Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/05B9E9DAD17D11EF95C142AC762E951A.roa
File: 05B9E9DAD17D11EF95C142AC762E951A.roa (raw, json)
Hash identifier: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=
Subject key identifier: 3E:04:BD:B1:11:5C:F3:9F:00:E6:A4:21:1A:B9:30:FC:3F:FC:D3:43
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 038B
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/05B9E9DAD17D11EF95C142AC762E951A.roa
Signing time: Mon 13 Jan 2025 07:07:17 +0000
ROA not before: Mon 13 Jan 2025 07:07:13 +0000
ROA not after: Thu 15 Jan 2026 07:07:13 +0000
asID: 328271
IP address blocks: 102.210.56.0/22 maxlen: 22
102.210.56.0/24 maxlen: 24
102.210.57.0/24 maxlen: 24
102.210.58.0/24 maxlen: 24
102.210.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907 (0x38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF
Validity
Not Before: Jan 13 07:07:13 2025 GMT
Not After : Jan 15 07:07:13 2026 GMT
Subject: CN=6784bba5-9160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:9b:25:fa:a2:d3:b0:e1:00:99:e8:3c:4d:
84:86:36:76:06:3e:d5:6b:3c:c8:79:db:f8:8d:b5:
9b:94:69:0b:0f:ae:b9:90:20:e6:5d:77:77:a9:6b:
be:65:97:f9:72:63:fe:ac:d4:aa:63:02:12:cf:9e:
7a:af:f7:ca:64:f6:f8:fa:6c:41:17:32:2f:51:20:
2c:59:e6:3e:20:c2:f4:ce:93:79:25:d5:7c:dd:37:
7b:50:27:3d:03:e9:ce:d0:aa:c6:e5:be:bc:4a:46:
6d:5a:53:38:5f:48:4e:0a:7d:c1:16:ec:ea:c4:90:
10:bc:1a:41:e3:c9:98:93:b8:d8:8b:95:17:19:ff:
d0:95:6e:c7:bd:ee:43:41:d8:9c:ed:44:b7:7a:55:
4b:55:fe:85:03:64:e1:18:d3:09:8a:ad:9c:c0:eb:
c5:d9:ad:58:4b:0a:81:62:c9:aa:6a:2e:c9:3c:89:
4d:4f:f7:db:85:8f:a5:46:b8:86:b6:af:b8:2d:ed:
a0:0c:81:39:14:47:ee:3e:7f:be:ee:a8:94:2f:55:
cb:a7:93:d1:54:31:de:a6:08:0a:9a:d8:3e:8b:a3:
24:23:ca:20:92:e1:a2:84:77:a1:72:f3:2f:04:65:
13:fa:73:83:80:7d:b5:6d:8f:95:9e:6d:6f:12:7f:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:BD:B1:11:5C:F3:9F:00:E6:A4:21:1A:B9:30:FC:3F:FC:D3:43
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/05B9E9DAD17D11EF95C142AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.56.0/22
Signature Algorithm: sha256WithRSAEncryption
13:10:ca:cd:52:d4:c4:e3:ba:b8:64:80:8d:35:bc:e5:14:c1:
98:c1:d9:f0:e1:4b:30:05:67:ae:b2:0c:83:2b:83:5f:60:8c:
6d:d4:5b:f8:83:33:94:95:ac:7e:9b:1e:e1:a7:96:a3:b5:9e:
f4:9e:fc:57:84:d4:2b:38:64:03:b0:47:75:06:22:4d:bf:ab:
a8:36:8b:a6:8b:5a:bf:7a:88:db:d2:ab:f7:26:a9:8f:4f:79:
84:09:02:c6:e8:05:39:64:81:fb:bc:77:22:a3:1a:17:a1:48:
dc:4b:42:ac:30:8b:f7:48:98:00:86:ed:7f:71:a9:de:11:80:
f2:7a:b7:4d:ea:85:23:be:99:91:29:f2:15:83:f4:d2:45:cb:
c0:09:67:47:80:87:ec:ea:64:27:d1:1b:74:87:df:e0:1e:a3:
40:6a:33:ed:d5:d0:10:0d:81:8f:a0:ca:e1:ae:81:6d:90:c3:
80:15:6b:2f:0d:fb:d1:73:1e:b8:dd:61:9b:36:3d:9d:28:d9:
36:36:7c:ea:c8:dc:df:f0:55:a5:33:b4:29:62:25:7e:ea:e3:
3d:a9:11:01:98:8a:9d:82:91:c3:29:88:cf:34:4b:4c:0e:94:
9d:ee:f0:d6:dd:d8:c9:d6:81:e3:9f:00:cd:b2:49:e1:d1:8d:
f4:4c:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:47 2025 by rpki-client