Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/034B4056317011F0960BB9BBDAE4EC9C.roa
File: 034B4056317011F0960BB9BBDAE4EC9C.roa (raw, json)
Hash identifier: 8EdsfqrdTyiR6sjIsfm2OCwX3gpoE6Lu3uWVDJVedCo=
Subject key identifier: 69:41:E1:84:A5:FF:2F:53:A6:75:3D:A3:02:2B:CD:14:20:AE:6E:B6
Certificate issuer: /CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Certificate serial: 0442
Authority key identifier: 0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/034B4056317011F0960BB9BBDAE4EC9C.roa
Signing time: Thu 15 May 2025 09:36:01 +0000
ROA not before: Thu 15 May 2025 09:35:57 +0000
ROA not after: Tue 15 May 2035 09:35:57 +0000
asID: 328178
IP address blocks: 102.206.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662367AF, serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Validity
Not Before: May 15 09:35:57 2025 GMT
Not After : May 15 09:35:57 2035 GMT
Subject: CN=6825b581-a850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:9b:11:c9:68:44:30:bc:96:58:43:0d:f6:
1b:92:df:5e:a7:01:b9:65:e9:21:55:db:15:36:66:
ff:f0:d4:43:b8:7f:53:97:20:ed:26:43:77:95:7e:
5c:70:63:1a:69:f7:ea:74:8c:dc:16:f5:c0:e2:de:
fa:70:15:fe:56:6e:ca:c9:ce:32:9b:8e:0f:dc:86:
26:b2:a9:d5:8c:1d:06:ad:94:5d:15:5b:4f:f3:43:
22:a5:8d:2f:0d:0c:ce:31:86:c0:46:38:4f:d8:66:
e8:a1:59:90:dd:1b:8d:55:a0:3c:30:25:52:5a:4e:
a4:1d:e9:86:43:6f:da:8d:56:c5:c0:6f:0b:de:e0:
6a:2b:c7:02:41:df:99:0b:88:8b:ff:32:0a:b1:b0:
20:05:cd:c2:d6:78:bc:cb:f9:45:39:87:0f:07:36:
b2:ff:cd:e8:9b:e7:82:ac:59:c5:e9:44:84:0a:e4:
a6:e5:d7:17:cd:fa:7b:22:e8:e0:41:91:e8:ba:12:
da:82:29:42:37:bd:7d:68:d7:be:03:9a:16:df:ea:
c1:2e:48:1d:b0:b4:26:b6:13:40:b5:bc:de:16:46:
42:7e:3d:a3:60:af:0a:4d:e2:37:73:b9:ae:e4:19:
64:28:c1:f3:a5:7a:c4:63:dc:6f:87:89:49:df:99:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:E1:84:A5:FF:2F:53:A6:75:3D:A3:02:2B:CD:14:20:AE:6E:B6
X509v3 Authority Key Identifier:
keyid:0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/034B4056317011F0960BB9BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:21:c8:73:be:60:f1:d5:dc:fb:10:b3:76:4a:4b:aa:00:44:
be:ab:ba:79:f9:30:c6:b2:f0:1a:48:76:f7:18:5d:f5:62:5e:
df:9f:ae:f4:8a:81:4d:d5:24:aa:dc:6a:85:2b:c6:d5:03:fc:
9d:32:f0:6b:03:07:8f:ad:2b:56:2f:94:8a:72:75:66:36:46:
cd:6d:82:83:ac:19:be:02:2f:44:6b:05:ef:20:b6:a1:fd:90:
49:59:6a:4f:71:13:48:e9:1f:2a:a8:af:eb:95:19:40:94:54:
25:20:be:15:03:1a:f2:95:5a:c0:ac:94:26:8f:82:b1:7d:eb:
57:c4:54:37:a7:37:c1:ea:ba:4b:11:67:2a:38:f6:70:d2:e4:
fc:33:77:5a:b3:4b:54:bb:21:d0:14:a0:8a:17:1f:9e:8e:b7:
62:97:7a:08:41:55:ec:e5:78:ef:57:0c:84:cd:77:96:e7:d3:
4d:9f:22:e4:a4:23:bd:73:d7:20:13:b6:dc:d5:27:6d:b7:68:
1f:bb:70:19:91:c1:9a:e6:bd:d3:60:a5:73:b9:dd:fd:ba:80:
5d:38:d6:71:d3:98:44:f5:f7:41:2f:49:d3:e0:be:60:3d:ac:
60:91:2c:ee:28:9d:ba:af:2b:4d:8b:87:e3:68:6f:8d:c8:12:
1c:3d:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:05 2025 by rpki-client