Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/02F61C8EED4611EF9EE0C559762E951A.roa
File: 02F61C8EED4611EF9EE0C559762E951A.roa (raw, json)
Hash identifier: a0VBoAhb+w/AiTpkwDup0ND635i4uEH4NIMUxN2UJ2c=
Subject key identifier: 9F:A2:DD:10:3B:0C:54:20:63:6A:28:47:85:E2:48:53:22:00:FA:46
Certificate issuer: /CN=F364C81DAF/serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
Certificate serial: 0874
Authority key identifier: BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/02F61C8EED4611EF9EE0C559762E951A.roa
Signing time: Mon 17 Feb 2025 15:44:02 +0000
ROA not before: Mon 17 Feb 2025 15:43:58 +0000
ROA not after: Fri 01 Jan 2027 15:43:58 +0000
asID: 327822
IP address blocks: 102.223.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 24 Feb 2025 00:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C81DAF
Validity
Not Before: Feb 17 15:43:58 2025 GMT
Not After : Jan 1 15:43:58 2027 GMT
Subject: CN=67b35942-b1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:c1:60:3b:ba:db:3a:94:65:7c:c0:45:64:
55:b0:07:bd:11:d8:48:a0:74:98:ae:93:6b:a2:f7:
42:a1:93:e8:9f:6f:b4:c5:0b:8e:0f:62:58:64:b5:
dd:58:2b:04:8e:ec:bd:5b:d8:73:a7:e4:c1:83:1e:
4e:8a:dd:07:37:a0:5f:db:ea:f7:eb:30:9f:02:48:
fb:86:8d:d9:bc:68:25:13:27:5b:28:11:c4:26:11:
e5:bd:63:89:88:52:0d:8f:03:50:cf:84:5a:7a:f7:
26:7a:bf:ee:04:ce:cf:48:fa:ed:a5:a2:70:a7:bf:
5c:3f:04:06:08:8d:83:03:8e:49:bf:17:22:94:5b:
90:72:6f:dd:3b:84:ca:e1:b0:c3:03:ae:bd:e5:f9:
a1:01:01:e9:54:99:6f:96:e0:00:05:1f:b6:e7:1d:
61:79:e5:de:9f:27:60:a8:42:1a:79:87:ff:71:dc:
42:22:f1:30:8c:db:d9:4e:31:9f:82:7e:0a:31:10:
d6:d8:96:78:1f:66:2e:7b:90:7f:e4:c6:d7:bc:16:
23:ab:3e:4b:f3:aa:3a:20:6c:b1:cd:c0:bd:17:2e:
e0:e6:95:77:75:c0:86:ec:60:1a:87:62:ab:aa:e5:
c2:ba:eb:da:0a:38:bf:a5:91:4c:c9:f7:92:02:07:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A2:DD:10:3B:0C:54:20:63:6A:28:47:85:E2:48:53:22:00:FA:46
X509v3 Authority Key Identifier:
keyid:BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/02F61C8EED4611EF9EE0C559762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.203.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bf:28:e0:8b:de:43:29:48:9a:15:d7:c5:ea:29:80:87:ba:
7e:45:d0:ed:1c:42:ac:af:ab:95:c5:ad:da:f9:a7:41:7c:85:
90:09:67:86:13:cc:9b:a1:95:6c:0f:49:eb:8e:2c:a8:e4:e9:
f4:2c:89:5e:12:15:f4:b1:4d:92:d1:ba:40:48:a8:63:1e:62:
41:ea:9c:e2:a6:ee:c6:ad:92:01:81:86:ae:b1:f8:ac:94:6b:
1c:61:fb:f7:72:20:96:0b:9d:c2:e8:30:64:fa:18:7a:61:8b:
30:c4:a3:c0:0a:3d:79:42:82:12:fd:fe:0d:ff:04:eb:4b:f0:
6f:06:7f:02:df:f1:91:54:73:a3:58:dc:c8:70:0b:5d:23:42:
11:00:fe:1f:d5:a0:aa:19:1b:51:61:c2:eb:25:53:9d:ca:90:
9c:7f:f7:48:18:a3:03:49:39:60:28:bb:27:29:f3:8d:c1:65:
ca:cc:16:54:c4:8c:41:30:9b:e1:12:83:93:1e:77:3b:56:1e:
4e:b5:a6:8c:3f:5a:5c:2f:0d:91:7e:95:92:a2:90:14:23:88:
23:6c:6c:b5:03:e4:86:e9:30:4c:4c:c1:4a:04:ad:37:2f:e4:
fe:83:32:ba:c2:42:46:bd:c8:d4:b9:c2:14:83:78:f0:1c:bc:
56:8d:67:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 03:48:43 2025 by rpki-client