Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/3D6B042477A311EF8B65448C762E951A.roa
File: 3D6B042477A311EF8B65448C762E951A.roa (raw, json)
Hash identifier: TQ2pYgQMjddwwjuMRvhC7oG/YTmFbZhFUDTK4ehlRyY=
Subject key identifier: F5:E0:FB:C5:D8:67:C3:0F:A1:DF:4E:6A:9D:AD:49:5E:93:17:FC:FE
Certificate issuer: /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial: 0C
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/3D6B042477A311EF8B65448C762E951A.roa
Signing time: Fri 20 Sep 2024 22:54:07 +0000
ROA not before: Fri 20 Sep 2024 22:54:02 +0000
ROA not after: Tue 30 Sep 2025 22:54:02 +0000
asID: 328444
IP address blocks: 102.128.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Validity
Not Before: Sep 20 22:54:02 2024 GMT
Not After : Sep 30 22:54:02 2025 GMT
Subject: CN=66edfd0e-7bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:3e:54:97:c6:ad:d5:7d:f7:82:ed:b5:3f:
e7:74:66:ed:0b:d2:0e:0e:80:08:95:69:a5:36:fc:
a9:2a:1b:63:5b:ec:d3:6b:26:61:9d:ce:9a:4e:25:
59:f1:99:c6:da:e6:36:f3:b1:75:e0:69:2a:58:17:
5d:68:00:3d:07:d0:89:55:fd:86:5d:ed:10:ed:c7:
2d:e5:7d:7b:39:7a:d8:bc:d9:e8:d9:d6:b6:71:07:
e5:40:db:cf:62:60:b9:f1:fa:a6:e5:c9:8d:10:40:
98:8e:71:9c:5b:02:4c:ba:4f:e4:0f:29:75:6e:ce:
2c:66:c6:8a:50:2b:e5:f1:61:0d:37:35:fa:97:8c:
46:96:57:55:c1:a3:0c:58:e2:ff:3b:8d:f1:2b:e4:
77:9f:e7:fb:c7:02:88:98:dc:4e:da:a4:1f:27:66:
e0:c2:87:13:33:74:a5:a3:e3:61:b4:3d:9f:b0:11:
93:de:f1:db:9d:ea:de:fa:c6:ef:98:b6:e9:77:d5:
bc:fa:ca:85:d3:f0:b3:9f:4d:cb:10:64:2b:c0:f5:
f1:63:48:23:23:60:58:04:0f:17:bb:98:6d:7f:e5:
07:a0:f1:1a:8f:30:fe:8e:f5:56:82:fc:35:4a:f4:
80:43:44:3b:42:c7:40:a7:ad:06:65:db:21:a8:f6:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E0:FB:C5:D8:67:C3:0F:A1:DF:4E:6A:9D:AD:49:5E:93:17:FC:FE
X509v3 Authority Key Identifier:
keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/3D6B042477A311EF8B65448C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.184.0/22
Signature Algorithm: sha256WithRSAEncryption
30:3f:4d:f9:70:8b:e1:1a:a0:b1:c9:ff:e8:85:da:4c:c5:3a:
cc:97:d3:05:bc:f2:ba:8d:a8:bb:53:d0:41:88:db:67:39:47:
12:a7:9c:2a:62:6c:fa:5b:dc:0d:27:e4:88:67:17:f4:7d:73:
e1:da:a5:86:95:98:c3:7b:2b:18:a9:0c:6f:c7:54:83:ff:35:
e2:c0:df:b3:dd:25:7b:f6:29:4b:4c:00:33:30:b9:7d:52:92:
a5:af:66:52:7a:7e:44:d8:41:40:2e:58:e9:ba:51:a0:27:a7:
ce:ac:6b:14:9b:73:2e:d9:6d:6b:f2:6a:71:72:0b:2b:f5:c0:
03:87:cd:7e:f0:91:a1:20:7f:b4:28:b6:44:90:f7:65:5c:7f:
21:b4:4e:6c:76:45:09:1e:44:f7:d5:16:71:20:21:1f:90:18:
00:78:07:5b:69:c1:0a:83:bf:80:38:ea:90:2e:87:e9:62:d5:
e0:17:33:a2:6c:1a:d6:21:ad:b5:43:eb:d6:67:31:2d:08:7f:
1f:3b:70:71:6a:16:d1:79:b5:17:63:3e:a1:6e:c1:6f:24:96:
78:92:2a:4a:66:4d:e1:4e:5e:5d:e3:42:62:ee:56:d6:cc:9b:
8b:7e:0d:d8:cc:e0:48:cc:e1:a5:48:d2:81:a2:3e:97:69:0c:
f8:65:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:25 2024 by rpki-client on console-ams.rpki-client.org