:b2:59:94:89:
09:af:ba:bc:6a:42:a4:89:c7:67:1b:87:40:b5:fb:9c:e6:30:
b9:06:38:78:c7:9c:cb:48:06:fc:b7:f3:81:d0:92:9f:b3:87:
99:d6:0b:72:3d:54:07:61:ab:b3:d9:40:88:c0:39:14:f8:28:
79:a3:2a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:22 2025 by rpki-client