Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/7D874958B87D11EFB3643257762E951A.roa
File: 7D874958B87D11EFB3643257762E951A.roa (raw, json)
Hash identifier: onul5/YLBBz+YGmXUqj+3gM9pVUef26/bXQij1jV9rY=
Subject key identifier: 2E:A1:12:34:57:76:D9:D4:A6:30:D0:F1:6C:65:18:39:37:55:7A:AC
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 3F
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/7D874958B87D11EFB3643257762E951A.roa
Signing time: Thu 12 Dec 2024 11:37:39 +0000
ROA not before: Thu 12 Dec 2024 11:37:35 +0000
ROA not after: Fri 01 Dec 2034 11:37:35 +0000
asID: 328467
IP address blocks: 102.67.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 12 11:37:35 2024 GMT
Not After : Dec 1 11:37:35 2034 GMT
Subject: CN=675acb03-c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:3e:de:cc:a5:d3:85:45:aa:5c:54:71:c5:
f4:50:bf:9c:2c:3a:6c:c1:76:bb:ac:d4:c3:cc:00:
fc:40:2f:df:9e:d1:0a:91:fe:78:02:d8:b1:09:46:
cf:23:7a:4b:47:10:56:ba:cb:4c:b0:bb:d2:9b:01:
42:fb:e5:7c:cb:cb:6f:bf:83:e1:95:a2:dc:14:22:
66:c6:c4:a3:a0:21:ad:eb:dc:20:64:6a:15:6b:c6:
93:53:0e:eb:b7:34:b4:48:11:5f:8a:31:43:68:20:
45:72:c0:ca:28:76:c9:93:db:66:44:a3:bc:73:54:
05:1e:bc:f3:00:b0:40:5e:91:6e:97:98:f6:86:be:
d2:96:3e:8a:7a:24:9c:9f:bd:36:da:c2:3a:48:52:
bb:d7:bb:07:fd:54:ca:18:aa:5d:e6:9c:50:e6:c4:
9d:f6:78:ec:eb:fe:eb:22:e3:ad:86:bc:1a:aa:a5:
28:c0:a9:8e:01:6f:06:4b:b8:12:48:9f:12:e2:47:
28:9f:52:19:70:72:e6:70:e1:28:7d:ec:fd:25:fa:
26:ce:1f:47:51:a2:d5:88:89:a5:61:4b:2a:7b:e5:
90:a2:f0:59:e8:2e:a3:d6:be:b1:b4:2f:8d:6d:54:
55:ab:b1:d0:7d:05:35:dc:85:af:a3:1f:5b:1b:73:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A1:12:34:57:76:D9:D4:A6:30:D0:F1:6C:65:18:39:37:55:7A:AC
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/7D874958B87D11EFB3643257762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:87:dc:05:b2:51:b8:a1:9b:33:0d:7c:26:9e:e5:b5:71:2c:
60:fd:f9:78:52:27:93:55:e0:98:45:cc:b8:7b:57:5d:e1:c7:
4a:8d:93:b7:7f:36:6d:f4:b1:7c:2f:51:1e:89:fa:5a:7a:63:
d4:fe:d1:e0:2b:df:4c:4f:a7:db:a0:57:bc:1a:02:43:44:20:
3a:09:3d:3a:9e:03:c5:22:bf:6b:6d:4a:c8:b6:2f:19:c2:eb:
57:7f:28:8b:68:f0:83:b9:27:77:c5:f4:81:e4:56:8f:74:e5:
14:f9:d5:7e:71:ff:ae:49:1c:0f:80:be:8c:99:b5:16:97:aa:
0c:19:c5:1a:01:39:c0:fa:d6:ca:b5:2c:dc:3c:0a:23:26:4f:
6a:fc:24:6d:62:ee:28:b4:97:27:ed:fe:69:9c:94:36:5b:e0:
ef:f3:9d:b4:42:fa:33:5d:ac:f3:49:12:e4:11:90:be:6c:64:
b0:19:9b:c9:48:53:45:9c:ca:d5:1d:ac:f5:b3:93:98:39:0c:
4b:55:9d:3b:bb:75:51:52:e2:58:90:93:88:1a:6a:25:c4:45:
0e:7c:98:b4:2c:e6:c2:b6:75:50:97:e9:fa:19:6f:92:9d:99:
89:b5:c4:17:81:12:43:61:3f:77:6e:0a:8a:41:c5:b7:83:61:
fe:07:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:44 2025 by rpki-client