Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/9B2EF71CE93811EFA2CE007D762E951A.roa
File: 9B2EF71CE93811EFA2CE007D762E951A.roa (raw, json)
Hash identifier: Vamau+FZxtle4vh6nEplX/Gj3oXAD8dNnB8T8Ig/+zc=
Subject key identifier: 23:13:68:87:8D:6A:97:C9:AA:0C:B0:F8:83:32:E1:EE:11:04:F7:19
Certificate issuer: /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial: 02
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/9B2EF71CE93811EFA2CE007D762E951A.roa
Signing time: Wed 12 Feb 2025 11:58:00 +0000
ROA not before: Wed 12 Feb 2025 11:57:57 +0000
ROA not after: Wed 28 Feb 2035 11:57:57 +0000
asID: 44592
IP address blocks: 102.134.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36217DFAF
Validity
Not Before: Feb 12 11:57:57 2025 GMT
Not After : Feb 28 11:57:57 2035 GMT
Subject: CN=67ac8cc8-f5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:1e:68:fe:30:cd:bf:a4:5a:37:88:a8:e0:
d8:c6:08:ab:b8:42:c5:3d:7d:3f:b4:c2:d9:52:21:
c6:53:4b:bf:73:21:58:32:e1:3c:22:9a:cf:31:0a:
69:4b:48:94:f9:8b:ac:c2:11:21:16:19:3a:22:70:
3d:2b:2f:36:1a:d9:c4:b9:06:5e:c6:2d:8a:41:8a:
58:70:1b:ce:bd:2c:e1:25:c8:66:59:2d:3c:df:8a:
11:7a:c2:65:85:a9:22:76:e1:0e:e4:03:c3:d2:38:
a8:44:f8:8c:f0:7a:23:f3:d9:37:74:df:33:9b:48:
a6:5c:f3:17:62:60:6c:ad:a6:94:de:1b:d1:66:2e:
8e:b7:55:1d:2e:ec:71:54:31:e1:fb:81:3a:f2:3b:
e3:bb:d6:00:7b:9e:70:8d:af:a9:83:84:12:1e:e6:
e9:f6:37:8f:c6:3a:be:60:55:cf:97:c3:b8:58:cb:
20:c0:fd:57:bd:60:0b:92:df:40:5f:a1:2c:05:81:
f2:94:34:ae:f9:ae:85:19:31:b0:6f:e0:25:e3:2a:
d2:ea:a5:72:d1:e2:85:e5:e6:45:0e:2e:b8:ac:6a:
97:fc:54:99:91:98:e0:c4:c8:d2:04:6e:2f:20:e4:
03:24:6f:51:7d:9f:b9:39:f4:27:25:0d:64:01:70:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:68:87:8D:6A:97:C9:AA:0C:B0:F8:83:32:E1:EE:11:04:F7:19
X509v3 Authority Key Identifier:
keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/9B2EF71CE93811EFA2CE007D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d5:6d:46:89:ae:8d:5a:31:d9:e2:8d:5d:30:b4:3c:c5:fc:
56:e4:98:44:50:fe:aa:f9:6a:d8:4e:f4:47:25:72:d5:d2:79:
25:a7:e8:39:d9:31:38:f7:71:c5:9b:05:8a:e7:9f:75:16:fc:
94:84:4d:9e:5e:f2:de:f4:7e:16:ed:5a:6d:a8:13:dd:5c:a9:
30:eb:0a:c6:19:4e:91:23:f4:72:01:02:a3:12:ef:a0:29:ac:
0f:11:5d:36:d5:56:45:da:bd:e9:4d:7b:76:f2:6b:77:df:4e:
5e:7a:0d:a4:7f:22:8b:80:71:5b:14:ad:2e:86:5e:96:d2:19:
7f:4b:5e:24:60:c5:28:ad:79:44:5f:f5:30:77:58:8a:4b:1e:
f6:24:c1:ee:07:a4:0b:f9:c0:5d:ba:e3:d6:d5:9d:ec:d2:68:
5a:cd:8a:f0:43:7c:76:0a:b9:2a:dc:6a:ee:4d:07:8b:c8:ee:
3d:5d:06:82:c3:8e:68:62:b7:03:3a:6b:e2:74:85:8c:a1:35:
b5:04:e2:8b:c9:32:24:17:0f:85:ca:9d:dd:d8:e9:a5:f1:08:
75:a8:7a:0a:c8:7f:23:a2:10:60:8d:95:2e:3e:29:05:2e:68:
96:d2:e5:b2:b7:0f:93:64:4d:e6:53:6a:59:ef:6a:67:d2:dd:
40:11:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:46 2025 by rpki-client