Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/FD81E5CA906C11EF8ECAB450762E951A.roa
File: FD81E5CA906C11EF8ECAB450762E951A.roa (raw, json)
Hash identifier: VjlIMzz6BlQANWlrIkJu8KGdSdYA1gVCbIiyUpSTy3g=
Subject key identifier: 01:A0:4D:A7:3D:61:8D:8A:20:E4:5C:93:1C:2E:99:90:EC:9C:0F:2F
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 012F
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/FD81E5CA906C11EF8ECAB450762E951A.roa
Signing time: Tue 22 Oct 2024 11:58:46 +0000
ROA not before: Tue 22 Oct 2024 11:58:42 +0000
ROA not after: Tue 31 Dec 2024 11:58:42 +0000
asID: 328988
IP address blocks: 102.208.96.0/23 maxlen: 23
102.208.98.0/23 maxlen: 23
102.213.68.0/23 maxlen: 23
102.213.70.0/23 maxlen: 23
102.218.48.0/23 maxlen: 23
102.218.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Validity
Not Before: Oct 22 11:58:42 2024 GMT
Not After : Dec 31 11:58:42 2024 GMT
Subject: CN=67179376-e10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:c1:31:8d:65:f9:91:72:9d:f3:24:9e:24:
84:27:6d:fd:66:7b:b1:4e:22:6e:3d:9f:41:ce:29:
8d:eb:88:3c:0c:2e:94:46:7d:45:b3:60:04:94:a0:
96:4a:0c:63:65:81:33:c4:13:b9:51:ce:56:a7:a1:
c2:ae:8a:f9:f6:ac:23:38:8a:3b:18:ed:a6:c1:73:
c4:45:95:2c:dc:7e:bf:3e:b0:ff:af:17:23:1a:fa:
1e:18:35:5b:41:84:67:0a:53:d5:c1:f5:00:20:82:
97:f8:12:a6:a1:68:23:5b:02:5c:5e:c1:db:2b:b5:
dd:96:4b:79:4e:23:08:9b:3b:db:ec:51:55:87:c2:
c3:ec:4c:3d:4d:88:65:98:26:6b:16:65:fc:0b:1c:
ba:2a:e8:23:3f:75:37:a8:2e:a2:c5:9d:a4:50:d4:
a7:61:06:ed:03:26:7c:e7:e6:5a:22:4f:30:8d:3c:
be:66:70:a0:6c:f2:47:09:f2:7f:c2:a3:eb:c8:81:
c5:10:76:36:ca:23:4e:34:7f:2d:70:73:5b:1a:5d:
27:cc:90:a3:d6:b0:ef:43:55:ce:8b:87:bc:11:53:
5f:e9:43:90:5a:db:94:bc:fc:d0:9e:b9:c1:32:4a:
bf:a2:cf:8c:1c:2f:ff:71:d1:de:72:c0:82:9f:88:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A0:4D:A7:3D:61:8D:8A:20:E4:5C:93:1C:2E:99:90:EC:9C:0F:2F
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/FD81E5CA906C11EF8ECAB450762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.96.0/22
102.213.68.0/22
102.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
37:29:31:d6:27:49:10:8a:9e:46:06:c5:74:fd:d0:1a:5b:9d:
d1:fe:4e:d8:5f:3b:25:61:60:cc:5a:56:b2:55:56:47:d2:34:
46:2f:08:71:c6:a1:70:ad:df:59:f3:9f:25:04:65:35:2a:c8:
bb:68:00:c4:91:ba:46:35:77:11:da:9d:2d:64:88:04:90:42:
81:6f:4b:52:8b:6b:8b:45:c5:5d:c9:7b:a0:b2:14:5d:26:18:
08:a8:14:e0:a7:8d:66:28:f7:ad:85:e6:5c:15:ec:02:2d:48:
d2:2a:5e:eb:13:37:18:4d:ae:ce:54:10:90:92:e1:f7:ef:72:
cb:66:c6:d5:b8:c1:cb:9e:c8:e9:40:46:4e:a7:5a:46:70:dd:
76:2f:92:e5:c1:9b:7a:7a:a1:ad:bb:b8:77:7f:5b:07:93:44:
06:9d:b8:89:e7:c6:52:79:11:44:69:7a:41:aa:b5:38:04:53:
5c:61:86:bc:b8:7d:38:07:5c:20:ae:ea:1f:2a:e9:e2:d0:63:
52:94:ec:c3:95:ac:b2:db:3d:3b:f4:5b:da:90:7e:8e:78:cb:
43:15:2d:56:ce:c5:26:ae:a2:59:3b:51:81:64:89:e2:70:67:
24:f4:2e:94:94:90:f6:38:a2:ba:ce:96:8d:7a:36:43:3c:72:
bc:5d:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org