Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/B3D4A0FAB87D11EF99011259762E951A.roa
File: B3D4A0FAB87D11EF99011259762E951A.roa (raw, json)
Hash identifier: pJknO3SfyaIF7Mf7TXt63Y5B2q/zY499L4XbyGAJGWw=
Subject key identifier: DF:FE:6D:04:33:2A:46:FD:D7:F9:E4:BA:47:EB:64:11:29:29:D3:8F
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 43
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/B3D4A0FAB87D11EF99011259762E951A.roa
Signing time: Thu 12 Dec 2024 11:39:10 +0000
ROA not before: Thu 12 Dec 2024 11:39:06 +0000
ROA not after: Fri 01 Dec 2034 11:39:06 +0000
asID: 328467
IP address blocks: 102.67.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 03:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 12 11:39:06 2024 GMT
Not After : Dec 1 11:39:06 2034 GMT
Subject: CN=675acb5e-d1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:1b:c7:6c:ac:26:6c:2d:1a:1f:e6:62:c9:
8f:e7:d1:9e:f3:eb:01:3a:1d:44:ce:d6:28:ef:96:
e9:8f:d3:78:5c:b8:f4:b3:a1:ab:75:59:f2:56:e1:
2f:fe:13:62:d1:f0:b5:18:0d:86:4c:53:12:60:2a:
46:4c:92:9e:23:71:76:09:c0:cf:d7:51:a0:a3:58:
b6:a0:fe:6e:c1:1c:02:5b:3c:a6:22:84:95:96:0c:
2b:05:ff:73:bf:77:c4:81:7d:a8:56:96:ec:b3:c1:
6e:5e:ff:85:97:f8:3b:3c:51:9b:30:a4:8b:1b:60:
b2:37:0f:52:57:79:25:b6:b1:d9:d0:c5:71:c8:1b:
1c:a1:c7:a4:80:9f:32:49:3e:e8:b3:d5:4a:04:c8:
f1:7a:7f:20:72:5e:d2:d9:28:cf:d8:20:fe:07:fe:
02:a1:bb:34:71:24:72:92:b2:57:25:cb:e3:44:99:
3e:44:8b:38:fa:0b:6f:69:ee:ca:65:45:23:ba:60:
b3:5f:97:2a:70:e3:86:9a:62:c5:6b:b9:51:99:27:
d4:b0:03:4f:b8:4c:e1:0b:bf:36:4b:3d:2c:31:d8:
d0:cf:9e:e3:3c:dc:58:cb:47:13:03:8f:17:49:72:
e7:f7:4a:2c:ac:b7:f0:83:b5:86:b1:07:ca:cb:b1:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FE:6D:04:33:2A:46:FD:D7:F9:E4:BA:47:EB:64:11:29:29:D3:8F
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/B3D4A0FAB87D11EF99011259762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:19:b3:64:d2:de:61:92:44:08:0a:d8:67:6b:d3:70:9c:30:
f3:ec:a5:9e:e7:81:e6:ab:e8:7a:03:98:36:3e:29:cb:bb:c9:
a2:b4:84:fc:52:4f:cb:38:32:6b:23:4b:e9:7a:13:e0:85:a1:
b2:55:02:3b:86:ef:53:09:87:5a:0e:b1:91:77:c0:15:f9:b0:
dd:29:dd:9c:e5:77:30:21:34:01:0b:33:10:bf:68:aa:ab:b3:
84:ee:82:9a:8f:5d:3a:5b:93:2c:27:a8:21:0e:8a:c8:82:44:
46:38:d5:3c:35:f5:6a:b5:b7:8e:63:de:6a:ee:ec:1c:84:2a:
7e:55:ca:06:b3:e3:98:e4:59:b7:4d:75:d1:06:e6:53:67:73:
69:89:46:a5:07:16:9b:db:23:29:cd:49:f3:4b:bb:bc:80:cb:
eb:f4:20:65:8c:ef:ca:65:19:bd:fc:23:4a:88:ba:38:02:4f:
1a:c5:35:db:af:a3:be:bb:7c:55:ee:41:7a:82:f0:88:cd:2d:
6f:2c:38:52:70:12:e5:c1:16:3b:54:fc:73:13:41:f1:18:1d:
ce:e4:80:40:9e:5a:36:ba:63:b6:24:5a:e5:15:c5:8b:c6:83:
cd:2c:1f:ca:22:64:eb:3d:e9:56:d1:22:63:10:cd:94:16:f6:
48:45:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:01 2025 by rpki-client