Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/B916B790E93511EF85696B6B762E951A.roa
File: B916B790E93511EF85696B6B762E951A.roa (raw, json)
Hash identifier: ggevfaeeCUMvKWREnfa5ZTaHefEit81KWkRtGhD4nDA=
Subject key identifier: F9:1D:D8:55:A8:0C:98:75:DF:A8:E0:0D:E9:D3:4B:34:94:12:E5:1B
Certificate issuer: /CN=F36167D3AF/serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
Certificate serial: 02
Authority key identifier: DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/B916B790E93511EF85696B6B762E951A.roa
Signing time: Wed 12 Feb 2025 11:37:22 +0000
ROA not before: Wed 12 Feb 2025 11:37:17 +0000
ROA not after: Thu 12 Feb 2026 11:37:17 +0000
asID: 328769
IP address blocks: 102.222.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 03:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36167D3AF
Validity
Not Before: Feb 12 11:37:17 2025 GMT
Not After : Feb 12 11:37:17 2026 GMT
Subject: CN=67ac87f2-3524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:13:00:bd:ab:97:0a:76:f0:d4:6d:76:46:
9b:60:61:bb:8f:e5:19:19:5e:25:85:8d:68:25:98:
31:12:bf:62:ec:b3:89:91:e4:5b:be:81:57:b1:87:
fa:ed:83:06:32:24:f0:c2:01:d7:70:38:8c:06:49:
42:4d:bf:1e:ee:d4:39:70:1e:d0:21:7f:87:62:e1:
de:85:19:ff:ef:5a:01:61:b6:a8:10:4a:bb:c4:42:
93:5d:b0:4a:e3:12:39:b6:b6:cb:77:94:e7:bd:fd:
34:46:0b:52:90:bb:dd:73:25:4d:86:05:ed:99:81:
43:7b:58:93:7c:7f:b7:a0:b6:7f:7c:ce:a2:b1:c1:
a4:d5:98:5c:8a:1d:b5:75:24:83:17:60:65:e9:84:
bd:13:36:f1:39:23:a7:15:5b:6d:b2:30:c5:4e:1b:
a8:a5:33:63:53:14:e0:b8:e3:52:47:0c:e7:30:47:
ab:49:8a:3a:70:87:4d:1a:0a:06:51:80:6a:df:b3:
69:55:a7:0c:99:ba:96:87:3c:e7:34:a4:f7:c0:1a:
ce:99:56:35:11:ef:c0:22:fe:75:74:5e:90:e0:8a:
c1:36:2d:08:7c:c2:ea:ba:b9:3c:0c:71:e3:e6:f0:
27:b8:9f:78:41:ce:69:0b:42:37:6f:d2:79:ac:c7:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:D8:55:A8:0C:98:75:DF:A8:E0:0D:E9:D3:4B:34:94:12:E5:1B
X509v3 Authority Key Identifier:
keyid:DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/B916B790E93511EF85696B6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:31:f7:bd:03:8f:69:60:80:68:fd:b4:b5:f3:fc:19:c4:b6:
91:42:88:91:a9:46:7b:3d:b8:14:bb:b4:b2:09:e9:13:61:ad:
08:af:66:ee:c1:e5:65:5f:eb:5e:7d:c1:e2:91:bf:a1:52:28:
67:87:bc:f7:66:bd:87:d4:fe:2b:2c:74:bf:53:29:87:0b:3f:
9e:25:64:47:a7:02:ae:26:f8:ac:b5:3f:04:ed:02:69:30:cc:
6a:6a:fe:19:1c:32:5c:4c:cd:a8:9f:52:ea:3f:f2:ea:15:fa:
f6:54:32:54:ce:ce:07:9c:0a:50:1e:ef:82:78:da:97:03:68:
6b:5e:99:a7:c5:ab:31:3a:50:60:08:e4:23:d4:7b:d5:67:fd:
45:6b:06:4d:0c:aa:04:d1:9c:ee:5b:96:74:9f:24:1b:58:c4:
29:4c:7a:e1:b6:b8:3e:c7:1f:56:71:d6:dc:9f:db:38:eb:a9:
1c:5b:82:02:9e:0e:db:5d:58:c5:ae:7e:a4:9b:e0:49:0e:7f:
7c:57:ce:95:61:79:99:1f:3b:79:e0:8e:a8:fa:40:df:d3:e6:
cf:fe:aa:07:16:db:1c:9b:6c:f3:dd:85:de:c6:83:ce:b9:c5:
4a:3d:88:01:6b:5a:c1:df:91:e1:2d:22:cb:eb:e3:ed:1b:cc:
30:67:57:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:46 2025 by rpki-client