Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/78BEFA000ED711F094E47269762E951A.roa
File: 78BEFA000ED711F094E47269762E951A.roa (raw, json)
Hash identifier: gf/iIe8B7Q7+70N4QIwyaKLltKOZilfFFlNYOezKILQ=
Subject key identifier: 2E:C2:6C:CF:47:63:36:77:4D:49:C6:AB:28:DC:CA:01:6D:DB:41:C8
Certificate issuer: /CN=F367F81DAF/serialNumber=B08F040F51115E4BCC72E4E85F6FDA0564007C79
Certificate serial: 0B
Authority key identifier: B0:8F:04:0F:51:11:5E:4B:CC:72:E4:E8:5F:6F:DA:05:64:00:7C:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sI8ED1ERXkvMcuToX2_aBWQAfHk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/78BEFA000ED711F094E47269762E951A.roa
Signing time: Tue 01 Apr 2025 08:58:26 +0000
ROA not before: Tue 01 Apr 2025 08:58:22 +0000
ROA not after: Mon 01 Apr 2030 08:58:22 +0000
asID: 329286
IP address blocks: 102.211.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.mft
rsync://rpki.afrinic.net/repository/afrinic/sI8ED1ERXkvMcuToX2_aBWQAfHk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F81DAF
Validity
Not Before: Apr 1 08:58:22 2025 GMT
Not After : Apr 1 08:58:22 2030 GMT
Subject: CN=67ebaab1-f3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:de:f8:01:03:aa:b0:b5:46:f6:46:a2:2f:
02:f9:30:09:f7:47:7b:66:c0:c2:44:cd:02:bf:35:
4f:04:78:26:e3:ca:77:be:c3:9c:8e:b2:30:1c:c2:
d2:f5:9b:57:93:86:b0:c0:7f:3b:6e:fc:d3:c2:56:
a3:55:0b:dd:fa:40:46:3e:12:55:48:3b:a6:d5:e5:
3b:b9:76:10:e1:75:f1:b9:61:60:0b:36:2a:18:63:
e2:2b:3c:37:4e:ce:10:69:d4:e8:6a:b8:39:8a:4c:
c1:97:fd:89:a5:58:e5:3e:94:bb:a4:64:20:72:91:
6f:61:d2:db:ef:58:55:b3:94:0b:14:33:45:46:be:
c3:c2:0b:ac:ef:a1:b6:1b:b0:66:24:e6:1e:0b:11:
00:1e:5c:23:68:55:fd:48:70:22:31:12:d6:94:a7:
cb:28:6c:06:25:7d:62:87:bf:f4:cc:13:d0:88:66:
5d:d3:dc:18:69:ca:ce:93:e1:fe:97:17:35:13:c1:
dc:e9:b3:bb:d5:87:ba:6e:9f:11:bd:d9:95:d6:3a:
05:37:2c:38:de:22:68:e3:48:94:63:e9:06:6a:d2:
70:17:a1:81:da:9c:92:1d:6d:c3:98:1a:5e:81:23:
fa:e0:4e:7a:14:e0:ce:bc:7f:50:15:40:d6:68:21:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:6C:CF:47:63:36:77:4D:49:C6:AB:28:DC:CA:01:6D:DB:41:C8
X509v3 Authority Key Identifier:
keyid:B0:8F:04:0F:51:11:5E:4B:CC:72:E4:E8:5F:6F:DA:05:64:00:7C:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sI8ED1ERXkvMcuToX2_aBWQAfHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/78BEFA000ED711F094E47269762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.224.0/22
Signature Algorithm: sha256WithRSAEncryption
38:bd:fc:84:b4:e9:ed:a7:64:3f:0a:64:c6:40:64:08:04:4e:
56:a7:8c:e0:52:9a:43:d8:e7:62:c6:dc:d6:46:24:82:db:e1:
7a:51:0b:ee:84:74:ed:c9:e5:2a:11:e0:75:3c:19:91:ba:d9:
b6:7b:2c:10:b6:d5:50:c0:d3:dc:97:26:da:89:84:09:ca:f1:
bd:05:61:fa:23:45:c1:2f:7f:13:90:1c:10:48:29:f7:f1:7b:
95:27:1d:0c:89:8b:e6:76:a3:49:d4:ea:a3:12:13:d9:56:d5:
a4:cd:4f:c7:fb:c7:2e:b5:69:d8:e1:8b:55:e3:87:1c:1f:9c:
89:36:d2:eb:1e:a6:b6:39:e4:e2:16:63:fd:99:97:8d:36:1f:
8b:fa:99:1f:35:ae:7e:f3:ab:be:70:b9:ab:13:07:ae:c7:c9:
16:53:b8:94:6c:56:f5:5f:7b:db:95:36:2f:94:2d:ac:12:d7:
b6:2a:9f:24:b0:ea:af:eb:3e:67:b4:d5:50:59:a9:d1:6b:5d:
8b:d2:c4:5c:f6:25:2c:b8:df:66:ad:e9:3e:96:17:ca:51:77:
c8:47:00:dc:77:04:81:84:a6:fc:67:f4:4e:43:96:0f:83:1e:
a5:3a:52:fa:d2:3b:44:69:ff:aa:55:b4:22:0f:23:48:6d:65:
8f:77:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:05 2025 by rpki-client