Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/245B6D34FBED11EE8128962C017001B1.roa
File: 245B6D34FBED11EE8128962C017001B1.roa (raw, json)
Hash identifier: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=
Subject key identifier: 87:E8:1F:01:09:D3:7E:29:46:02:63:16:CC:1C:94:7E:9E:B9:A5:32
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 14
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/245B6D34FBED11EE8128962C017001B1.roa
Signing time: Tue 16 Apr 2024 12:30:43 +0000
ROA not before: Tue 16 Apr 2024 12:30:39 +0000
ROA not after: Fri 30 Apr 2027 12:30:39 +0000
asID: 37577
IP address blocks: 102.180.0.0/24 maxlen: 24
102.180.4.0/22 maxlen: 22
102.180.8.0/22 maxlen: 22
102.180.12.0/22 maxlen: 22
102.180.16.0/24 maxlen: 24
102.180.17.0/24 maxlen: 24
102.180.18.0/24 maxlen: 24
102.180.19.0/24 maxlen: 24
102.180.20.0/24 maxlen: 24
102.180.21.0/24 maxlen: 24
102.180.22.0/24 maxlen: 24
102.180.23.0/24 maxlen: 24
102.180.24.0/22 maxlen: 22
102.180.28.0/22 maxlen: 22
102.180.32.0/22 maxlen: 22
102.180.36.0/22 maxlen: 22
102.180.40.0/22 maxlen: 22
102.180.44.0/22 maxlen: 22
102.180.48.0/22 maxlen: 22
102.180.52.0/22 maxlen: 22
102.180.56.0/22 maxlen: 22
102.180.60.0/22 maxlen: 22
102.180.64.0/18 maxlen: 18
102.180.64.0/24 maxlen: 24
102.180.65.0/24 maxlen: 24
102.180.66.0/24 maxlen: 24
102.180.67.0/24 maxlen: 24
102.180.68.0/24 maxlen: 24
102.180.69.0/24 maxlen: 24
102.180.70.0/24 maxlen: 24
102.180.71.0/24 maxlen: 24
102.180.72.0/22 maxlen: 22
102.180.76.0/22 maxlen: 22
102.180.80.0/22 maxlen: 22
102.180.84.0/22 maxlen: 22
102.180.88.0/22 maxlen: 22
102.180.92.0/24 maxlen: 24
102.180.93.0/24 maxlen: 24
102.180.94.0/24 maxlen: 24
102.180.95.0/24 maxlen: 24
102.180.96.0/24 maxlen: 24
102.180.97.0/24 maxlen: 24
102.180.98.0/24 maxlen: 24
102.180.99.0/24 maxlen: 24
102.180.100.0/22 maxlen: 22
102.180.104.0/22 maxlen: 22
102.180.108.0/22 maxlen: 22
102.180.112.0/22 maxlen: 22
102.180.116.0/22 maxlen: 22
102.180.120.0/22 maxlen: 22
102.180.124.0/22 maxlen: 22
102.180.128.0/20 maxlen: 20
102.180.128.0/22 maxlen: 22
102.180.132.0/22 maxlen: 22
102.180.136.0/22 maxlen: 22
102.180.140.0/22 maxlen: 22
102.180.144.0/20 maxlen: 20
102.180.144.0/22 maxlen: 22
102.180.148.0/22 maxlen: 22
102.180.152.0/22 maxlen: 22
102.180.156.0/22 maxlen: 22
102.180.160.0/24 maxlen: 24
102.180.162.0/24 maxlen: 24
102.180.163.0/24 maxlen: 24
102.180.164.0/24 maxlen: 24
102.180.165.0/24 maxlen: 24
102.180.166.0/24 maxlen: 24
102.180.167.0/24 maxlen: 24
102.180.168.0/22 maxlen: 22
102.180.172.0/22 maxlen: 22
102.180.176.0/22 maxlen: 22
102.180.180.0/22 maxlen: 22
102.180.184.0/22 maxlen: 22
102.180.188.0/22 maxlen: 22
102.180.192.0/18 maxlen: 18
