Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/3B737D98EBF411EF92D3FFB8762E951A.roa
File: 3B737D98EBF411EF92D3FFB8762E951A.roa (raw, json)
Hash identifier: pQmnrQ6q9u7W7aARZAIAyyTTaaaxPxFrGBxw2K6Ihk4=
Subject key identifier: D9:3F:14:91:EE:C3:58:87:3E:AE:E0:CF:A2:29:EC:DF:63:F0:A9:46
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: 01BC
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/3B737D98EBF411EF92D3FFB8762E951A.roa
Signing time: Sat 15 Feb 2025 23:26:07 +0000
ROA not before: Sun 16 Feb 2025 23:26:03 +0000
ROA not after: Wed 28 Feb 2035 23:26:03 +0000
asID: 329007
IP address blocks: 102.216.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF
Validity
Not Before: Feb 16 23:26:03 2025 GMT
Not After : Feb 28 23:26:03 2035 GMT
Subject: CN=67b1228f-51c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:2a:49:61:2b:95:cc:a4:e5:43:48:f2:5c:
10:32:e9:dc:22:36:97:2b:d4:fd:b0:47:d2:58:88:
3e:13:4b:86:de:52:44:09:78:64:2e:f7:38:c7:ae:
d7:6a:8e:be:95:eb:87:0c:cc:01:46:b2:12:77:11:
a9:15:bc:eb:74:f0:b8:4b:c8:03:fb:61:60:cc:a7:
76:21:f7:02:3c:da:50:5e:f2:01:ab:a5:02:6c:1b:
b1:61:f7:4b:eb:4c:e2:14:94:ae:66:4b:34:9d:ab:
29:25:2d:96:e6:a0:53:2b:8b:c2:31:86:9a:ff:89:
85:b5:53:53:e1:6d:da:af:5f:3f:81:21:7a:2d:80:
d6:43:79:b8:aa:7c:ff:26:3b:47:47:1e:90:60:81:
2b:8f:b4:4d:d0:c7:0a:87:e8:c7:fb:df:f9:7b:5f:
4a:13:ff:dc:a9:be:44:e3:ea:0a:3d:c3:a6:3e:43:
52:c3:d8:4b:74:0c:57:5f:f8:0e:99:e0:0b:38:c1:
a4:7f:a6:f5:f1:52:af:b5:93:00:85:73:cd:cb:80:
5c:0a:78:17:fc:f6:7b:5a:db:18:ab:d1:8e:20:3c:
cd:76:79:50:0c:fb:94:af:8e:1b:6f:1d:f7:6c:36:
dc:12:15:c1:05:2b:a3:26:1b:4c:d6:7c:10:a2:47:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3F:14:91:EE:C3:58:87:3E:AE:E0:CF:A2:29:EC:DF:63:F0:A9:46
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/3B737D98EBF411EF92D3FFB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.252.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f2:73:6e:1d:f8:b8:4c:fe:88:66:5d:67:bf:2b:f1:7c:5c:
d1:65:2f:d0:b1:47:ff:e4:c7:d7:53:b0:62:a3:9d:ba:ce:ae:
de:3d:67:ef:6e:8c:cd:04:05:19:ce:57:ef:a3:54:97:09:a7:
74:e5:f9:52:49:45:99:34:80:6a:4c:b8:ab:28:d3:6a:11:4a:
19:39:93:44:ea:0f:58:2c:f4:42:a8:4f:6d:30:3d:c9:77:91:
b3:cb:5a:99:60:de:e8:cc:e4:c2:c7:e7:6f:9d:44:b6:9d:9e:
2a:cf:dd:aa:49:de:0b:aa:04:6f:3c:56:59:ec:5e:7e:b9:63:
48:27:92:83:64:eb:b2:23:fc:2f:5b:2a:d9:fe:11:84:a2:d6:
f5:82:36:ea:1f:f6:f7:b8:c8:2f:02:22:ce:85:da:e0:5f:f0:
d3:2d:92:b6:6d:0d:30:8d:5a:ed:42:86:10:b9:26:95:82:b5:
6f:e4:49:f3:42:c3:17:3b:6f:8c:ec:c0:57:39:a4:03:9c:5c:
29:e3:ca:9f:3a:55:d4:d2:cf:c9:a2:bc:01:b0:9d:53:29:fc:
5a:3f:34:c8:80:fb:70:cb:68:28:f9:22:dd:bb:9b:5b:27:b5:
08:b3:1a:0c:24:6e:08:28:c5:e8:01:f1:52:ad:c9:bf:e9:c8:
21:ee:62:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:59 2025 by rpki-client