Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/0138B876D29211EF9CA02783762E951A.roa
File: 0138B876D29211EF9CA02783762E951A.roa (raw, json)
Hash identifier: 9Qo2BZpMY9XAgQ8sDtXz6FwY6T65u4EtYgo8ZKdICJA=
Subject key identifier: 6E:0A:E1:A6:F6:A8:ED:F1:67:54:30:37:3E:28:F1:3B:58:E0:55:E3
Certificate issuer: /CN=F366BE85AF/serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
Certificate serial: 02
Authority key identifier: F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/0138B876D29211EF9CA02783762E951A.roa
Signing time: Tue 14 Jan 2025 16:10:00 +0000
ROA not before: Wed 15 Jan 2025 16:09:56 +0000
ROA not after: Sun 31 Jan 2027 16:09:56 +0000
asID: 328704
IP address blocks: 102.214.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl
rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366BE85AF, serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
Validity
Not Before: Jan 15 16:09:56 2025 GMT
Not After : Jan 31 16:09:56 2027 GMT
Subject: CN=67868c58-24eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:2e:ee:5a:f3:aa:48:47:24:73:f5:f8:ac:
e5:21:46:0f:97:be:95:0c:78:e2:ea:9b:02:f8:d6:
43:2b:a3:f0:a3:1e:0e:d4:58:2a:db:57:7d:e0:c6:
43:80:60:67:bb:8f:bc:df:77:79:f5:ae:51:d1:10:
f2:61:9b:e7:d3:b0:77:a7:ac:c8:23:8f:76:53:59:
b2:a6:31:8b:12:92:83:33:c7:4d:f3:60:d8:9f:fe:
98:98:83:74:52:7d:6a:2b:05:22:9b:cd:fe:6d:67:
c0:01:67:57:b4:62:44:47:4e:d1:e8:3b:18:35:34:
c4:a5:f5:f1:73:df:4a:9a:ad:24:75:ca:46:05:30:
ef:45:ca:02:d8:c9:d2:a4:f1:79:1e:3f:e4:25:af:
d9:ab:7b:db:da:dc:bc:44:a7:96:55:5f:0f:aa:6d:
9f:71:8e:de:cd:61:ee:52:bd:2b:cc:09:1a:7b:1a:
79:b8:d0:07:aa:bb:e1:4e:ea:f5:f3:91:93:dd:11:
16:a4:e9:c6:bc:af:ca:17:d6:f3:a1:63:66:e9:70:
3f:0e:e7:e1:ec:b1:88:ab:da:5e:85:93:fa:c0:fe:
ec:c5:83:c1:36:63:01:5f:58:ea:e9:d6:20:79:68:
59:ea:0e:26:49:d3:ce:66:48:5c:e2:34:7a:b7:8d:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0A:E1:A6:F6:A8:ED:F1:67:54:30:37:3E:28:F1:3B:58:E0:55:E3
X509v3 Authority Key Identifier:
keyid:F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/0138B876D29211EF9CA02783762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.176.0/22
Signature Algorithm: sha256WithRSAEncryption
91:eb:fb:05:d8:19:ac:68:b9:08:77:42:54:53:9d:a2:cf:34:
99:66:2a:48:c0:34:3b:69:64:58:5f:43:8a:13:a2:84:ab:a2:
9f:84:03:11:bb:9b:f6:81:13:8d:fe:cd:e6:af:15:57:e7:c6:
bd:62:7f:63:ce:31:03:c2:d9:c9:22:36:12:4c:b9:07:10:57:
04:e7:04:31:ac:cd:de:ba:68:67:9f:2b:e3:20:3e:fa:af:a1:
3f:89:c5:78:b6:80:48:b8:ae:9a:ca:10:2b:ee:ed:e5:17:18:
06:3b:df:77:10:30:7e:11:84:05:26:fd:1d:d3:de:01:87:4b:
92:25:5a:c1:1d:86:a6:0c:83:20:b5:93:e0:e0:49:1f:81:03:
9a:6b:14:b5:64:71:40:01:8c:22:ce:16:45:0c:ba:41:53:48:
e9:c1:71:c2:b5:ad:2f:7d:62:9b:84:99:60:8e:aa:38:4d:b5:
24:97:cd:12:bc:82:10:a8:42:6b:9f:b2:b4:59:ee:21:00:d9:
0e:c3:c8:a3:dc:ea:a8:e1:ca:03:9a:30:34:c8:20:6e:2e:70:
cc:ad:fa:23:76:4f:3a:52:14:5e:69:a1:98:2e:2e:ca:c5:96:
c0:ec:b4:8c:2b:da:a4:47:d4:91:f2:cb:57:53:8f:6d:85:52:
bf:92:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net