Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/D987B66863CB11EFA0F75972762E951A.roa
File: D987B66863CB11EFA0F75972762E951A.roa (raw, json)
Hash identifier: OjFWCVbF9MzWB5rSe76yP7YBjLAYfw9QCT5/RpHfRRk=
Subject key identifier: E3:7A:22:83:05:96:9D:30:68:87:4D:D1:C7:5A:D5:E4:6A:59:33:0A
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 048C
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/D987B66863CB11EFA0F75972762E951A.roa
Signing time: Mon 26 Aug 2024 16:54:25 +0000
ROA not before: Mon 26 Aug 2024 16:54:22 +0000
ROA not after: Fri 25 Aug 2034 16:54:22 +0000
asID: 37725
IP address blocks: 102.218.128.0/24 maxlen: 32
102.218.130.0/24 maxlen: 32
102.219.22.0/24 maxlen: 32
102.220.125.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164 (0x48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Aug 26 16:54:22 2024 GMT
Not After : Aug 25 16:54:22 2034 GMT
Subject: CN=66ccb341-2142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:bf:cf:d2:4f:86:01:8e:b0:9e:61:1c:58:
a4:36:a8:28:5f:e9:86:ad:68:3f:ba:0a:37:57:ca:
b5:29:16:d7:99:33:2f:e2:fc:56:7a:5a:1c:24:54:
18:88:5f:ee:62:0e:a9:0e:f2:59:11:ef:2b:22:d7:
aa:a9:dd:6f:e6:13:a9:82:1c:0b:80:40:40:0d:56:
ae:5b:45:cf:ec:b6:9d:e2:29:bd:15:36:4e:6f:18:
b8:28:c3:c8:f2:23:e4:61:a2:9a:1f:59:7c:e5:9b:
3b:6d:dd:9f:7c:55:d7:8d:4d:9a:84:3d:10:cd:93:
43:46:60:3a:4b:e2:bb:8c:4f:1c:e0:fc:61:ed:a2:
e6:04:02:c0:e2:cf:ee:68:fa:89:10:37:60:a7:7a:
33:a7:de:c5:d9:9c:ed:87:1e:0f:b5:3c:42:e0:94:
7a:54:5b:9d:a1:6f:99:ed:1b:ce:9d:f7:da:23:7d:
8a:e6:f9:98:9e:de:81:9e:8f:0a:4f:20:53:44:c1:
96:1a:e4:d9:c4:6e:71:a9:f1:15:34:49:9f:c1:f7:
1c:48:62:5b:05:fa:cc:d7:5e:b1:7a:e3:7c:d1:85:
ad:62:5e:6c:0d:a1:c7:3f:45:3b:40:94:23:4f:02:
58:be:2f:b6:6a:03:9f:ea:63:0b:1f:4b:f7:fb:cc:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7A:22:83:05:96:9D:30:68:87:4D:D1:C7:5A:D5:E4:6A:59:33:0A
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/D987B66863CB11EFA0F75972762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
66:57:ad:7f:08:ae:9b:62:b4:3d:8d:a9:65:a5:07:79:52:bd:
5e:2c:b1:55:6f:06:23:19:86:57:29:81:1a:b2:ce:51:1c:3a:
e0:2c:05:9f:e0:ec:f3:c0:db:a7:e6:2a:38:2e:f2:a3:f1:ee:
d3:4d:3c:61:82:08:ea:fb:b5:a9:8d:4a:12:6f:2e:16:6d:38:
73:f9:87:a3:6b:53:4f:9e:7e:d9:64:a1:49:e3:9b:21:52:62:
e9:53:42:d8:ef:d3:49:58:ec:73:4a:80:a6:5c:3f:7c:83:fb:
c7:42:f6:3b:5d:70:73:5e:8e:bf:70:49:37:e8:9e:89:84:b1:
e5:b4:6e:e3:0f:66:21:98:ad:c3:d7:b9:ab:22:b2:88:23:95:
80:0d:0c:e7:b0:a1:d7:85:e8:cb:eb:ea:0e:fb:d0:c7:bb:61:
5a:f7:ab:e5:c6:06:19:d7:9a:56:89:db:9a:d0:f6:df:b6:55:
21:19:19:1a:0b:6b:b8:b1:5b:5b:d5:16:27:0c:23:9c:44:3a:
5c:33:c1:0d:cb:e1:73:09:94:ec:1a:77:d5:53:17:77:c5:d9:
4a:da:4f:0a:7c:48:20:78:5e:b9:fb:db:d3:c9:b7:78:fd:de:
f2:f4:9c:d3:93:e8:80:85:ef:d6:29:de:a2:41:ea:89:4d:8a:
6d:8d:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org