Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/07BBBA5C3B8F11F09C92B0A0DAE4EC9C.roa
File: 07BBBA5C3B8F11F09C92B0A0DAE4EC9C.roa (raw, json)
Hash identifier: U2a0ITRHf1IuAJ5KpfWkY3ULXGlixjjNGCb+4/SV9BA=
Subject key identifier: 36:DE:E9:72:86:7B:01:E5:68:08:65:85:D4:76:3B:9D:D3:BB:DE:F7
Certificate issuer: /CN=F36312D2AF/serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Certificate serial: 05B7
Authority key identifier: 31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/07BBBA5C3B8F11F09C92B0A0DAE4EC9C.roa
Signing time: Wed 28 May 2025 06:43:15 +0000
ROA not before: Wed 28 May 2025 06:43:10 +0000
ROA not after: Mon 31 Dec 2035 06:43:10 +0000
asID: 37236
IP address blocks: 102.218.120.0/22 maxlen: 22
102.218.120.0/24 maxlen: 24
102.218.121.0/24 maxlen: 24
102.218.122.0/24 maxlen: 24
102.218.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.mft
rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1463 (0x5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36312D2AF, serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Validity
Not Before: May 28 06:43:10 2025 GMT
Not After : Dec 31 06:43:10 2035 GMT
Subject: CN=6836b083-decd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:b4:54:cb:2f:93:93:ac:1a:22:7f:06:b5:
0d:e1:f3:52:8a:90:eb:97:6b:3a:69:c8:61:e7:b3:
5b:ff:b0:44:89:b6:a3:cf:b0:a1:81:20:45:39:e3:
eb:d3:7a:68:58:e4:a5:c9:d6:18:0c:9f:cf:18:80:
64:be:68:6d:b8:ca:1d:7d:e9:1d:bd:e0:84:d2:02:
19:90:6c:30:af:7f:ff:a4:a2:b7:81:ab:c1:b8:1e:
0b:b6:51:1f:fd:7c:f7:5b:f8:3d:a9:3d:f0:23:83:
6e:cc:38:48:08:10:31:1a:c9:42:92:56:3e:64:f0:
6d:e2:e0:b0:5c:81:23:15:1a:13:2f:d4:0b:08:c0:
c3:9d:65:ab:cd:b0:6d:f7:fa:8d:ad:8e:29:83:f4:
d1:61:7f:c8:7d:6e:b2:06:89:47:0a:5d:66:14:6a:
69:ce:1d:d4:74:af:3e:7e:b9:9b:b2:29:a2:33:8a:
fe:9d:86:f6:96:97:1d:2d:b4:34:98:a8:4b:8a:59:
c7:a7:9e:15:90:1a:e8:fb:24:cd:3a:15:d4:dd:21:
05:c5:3e:b6:c2:2c:8c:3b:3d:55:cd:cd:0a:6c:1a:
52:85:f3:b1:0a:7c:10:4f:a1:c0:85:12:37:e5:2a:
45:36:df:3f:98:f1:9d:e5:e3:ad:2a:d3:1e:44:c3:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DE:E9:72:86:7B:01:E5:68:08:65:85:D4:76:3B:9D:D3:BB:DE:F7
X509v3 Authority Key Identifier:
keyid:31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/07BBBA5C3B8F11F09C92B0A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:e6:f0:ef:a2:11:7c:77:9c:4a:d2:f5:6c:2d:63:d4:f2:df:
f3:49:cb:65:ab:a9:c8:63:f4:e4:b8:bc:8a:3a:74:ab:04:2e:
36:02:33:38:76:e0:ed:9f:8c:ba:ea:54:e3:79:7d:c1:e7:21:
bf:11:8f:2c:c8:42:4c:a2:4f:ac:76:7e:9d:15:52:de:33:44:
c6:46:b1:f5:82:4c:3a:9b:2d:d6:d0:d4:6d:e1:11:2b:77:2e:
d3:af:67:2d:f1:15:ab:03:c8:6e:d8:bc:5c:82:f7:de:b7:aa:
ac:f3:af:ff:37:33:ea:02:bc:cb:00:40:95:40:36:8b:cb:97:
9e:86:e9:a9:3e:bb:cc:a1:0a:f4:53:ec:2a:0f:f8:bb:45:47:
a0:43:4e:87:54:e2:15:78:4a:f6:c9:2f:4a:3a:53:4a:c4:61:
8c:24:83:9f:e1:45:88:e6:b1:06:c9:86:3c:6b:93:c3:32:cb:
4e:4a:80:c2:f7:a2:0a:97:a9:9f:32:f3:a1:9f:3b:f6:59:1d:
1a:8c:2a:de:46:80:a7:09:10:b8:a0:ac:9c:9a:3a:92:14:46:
65:d6:16:d8:1b:6d:27:19:e8:fc:94:e3:f8:0a:f1:6e:b5:7a:
4b:da:4b:fc:7e:5e:bb:0a:a5:31:bd:32:ac:f2:b0:43:c7:5d:
3a:de:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:15:26 2025 by rpki-client