Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/5B430E4AB09411EF9DCD797D762E951A.roa
File: 5B430E4AB09411EF9DCD797D762E951A.roa (raw, json)
Hash identifier: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=
Subject key identifier: B4:5C:7E:BC:E2:4B:27:83:8E:48:5F:D6:45:BD:C8:F1:F3:55:64:97
Certificate issuer: /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial: 0350
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/5B430E4AB09411EF9DCD797D762E951A.roa
Signing time: Mon 02 Dec 2024 10:01:10 +0000
ROA not before: Mon 02 Dec 2024 10:01:07 +0000
ROA not after: Sat 02 Dec 2034 10:01:07 +0000
asID: 329097
IP address blocks: 102.207.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 02:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848 (0x350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366DA43AF
Validity
Not Before: Dec 2 10:01:07 2024 GMT
Not After : Dec 2 10:01:07 2034 GMT
Subject: CN=674d8566-d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:e0:8d:24:3c:2c:5b:15:bc:b2:a0:ea:a8:
a0:f3:61:a1:dd:94:93:7a:d7:fe:5e:fc:ab:65:53:
c8:85:82:e6:5a:83:c2:c5:2a:c5:de:e7:b1:31:c2:
8b:da:70:9e:37:74:19:5b:36:9b:dd:c6:56:51:89:
7c:eb:0b:f6:f1:78:cc:b0:07:30:6e:5f:a0:3f:03:
77:35:33:16:b0:0f:c7:ec:00:09:4e:e0:49:cf:cf:
89:3b:7c:fe:3c:27:2d:af:19:6b:6e:91:4c:f4:c5:
b3:d6:7d:b5:fb:60:4d:db:4a:bd:e5:14:79:b8:cb:
0f:fa:24:fb:5c:1d:a6:a8:00:1a:64:83:dd:8d:eb:
6b:fa:51:b7:85:c1:6c:97:ac:0c:6b:f0:15:29:48:
ad:5d:59:52:f9:d0:58:37:7a:82:7a:06:f6:c4:f9:
cb:c8:30:d4:3e:8e:9c:4b:4c:9a:9f:16:b6:9c:49:
d0:b6:6d:c9:60:52:02:93:6f:24:40:23:79:68:03:
b1:91:cf:af:54:0d:67:c0:7b:67:9f:52:3e:4b:10:
6c:38:d5:a8:0f:ff:09:a4:e0:01:19:49:5d:ad:25:
ce:b7:ac:53:50:d4:3d:36:e5:d2:c9:92:39:b8:61:
9c:21:e0:c2:84:27:f0:af:52:c3:85:4c:5d:40:68:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:7E:BC:E2:4B:27:83:8E:48:5F:D6:45:BD:C8:F1:F3:55:64:97
X509v3 Authority Key Identifier:
keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/5B430E4AB09411EF9DCD797D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.96.0/24
Signature Algorithm: sha256WithRSAEncryption
51:58:a0:5c:62:15:a0:a6:3f:6c:59:0e:04:5c:f8:7e:57:4e:
a5:18:50:07:f9:d5:70:b9:cc:e4:c6:1c:04:4a:9b:f3:ff:d9:
aa:b9:85:4c:df:17:3e:0a:fd:5e:c0:75:99:1d:41:69:7b:50:
54:14:ec:e5:8a:cc:93:e8:1f:1a:3d:9a:e2:d0:c9:fd:6f:86:
b1:a0:dc:a7:a3:8d:8c:52:b4:db:a1:0f:d7:b5:49:26:9e:bc:
12:48:ea:62:26:11:5b:32:32:6c:00:18:b9:2b:e7:24:29:f8:
45:b9:f3:8f:e6:2d:71:9d:b9:6b:3c:c0:0d:d2:86:9c:b0:40:
16:9a:9b:92:f7:91:44:fb:58:ff:33:02:e7:95:7c:30:74:f7:
ba:9b:1c:a4:96:8d:bf:8d:94:65:0e:00:a0:b1:4f:d5:2e:1f:
49:32:05:8c:a2:6e:fe:86:bf:c3:ba:b6:fc:c9:94:e1:69:38:
c2:a2:21:7d:51:d7:c5:3b:b5:ff:ce:c8:0b:ba:6a:b7:06:d3:
a9:cd:03:41:c5:e2:3a:26:12:34:81:21:c3:26:a9:d1:b3:1f:
df:e6:68:2f:b5:83:cd:74:0a:6d:57:7b:c4:51:b5:98:83:88:
c1:81:78:3b:5b:7b:7a:bf:45:1e:6e:f1:61:ef:09:fe:61:db:
6f:84:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:30:11 2025 by rpki-client