Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/3730DFCE0B1F11F08F24969D762E951A.roa
File: 3730DFCE0B1F11F08F24969D762E951A.roa (raw, json)
Hash identifier: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=
Subject key identifier: F9:0B:23:07:A6:C9:A4:6D:85:5C:37:89:05:5D:9F:E7:3D:27:81:6B
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0CDC
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/3730DFCE0B1F11F08F24969D762E951A.roa
Signing time: Thu 27 Mar 2025 15:21:55 +0000
ROA not before: Thu 27 Mar 2025 15:21:50 +0000
ROA not after: Wed 24 Mar 2027 15:21:50 +0000
asID: 29286
IP address blocks: 196.41.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF
Validity
Not Before: Mar 27 15:21:50 2025 GMT
Not After : Mar 24 15:21:50 2027 GMT
Subject: CN=67e56d13-b519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:78:60:be:83:99:7c:8f:88:a1:82:57:72:
fd:ea:c9:e7:12:3b:42:4e:f2:ce:35:44:9a:1c:05:
b0:85:ad:62:aa:2b:be:d6:25:32:c4:db:88:20:1d:
14:6c:3b:a9:25:09:e2:93:68:e8:3d:03:dd:f4:94:
3e:90:cd:ac:2f:be:ed:dd:59:4a:e8:cc:b2:53:63:
d4:32:69:90:e3:07:f7:9b:80:23:a5:a5:e0:f4:a8:
a4:1c:1f:74:c9:4f:a5:aa:d8:e7:ff:e5:5a:f9:b3:
87:a3:f1:f1:fe:65:52:8a:fc:eb:70:e5:2f:8c:37:
4e:7b:8b:bf:3a:3f:68:68:af:e8:89:8f:21:90:a1:
5a:7e:15:22:51:6e:82:40:23:36:83:e4:42:b3:92:
71:79:c3:16:94:e4:69:0b:39:e9:65:12:31:7d:ef:
57:46:d0:36:d1:92:9a:04:18:2c:cf:3f:75:12:fe:
70:ab:2e:52:1d:d9:cc:12:15:69:06:72:7b:ff:77:
c7:b3:1e:0c:18:21:c6:8e:26:8f:39:79:08:83:d1:
46:35:98:42:ea:a1:4c:01:80:fa:46:11:66:da:db:
ef:bc:4c:b1:4e:e3:f9:e6:c1:b8:35:1f:13:a9:69:
89:38:66:69:30:b4:e6:ce:bd:75:8f:70:83:b0:b3:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0B:23:07:A6:C9:A4:6D:85:5C:37:89:05:5D:9F:E7:3D:27:81:6B
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/3730DFCE0B1F11F08F24969D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.41.5.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:20:05:a9:bc:87:65:96:a7:04:4e:3c:ec:c9:73:05:ba:0d:
8a:51:98:da:55:bc:8d:ff:77:03:50:6a:d1:d6:cb:d1:38:0f:
1e:7c:92:0b:ec:8b:e8:24:93:59:ed:35:33:77:87:43:d6:0d:
57:c2:07:71:82:8c:5b:98:d7:f2:e2:0a:f2:7e:97:38:79:9f:
39:05:dc:35:60:b0:15:d4:13:cf:53:0e:c4:d4:f0:19:f0:f6:
72:e3:53:db:96:dc:17:63:f5:7d:70:ec:25:04:44:35:1f:5c:
76:52:9b:1d:c9:5e:9a:30:7e:15:8d:76:73:38:90:9e:ef:47:
48:93:bc:11:92:4f:e2:fa:ed:eb:e5:43:47:f1:cd:8f:b7:90:
30:d2:b6:3a:52:f5:66:5c:b6:ec:ff:c2:88:06:ff:23:11:c0:
18:a4:87:66:06:93:85:f2:8d:c1:9b:44:8a:11:2b:40:8e:7a:
cd:87:50:33:12:b3:bc:da:7b:97:df:ec:61:04:2a:ba:14:8b:
89:b3:2a:eb:3c:99:6d:97:4c:39:c9:59:f7:7f:30:0d:fc:1d:
5e:9d:90:08:5a:da:3d:8a:5d:e4:3a:ca:c8:de:52:f9:b7:e0:
e6:d0:cb:62:03:fd:c6:09:b8:68:7c:d8:52:69:e4:f1:53:ce:
25:49:91:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:51 2025 by rpki-client