Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BB5836980E0E11F0A236FFA6762E951A.roa
File: BB5836980E0E11F0A236FFA6762E951A.roa (raw, json)
Hash identifier: 3H3hISYF+QWbP7K8BvCBuRhyoQbFjaE9k8F+PuKqZOs=
Subject key identifier: 13:04:58:7A:2B:72:1B:3C:78:B7:BE:EA:7A:D3:91:46:1C:D0:D5:F6
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 063D
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BB5836980E0E11F0A236FFA6762E951A.roa
Signing time: Mon 31 Mar 2025 09:01:28 +0000
ROA not before: Mon 31 Mar 2025 09:01:24 +0000
ROA not after: Sun 31 Mar 2030 09:01:24 +0000
asID: 834
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 31 09:01:24 2025 GMT
Not After : Mar 31 09:01:24 2030 GMT
Subject: CN=67ea59e8-dcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9b:cc:d5:70:d6:76:52:9f:43:e8:06:69:42:
52:2a:6b:4e:ea:b8:f5:53:02:e1:5c:1c:d7:c8:94:
7d:19:75:19:6e:00:18:a1:a9:68:dd:d5:03:ba:39:
61:23:9d:5d:2c:a1:b3:72:15:c2:43:b5:48:ad:25:
25:86:ae:a8:a1:ea:4a:76:b0:0a:22:31:26:e1:d3:
90:45:de:37:aa:f4:4b:ee:5e:88:df:f1:d9:b5:80:
b2:9f:52:28:12:f0:ee:6c:a1:03:26:db:43:18:19:
fa:52:5e:6d:2a:3b:c3:a4:8b:b2:33:9c:24:4c:e4:
61:e6:76:00:65:5e:63:79:68:d6:f5:d3:dd:48:1c:
52:76:d1:4d:48:b0:af:da:a4:a1:24:a1:70:78:42:
d6:c1:89:14:a6:d5:92:bf:ad:9e:0c:50:4e:71:7b:
d6:71:f9:9d:4d:3d:f3:2e:67:34:b1:89:1a:60:b9:
7f:1e:40:95:5c:51:8f:d2:7b:c8:56:98:23:35:f9:
d0:4b:0f:b8:06:94:7f:16:cc:8b:19:c6:9e:e3:cd:
aa:95:5d:94:79:ef:93:c6:13:b3:21:65:0a:38:fb:
ce:c6:b2:18:1d:d4:8f:1a:93:21:3d:06:bf:26:31:
6e:d3:66:5d:97:ca:c5:44:d7:10:55:14:00:df:a2:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:58:7A:2B:72:1B:3C:78:B7:BE:EA:7A:D3:91:46:1C:D0:D5:F6
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BB5836980E0E11F0A236FFA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f4:94:18:c9:6e:90:64:34:d1:9d:80:b1:86:ee:4e:86:d3:
d0:d5:51:be:24:00:6a:e6:12:5a:4f:b5:0b:c2:4d:b3:e7:23:
f1:2e:39:b2:1a:13:e2:2a:6f:79:d1:0f:12:c1:7a:c0:99:08:
83:ed:bc:b1:2e:72:d9:72:b2:c5:8e:1c:12:dc:ac:15:f9:26:
ae:0e:11:bd:a0:cf:83:c0:ad:24:5f:a8:ac:1a:60:96:e0:32:
57:15:ea:80:f3:31:1a:27:40:5b:8d:ae:39:4c:5e:1d:af:3d:
50:93:fb:15:9b:80:54:05:a9:45:d7:41:92:01:65:cc:32:dd:
b6:8d:08:bd:a3:10:5c:30:ed:6b:5c:9b:20:f8:7f:35:37:af:
50:07:da:87:34:54:4f:44:7c:2c:ab:ba:24:58:f3:62:55:7f:
3a:e0:38:4a:fa:78:89:64:71:8b:e3:30:6f:2c:d3:46:63:17:
e4:95:f5:dc:cf:de:57:85:92:b6:b7:65:06:15:61:cc:ec:5f:
6b:aa:be:c3:ce:ca:50:be:7b:aa:31:dd:2c:73:51:0d:0d:ba:
2c:51:61:3d:bf:ac:87:81:fc:e8:0d:7e:e9:64:a5:1e:e9:0b:
03:2f:5c:dc:93:cd:a2:ea:99:63:5c:b3:c8:61:86:73:73:1c:
1c:05:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:17 2025 by rpki-client