Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/B03C009254C711EF97374F66762E951A.roa
File: B03C009254C711EF97374F66762E951A.roa (raw, json)
Hash identifier: tQA4avqeaHyVWCMp4VsdVygCnrOTJ/BZbTYkUrbytks=
Subject key identifier: CA:27:71:A0:F2:4E:2E:A0:71:6B:49:FA:42:68:59:48:3A:63:94:13
Certificate issuer: /CN=F36BA482AF/serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
Certificate serial: 07
Authority key identifier: EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/B03C009254C711EF97374F66762E951A.roa
Signing time: Wed 07 Aug 2024 14:16:50 +0000
ROA not before: Wed 07 Aug 2024 14:16:38 +0000
ROA not after: Thu 07 Aug 2025 14:16:38 +0000
asID: 329379
IP address blocks: 102.210.100.0/23 maxlen: 31
2c0f:2740::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 03:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA482AF
Validity
Not Before: Aug 7 14:16:38 2024 GMT
Not After : Aug 7 14:16:38 2025 GMT
Subject: CN=66b381d2-f5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:c4:8a:91:20:c7:d5:13:fb:37:ae:42:07:
c1:73:8f:2e:a3:11:f8:8f:c1:22:c0:90:e4:92:8b:
fb:d2:0f:42:13:7c:9e:9d:b2:b5:3b:7e:2b:df:1d:
fa:76:94:54:63:27:c1:25:61:2f:0a:ff:54:b6:b5:
c0:ff:d3:69:43:05:2d:2c:63:66:d4:5e:1c:91:dd:
a7:18:d9:c5:55:97:6e:3c:c0:7a:a4:6a:a5:47:ab:
5d:69:0b:4f:34:86:a6:fb:85:2c:64:8c:a5:6e:ab:
aa:30:c8:2d:ea:62:7d:36:c5:76:bd:6d:54:d3:5b:
23:79:49:69:a4:77:77:80:59:89:20:71:37:ad:d0:
f7:32:c7:41:93:7a:7b:87:12:af:07:0d:76:0b:62:
b8:d6:82:40:c5:be:09:66:a4:0d:3d:c8:38:84:17:
ec:8f:5d:2b:5e:39:a6:89:fa:47:c8:68:4e:94:c5:
f4:4c:b8:f2:ec:db:fd:ea:db:ff:b7:de:c8:fe:4a:
2c:59:a7:a7:82:57:f0:c0:31:92:11:ec:47:da:9a:
c9:85:2b:1a:10:27:fc:1a:4f:e2:de:c4:39:87:ad:
a1:da:c5:30:71:c4:60:ad:63:0f:28:c2:fb:75:77:
3d:71:43:a2:4a:94:ee:9a:2a:e9:c4:ee:db:59:b8:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:71:A0:F2:4E:2E:A0:71:6B:49:FA:42:68:59:48:3A:63:94:13
X509v3 Authority Key Identifier:
keyid:EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/B03C009254C711EF97374F66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.100.0/23
IPv6:
2c0f:2740::/32
Signature Algorithm: sha256WithRSAEncryption
b0:61:bf:1b:19:fc:7c:1b:36:f9:81:8c:13:3a:4f:b5:1d:30:
00:79:19:3e:6e:69:be:92:8c:be:f5:a6:f7:b5:4b:d6:00:33:
2a:f9:a2:fb:88:f5:f7:b6:de:76:99:5b:59:e1:ec:19:44:11:
7b:4c:08:37:3f:a8:df:df:0b:13:00:18:51:2f:03:80:82:3a:
29:78:3a:4a:71:b3:9e:23:a4:47:f2:f8:07:86:2a:05:77:62:
43:5d:9c:57:04:b0:da:b7:b8:9f:fd:9f:94:99:df:5b:a5:53:
01:85:0a:0c:25:97:8d:9e:80:15:fb:52:86:66:98:ad:7d:58:
fa:aa:9f:98:24:da:2e:e7:68:e8:48:0d:25:89:24:9c:5f:49:
08:92:fc:0e:24:5b:0e:3d:b4:86:26:bc:7b:a2:94:88:c3:b1:
e3:6e:9d:8d:7d:bc:ee:24:80:90:64:c0:c9:23:4f:c5:13:1a:
11:71:bd:6d:e4:77:79:74:36:59:7f:e3:5c:f4:f0:b9:6e:35:
9e:6b:4b:ee:4a:73:c3:22:d6:89:97:66:b6:b0:66:de:dc:9b:
80:f1:a0:59:be:c2:01:01:d3:e1:2f:81:8a:3e:ad:eb:51:1b:
9a:e4:db:5b:a2:4d:a9:74:05:be:00:07:4c:45:4f:2e:79:e2:
df:4f:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:14 2025 by rpki-client