Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/0FBDFAD2EBE711EF89D53E68762E951A.roa
File: 0FBDFAD2EBE711EF89D53E68762E951A.roa (raw, json)
Hash identifier: 6Dfy+9J8yBBKOweYOTc8ZUkbc7ToAul3fWIXBr+Dw4o=
Subject key identifier: 14:30:73:6D:79:B7:99:C5:1F:BB:27:71:88:3B:09:34:27:63:E2:8D
Certificate issuer: /CN=F36952BDAF/serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
Certificate serial: 02DA
Authority key identifier: F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/0FBDFAD2EBE711EF89D53E68762E951A.roa
Signing time: Sat 15 Feb 2025 21:51:51 +0000
ROA not before: Sun 16 Feb 2025 21:51:47 +0000
ROA not after: Wed 28 Feb 2035 21:51:47 +0000
asID: 329211
IP address blocks: 102.212.236.0/22 maxlen: 22
102.212.236.0/23 maxlen: 23
102.212.236.0/24 maxlen: 24
102.212.237.0/24 maxlen: 24
102.212.238.0/23 maxlen: 23
102.212.238.0/24 maxlen: 24
102.212.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36952BDAF
Validity
Not Before: Feb 16 21:51:47 2025 GMT
Not After : Feb 28 21:51:47 2035 GMT
Subject: CN=67b10c76-2752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:ad:5c:f3:13:fe:ad:cb:68:64:b4:72:17:
dc:b1:2f:91:26:a4:e8:4e:8f:7e:93:c3:ed:93:a8:
15:e5:19:7a:de:6e:da:7e:43:cf:fd:15:46:28:d5:
1e:6e:89:ba:03:5b:08:66:35:dc:23:bc:7a:80:c1:
34:a0:a7:37:c2:b4:ef:e5:82:0a:f1:64:6a:da:22:
52:8f:7c:99:e7:3b:ee:0c:a7:54:d8:89:59:c8:ff:
17:f7:df:ea:10:7f:cc:b1:12:0e:ad:a0:61:cd:02:
9a:a1:65:03:00:ee:c7:80:16:17:c3:89:f2:e5:a5:
64:bf:f6:14:07:81:15:db:41:92:15:37:ed:c1:96:
c8:32:75:f5:d0:a1:20:04:ee:fc:34:0d:35:60:4c:
59:f5:08:95:dc:46:de:aa:1e:e8:3b:ca:f5:87:5e:
c4:d7:b5:b1:0b:ae:d1:31:9f:1c:e6:b4:80:c2:ec:
2b:58:17:54:32:8a:5a:de:92:a6:08:3c:ae:64:65:
4f:8f:dd:e7:52:97:2f:6c:5b:eb:b7:10:43:b6:ab:
66:31:1a:02:e4:7d:1c:3c:c8:61:7d:69:38:8e:45:
bf:39:1f:3e:3e:a1:4a:69:72:fc:64:72:8d:7d:0f:
4a:32:40:8b:89:ef:b2:b8:61:40:43:73:7c:c1:a6:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:73:6D:79:B7:99:C5:1F:BB:27:71:88:3B:09:34:27:63:E2:8D
X509v3 Authority Key Identifier:
keyid:F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/0FBDFAD2EBE711EF89D53E68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:75:2d:e8:45:20:57:87:ea:13:00:42:f5:b3:25:85:39:e6:
e0:e4:a8:8d:b2:e0:c2:46:3f:5a:99:0f:c3:74:ad:f6:69:5d:
a5:44:e5:56:37:c5:f5:31:cc:80:26:ec:b7:7f:0d:67:47:e8:
5f:07:ae:ba:74:2f:16:99:0c:63:1a:cb:0c:fc:56:42:ec:e8:
5c:03:a8:83:98:81:1f:ba:c9:57:27:6f:35:09:33:59:f6:ed:
fa:e9:e4:4b:b6:2c:74:0d:6b:ac:7f:2c:f3:b0:cc:f1:8d:31:
ee:97:a0:20:6e:91:cc:43:b4:3e:c1:44:a6:a7:11:c6:4f:68:
37:61:59:cb:bb:a6:f8:f6:24:09:98:a4:4d:7b:ea:5b:bb:ea:
d7:c9:8d:c9:d1:d6:bc:39:29:de:d7:1d:b4:e1:36:80:97:ff:
ac:a7:e9:ee:37:34:9e:11:42:c8:30:ea:15:ae:61:58:82:c3:
9c:7d:22:bb:f5:16:6a:ff:78:e7:fb:d0:8c:e0:0f:63:dd:67:
e7:f2:8f:e1:7a:67:7f:a8:df:a7:c7:3a:4c:86:f6:6a:bc:6b:
ef:10:b2:46:8b:c7:cf:88:5a:0d:f9:84:45:c1:30:f7:bf:98:
51:c3:76:5f:7c:71:d7:89:14:da:0c:e3:0a:80:a7:1d:1e:d4:
03:3c:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:27:39 2025 by rpki-client