Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/72225BFEA05C11EFA3BA68B5762E951A.roa
File: 72225BFEA05C11EFA3BA68B5762E951A.roa (raw, json)
Hash identifier: ptoIi4ERlN82BasAiG/RRS1jzH5R046ZZLHto70J/kQ=
Subject key identifier: 39:6C:E1:E3:85:C8:18:2B:0A:A4:91:04:1D:69:8E:35:67:18:63:75
Certificate issuer: /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial: 02DB
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/72225BFEA05C11EFA3BA68B5762E951A.roa
Signing time: Mon 11 Nov 2024 18:40:38 +0000
ROA not before: Mon 11 Nov 2024 18:40:35 +0000
ROA not after: Tue 31 Dec 2030 18:40:35 +0000
asID: 329174
IP address blocks: 2c0f:2d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731 (0x2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E4C8AF
Validity
Not Before: Nov 11 18:40:35 2024 GMT
Not After : Dec 31 18:40:35 2030 GMT
Subject: CN=67324fa6-3080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:68:c9:e8:5e:3d:35:62:4f:22:e1:84:09:
ef:9a:ce:e0:03:ab:05:c3:f5:1d:3e:53:19:31:e9:
98:5b:b1:c2:fc:c2:7e:71:cf:0f:35:4f:c4:6c:b2:
9c:38:c9:65:a6:27:fd:05:8e:6e:6d:e4:db:16:10:
da:3f:11:77:40:58:57:3f:0d:a6:18:f7:eb:20:fe:
4e:9b:4c:e9:01:a8:b4:27:5a:64:c8:6c:6a:c2:57:
8a:da:65:75:c2:3d:d1:cb:7b:48:86:e9:5f:77:c0:
84:a0:23:0d:38:6a:d5:da:13:7c:4b:69:b0:18:59:
0a:c2:3c:c1:fb:d7:e4:7d:ce:6c:1c:35:c7:6e:0e:
e8:d2:20:b6:8f:09:56:36:29:87:aa:f5:cc:a9:0f:
bf:67:51:2b:66:f3:00:b2:02:ac:7b:8b:7b:8b:55:
57:62:61:9e:0b:c3:09:c2:be:51:42:a9:4c:cc:9c:
88:10:0c:8e:c8:c1:02:66:32:ac:9e:42:09:82:46:
35:09:ec:da:fc:33:a8:4e:4f:42:60:5f:3b:4c:b2:
c9:4c:08:e0:c1:6f:6b:94:6d:4d:84:9d:a6:34:2f:
8a:51:dd:54:ce:d1:15:72:cb:33:cd:b4:a2:58:4a:
e7:2c:45:83:87:23:a9:fd:4a:8e:82:7a:a5:59:97:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:E1:E3:85:C8:18:2B:0A:A4:91:04:1D:69:8E:35:67:18:63:75
X509v3 Authority Key Identifier:
keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/72225BFEA05C11EFA3BA68B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
b0:76:30:a6:4a:80:ae:a2:65:94:6f:3c:4d:b8:b3:97:3e:db:
bf:ba:f9:3a:4c:a2:c7:57:22:f6:38:ff:80:bc:58:8a:c9:07:
b2:84:bd:d4:bd:85:00:2b:3d:2c:fd:29:0c:4c:68:fe:e3:d2:
0c:52:01:39:2f:49:a0:21:c4:8f:58:c2:81:93:0e:22:ce:4b:
47:f7:5a:ea:43:a0:05:76:7a:ad:bf:fe:d5:bc:c9:62:07:74:
54:b1:5b:9e:7f:36:6b:ff:b6:70:95:b9:ad:0f:d1:62:f9:62:
b1:11:aa:2b:cf:d6:a2:af:af:ff:e0:04:45:91:94:b2:89:50:
c2:51:f7:51:85:de:c4:52:4b:b5:76:25:85:15:1d:32:79:94:
0e:eb:21:42:2d:82:e3:6b:5d:7e:3f:8c:cd:6f:c9:7e:9b:62:
9e:19:ca:bf:16:60:e0:09:1a:cb:ba:1e:99:8c:2c:15:a9:30:
b3:7d:55:09:1e:d2:81:67:ea:83:6e:8c:a3:60:8a:7a:b2:7b:
7b:d6:77:ac:0c:4e:66:3f:cb:56:21:ef:45:16:f1:46:43:98:
29:ea:ec:86:c4:fd:59:ed:2d:15:1f:ab:e5:81:fd:3e:63:1d:
54:7a:64:18:d0:9c:2c:e5:de:45:df:ab:fd:4f:0e:c4:cb:53:
ca:fc:81:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:52 2025 by rpki-client