Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E982609EEDD811EF90D54F98762E951A.roa
File: E982609EEDD811EF90D54F98762E951A.roa (raw, json)
Hash identifier: cUpb8n8Lqnu8MrGOet7fTuOg3FYZF+eIklr+i2hXoH8=
Subject key identifier: 93:C1:11:AA:46:0A:66:08:3C:88:AC:33:08:E1:9D:CA:76:C0:54:9A
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 078A
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E982609EEDD811EF90D54F98762E951A.roa
Signing time: Tue 18 Feb 2025 09:15:36 +0000
ROA not before: Tue 18 Feb 2025 09:15:31 +0000
ROA not after: Tue 28 Feb 2045 09:15:31 +0000
asID: 3741
IP address blocks: 197.80.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF
Validity
Not Before: Feb 18 09:15:31 2025 GMT
Not After : Feb 28 09:15:31 2045 GMT
Subject: CN=67b44fb8-5533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:01:54:3c:76:91:c8:9c:37:77:bd:81:25:
fd:99:6f:59:07:09:85:5c:27:53:47:20:d3:29:9d:
46:1f:40:c2:32:65:b4:f9:cf:c1:e6:08:bb:0d:48:
fb:99:4d:9e:c8:0a:77:4d:a6:e1:58:f6:b2:37:3e:
55:84:47:12:aa:70:ae:67:8c:50:11:91:c6:de:9f:
4a:76:a0:73:4d:1e:a3:22:f4:33:6a:aa:b3:09:2a:
e4:95:35:ae:f3:a0:a5:02:b8:cf:b2:cf:a8:3e:05:
ff:aa:2d:1a:55:07:a9:a1:18:c8:b6:52:09:51:97:
34:df:d7:fa:c5:4f:3a:50:fa:1f:4a:84:d9:6e:18:
8c:77:d8:54:45:df:c8:e4:53:29:d9:34:21:95:fb:
8c:14:aa:a8:55:f7:ed:b8:da:09:be:fd:49:52:f5:
31:71:4a:8c:62:ee:3e:6e:7e:7c:b1:b3:e8:32:db:
0a:1b:95:ee:19:24:a6:47:b7:6b:ea:55:e3:0d:08:
7c:d6:dc:09:08:a4:dd:41:3d:9b:12:48:28:e0:cd:
3c:61:e0:ac:a0:68:74:92:18:a3:2e:d0:77:19:b8:
30:02:f2:bd:5b:81:04:44:a8:81:9a:bb:04:9a:f1:
0f:d5:69:75:da:7e:5e:a9:1f:b4:a3:ff:45:a1:43:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C1:11:AA:46:0A:66:08:3C:88:AC:33:08:E1:9D:CA:76:C0:54:9A
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E982609EEDD811EF90D54F98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.80.7.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c0:4e:0c:e6:51:37:47:6f:5d:20:99:f1:cb:54:43:04:fc:
a7:3e:33:9a:5e:62:4e:da:a0:5b:bc:7a:9b:ef:ae:4a:1c:f6:
9e:14:e9:4c:c1:ce:da:95:9b:16:95:4f:33:8e:ae:be:b5:70:
50:28:e2:5c:8a:f9:1e:70:e8:c0:2f:ff:53:78:cb:2c:5e:86:
f6:5e:e1:aa:b9:85:02:16:b7:5f:12:a1:71:7e:af:ab:3e:33:
35:cb:04:14:47:93:c3:b1:3c:b0:a3:0a:03:b3:fb:7c:55:84:
33:70:30:6c:c6:56:e1:f5:ca:b9:17:37:fc:a4:64:3c:9c:1f:
49:91:58:ef:0c:08:32:ed:6f:b3:5a:10:61:cb:e8:b5:b0:6f:
e0:5b:58:59:c5:46:a7:72:3e:ee:70:95:c9:09:e7:47:9d:c5:
61:a0:e6:20:a1:d9:8c:63:f9:a9:aa:aa:06:8b:9f:30:8c:5e:
45:26:96:a6:24:d7:45:5e:a3:7a:51:36:d0:46:4d:5c:3c:0a:
a1:2a:ff:45:28:7a:4b:cc:3f:bb:b7:28:72:ed:24:45:31:fc:
b2:7f:c8:74:73:7d:18:e4:18:58:1f:36:7e:9b:8a:da:e2:ae:
68:0d:7c:54:94:bd:ec:af:b9:55:57:3b:b5:cb:ba:39:63:99:
a9:7a:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:31 2025 by rpki-client