102.180.192.0/22 maxlen: 22
102.180.196.0/22 maxlen: 22
102.180.200.0/24 maxlen: 24
102.180.201.0/24 maxlen: 24
102.180.202.0/24 maxlen: 24
102.180.203.0/24 maxlen: 24
102.180.204.0/24 maxlen: 24
102.180.205.0/24 maxlen: 24
102.180.206.0/24 maxlen: 24
102.180.207.0/24 maxlen: 24
102.180.208.0/24 maxlen: 24
102.180.209.0/24 maxlen: 24
102.180.210.0/24 maxlen: 24
102.180.211.0/24 maxlen: 24
102.180.212.0/22 maxlen: 22
102.180.216.0/22 maxlen: 22
102.180.220.0/22 maxlen: 22
102.180.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Validity
Not Before: Apr 16 12:30:39 2024 GMT
Not After : Apr 30 12:30:39 2027 GMT
Subject: CN=661e6f73-d263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:ce:d3:e0:97:84:5b:a6:57:de:eb:53:20:
60:e4:e0:eb:98:dd:43:0a:5c:b0:73:60:c2:a5:5c:
ff:dc:df:3e:8c:b2:06:08:9f:94:ba:dd:76:67:9b:
93:9b:70:2a:a2:aa:cb:e4:16:cf:54:d6:c3:0e:30:
b1:52:f0:28:b2:1e:bb:b5:bd:88:e1:6f:14:64:84:
80:66:0b:db:3a:3f:ac:0c:1b:a6:6d:39:76:68:30:
25:3a:f9:a4:cb:02:02:05:ec:47:77:63:39:fd:b6:
69:67:e0:f7:6b:4e:22:42:07:a7:21:ee:ef:81:d9:
44:7a:24:b4:1a:1b:75:00:94:40:3b:f1:0f:96:f7:
45:52:6c:2b:4e:24:a5:48:a1:71:0c:9c:3d:2c:44:
b5:44:7d:2a:a4:67:c1:a5:76:91:bb:d0:40:4c:32:
e0:4a:7d:e6:cc:c3:cb:7e:41:cc:05:2a:8c:0f:67:
55:3c:81:36:65:9c:a5:8c:29:05:56:57:68:2d:e0:
63:a8:8b:1e:b8:66:ce:3b:43:25:13:2f:18:e8:44:
48:28:3a:3b:27:4d:77:29:de:dd:a3:b8:63:32:68:
62:a0:da:91:eb:cf:5b:89:1b:eb:1d:e7:4e:98:80:
0b:2e:b0:cc:f8:70:34:af:1f:a0:3a:3e:22:db:d6:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:1F:01:09:D3:7E:29:46:02:63:16:CC:1C:94:7E:9E:B9:A5:32
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/245B6D34FBED11EE8128962C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.180.0.0/24
102.180.4.0-102.180.160.255
102.180.162.0-102.180.255.255
Signature Algorithm: sha256WithRSAEncryption
35:70:f5:a6:75:47:30:2a:0d:6c:5e:5a:3c:7f:91:4d:25:56:
7d:9c:a9:86:17:c4:80:09:c2:89:37:06:ef:1c:a8:f6:e2:71:
40:e4:d0:cf:90:7d:88:8a:94:b4:ad:a4:70:dd:fe:7d:08:53:
ee:72:76:73:3c:41:8c:b9:48:56:b1:e3:a7:92:a2:05:df:88:
57:88:f0:86:e5:ac:b1:1e:0c:65:95:52:fc:c6:74:d9:fb:89:
90:ac:c7:fa:a9:3b:0c:49:de:b0:3d:3d:2b:75:4a:4e:b3:1e:
3e:9e:41:17:50:6a:46:6c:26:9e:57:7f:5b:7c:60:71:e7:ac:
1f:63:2f:ba:09:0a:a1:2e:c0:3f:25:d9:cd:5d:e7:63:a2:33:
ae:c5:a2:5a:5b:b3:4a:02:18:6f:e3:90:f2:87:81:45:76:8b:
74:0a:84:16:2d:fb:49:b5:0b:b5:db:cf:50:d2:ea:3c:c1:32:
d5:76:64:6f:98:c0:2c:28:e6:04:cc:9a:ac:60:06:28:1d:ca:
c8:e1:45:00:ab:75:14:36:5d:94:98:08:be:b2:61:da:31:f8:
a0:73:43:40:21:5d:5c:b6:eb:1a:a6:c8:bf:73:0e:46:1d:2c:
5f:1a:cc:66:f9:ba:61:8d:6c:5e:4b:4e:03:dd:88:78:5e:ec:
33:ec:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org