Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/27DA075C0E5411F094C60A43762E951A.roa
File: 27DA075C0E5411F094C60A43762E951A.roa (raw, json)
Hash identifier: uSWwhbpaM7heLFZrX193ZEyM5nKa4FeuK+VjWT68aec=
Subject key identifier: BB:CD:99:15:22:1E:A1:3A:6B:0D:70:46:3A:E0:81:F6:EC:25:D8:8C
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 06BE
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/27DA075C0E5411F094C60A43762E951A.roa
Signing time: Mon 31 Mar 2025 17:18:26 +0000
ROA not before: Mon 31 Mar 2025 17:18:22 +0000
ROA not after: Sat 31 Mar 2035 17:18:22 +0000
asID: 328748
IP address blocks: 102.207.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1726 (0x6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF
Validity
Not Before: Mar 31 17:18:22 2025 GMT
Not After : Mar 31 17:18:22 2035 GMT
Subject: CN=67eace62-3e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:c0:71:3c:35:85:17:3c:11:2f:d7:32:63:
65:0b:58:19:ac:66:6f:bd:1d:e7:1e:19:6c:d5:01:
29:18:f7:88:28:0c:78:ce:f7:b3:53:82:11:5a:0d:
4d:72:81:aa:58:e3:49:f8:bf:02:a0:6e:4a:5f:ef:
35:6d:ca:70:3b:5c:7b:1a:81:3b:ce:da:7c:8f:44:
26:92:26:d8:f8:48:0c:90:fd:51:cc:34:fa:5e:14:
f0:11:2e:f2:be:a9:00:3d:2b:4a:29:47:cf:d0:52:
7d:e9:a3:16:c3:f9:43:9d:45:4c:cf:17:ae:dc:98:
ca:eb:75:d3:a2:77:f1:67:84:94:d2:78:fb:5e:a6:
73:4b:87:76:ec:c1:6a:a2:c5:11:f4:ed:76:b6:06:
0b:14:95:95:14:b0:a1:9b:f8:2a:55:5d:8a:db:62:
02:a8:42:4e:d0:25:9c:0b:5c:55:d0:ab:5b:3c:bd:
36:aa:92:42:71:e3:46:f3:f0:9a:41:04:a5:61:79:
dc:f2:94:14:82:31:55:33:c9:c0:cd:21:b0:d6:50:
ec:ee:15:29:fa:ab:99:3b:07:90:e5:d1:bc:39:02:
ce:dd:b9:b1:31:9c:b8:9c:a3:5a:ad:4d:82:ba:d8:
8f:32:0c:00:bc:65:21:84:2f:70:f8:14:40:95:2b:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CD:99:15:22:1E:A1:3A:6B:0D:70:46:3A:E0:81:F6:EC:25:D8:8C
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/27DA075C0E5411F094C60A43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.36.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:e2:fe:ee:9f:c4:d9:b5:99:3c:dc:16:cd:f5:6d:63:af:2c:
29:50:3b:18:e5:de:0f:d8:6b:1b:eb:bf:b4:d7:c8:15:84:11:
aa:af:68:37:c6:b3:5b:f6:eb:0b:3c:cc:02:82:7d:77:fa:18:
23:f8:b6:60:b9:26:82:7d:8e:af:08:99:41:f5:b4:a6:28:45:
4a:55:20:9c:97:34:cf:02:f8:9b:ab:80:ee:4b:91:0f:7a:c1:
45:93:5a:32:09:8c:66:7e:63:54:61:e1:df:16:ca:51:79:28:
88:5a:1e:03:d5:59:0a:90:fe:80:94:8c:a1:25:24:10:ab:31:
05:83:2a:66:d7:3a:81:d8:8b:be:c6:19:81:a9:fe:2e:16:b0:
ed:2d:86:dc:b8:e3:53:a2:7b:ef:73:11:14:84:79:8b:ac:a8:
89:4e:a8:0e:b6:7f:46:ec:8f:b7:6f:6d:45:1f:91:ce:e3:6b:
4d:a5:31:0a:b0:58:5a:f5:a4:c0:c1:2c:75:e6:09:52:ed:b1:
2b:cc:ca:fc:f6:44:d5:f2:8e:83:e3:d2:ba:e0:46:fd:17:a0:
48:cc:61:e8:ee:9d:cd:5f:ca:6d:f6:4a:67:39:d7:1b:71:9a:
ab:ce:6e:f1:76:a3:a1:03:8c:64:c4:0d:27:4f:de:6c:72:bb:
df:53:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:05 2025 by rpki-client