Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/6A08039C101011EFA385055B017001B1.roa
File: 6A08039C101011EFA385055B017001B1.roa (raw, json)
Hash identifier: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=
Subject key identifier: 46:A0:AC:C0:9B:02:16:96:A7:86:80:E1:65:BD:49:F8:BD:D6:B7:B9
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 26
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/6A08039C101011EFA385055B017001B1.roa
Signing time: Sun 12 May 2024 03:33:36 +0000
ROA not before: Sun 12 May 2024 03:33:30 +0000
ROA not after: Fri 12 May 2034 03:33:30 +0000
asID: 328586
IP address blocks: 102.22.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF
Validity
Not Before: May 12 03:33:30 2024 GMT
Not After : May 12 03:33:30 2034 GMT
Subject: CN=6640388f-8c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:7f:74:ea:54:f3:38:d3:c4:99:0b:f6:ff:
e9:a4:4c:a8:cc:25:f3:70:65:99:ac:d4:e5:af:e7:
48:9d:17:bb:f4:e2:68:0e:42:95:50:f8:2f:61:66:
63:2f:e3:3d:fc:c0:c9:3f:10:7d:f6:67:90:d4:11:
18:92:d4:06:e1:87:e4:7e:92:e5:ce:eb:c2:0f:d7:
93:93:fd:49:29:cf:d3:f1:1a:b6:c3:6f:16:f1:a8:
61:08:d1:8c:d0:2b:94:cf:f8:18:24:4f:93:8a:38:
65:75:74:ce:c8:a3:ec:62:1b:25:06:6e:11:1b:ad:
ac:71:c1:25:62:62:8c:e2:ed:13:3b:04:9a:eb:1b:
e7:84:37:73:bb:cf:1c:d9:52:b3:eb:29:b5:fe:d1:
c7:62:ca:45:ef:19:5e:ef:d1:c7:2a:26:45:13:71:
d8:52:fa:18:9b:dd:d1:93:8a:17:ea:2f:c0:4e:39:
68:f6:18:2d:73:6f:44:c1:7c:08:c5:b4:ec:07:d3:
fc:84:f3:20:65:23:11:04:a6:19:6f:dd:d9:a3:48:
00:1a:04:9c:c9:be:c1:95:9f:25:4c:5c:16:d3:13:
24:4d:81:f9:d1:a7:fe:a0:71:bc:d8:7e:95:10:5e:
28:04:ff:6f:f9:5b:6d:24:a7:f1:a9:a0:91:43:d7:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:AC:C0:9B:02:16:96:A7:86:80:E1:65:BD:49:F8:BD:D6:B7:B9
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/6A08039C101011EFA385055B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:3f:a3:01:5b:e5:e7:88:e0:29:1e:57:b2:11:a8:9b:ec:98:
dd:b6:5d:98:20:a4:d8:7c:f5:2d:1e:25:67:a5:aa:e5:83:4d:
d9:1d:e2:60:7f:0f:0e:cb:67:23:5e:82:c8:2f:c5:e8:03:b8:
aa:2b:10:c4:d5:63:66:c1:61:62:f5:a4:00:98:63:cc:7f:68:
15:57:e7:29:6c:21:44:9a:53:31:75:18:07:a0:57:51:0c:cd:
54:77:9e:f0:a6:b7:d9:0c:28:4c:53:a6:78:70:36:cf:08:86:
1d:5f:61:29:97:28:12:58:39:e4:82:68:9e:20:f4:d0:b1:fe:
1a:5a:52:7b:d0:e8:a8:d4:a1:d1:34:e7:1f:f7:5e:19:fa:37:
c7:62:ac:28:e5:99:1f:03:4d:43:9d:44:40:63:3e:25:80:e4:
d0:31:c8:4c:67:f8:23:71:1b:41:45:82:19:02:35:6b:69:79:
c4:60:cb:ca:89:0c:39:80:de:e0:03:52:c2:0f:31:59:cf:58:
f3:08:f4:e6:c9:3d:d0:ef:09:d3:c3:89:df:78:e1:9b:d5:2b:
0a:14:81:55:69:10:c5:86:12:46:5e:07:cc:48:48:e1:56:c8:
7c:45:ff:ba:a5:6f:f3:a0:22:82:bc:f6:db:99:ac:38:dd:f9:
4b:98:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:14 2025 by rpki-client