Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/B462D8D82F8B11EEB56DF4854AD9E6FC.roa
File: B462D8D82F8B11EEB56DF4854AD9E6FC.roa (raw, json)
Hash identifier: 3rPCInMw+EEjO+SkcdOcCFvzH0LbvdYKi1OViu27UlQ=
Subject key identifier: 6C:37:59:E4:41:F3:1B:92:BA:88:E7:B8:C4:F1:30:3A:03:03:62:32
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 04E9
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/B462D8D82F8B11EEB56DF4854AD9E6FC.roa
Signing time: Mon 31 Jul 2023 10:19:17 +0000
ROA not before: Mon 31 Jul 2023 10:19:13 +0000
ROA not after: Fri 31 Jul 2043 10:19:13 +0000
asID: 198949
IP address blocks: 105.48.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF
Validity
Not Before: Jul 31 10:19:13 2023 GMT
Not After : Jul 31 10:19:13 2043 GMT
Subject: CN=64c78aa5-44e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:6a:78:69:6b:e9:4d:54:ab:b3:a1:f2:2e:
ab:e7:e6:b7:c7:7d:87:53:40:36:35:67:11:45:9d:
04:26:24:25:74:ec:20:74:15:dc:54:2b:81:25:a5:
e9:a9:6d:04:fc:af:7f:e0:35:37:71:d9:e8:3a:44:
a1:d7:a2:f7:77:47:95:43:7f:2e:eb:27:ae:27:00:
88:33:38:82:27:c1:a8:fe:dd:18:0e:d6:74:6f:f1:
ea:18:12:68:27:34:a7:5a:75:c6:94:c8:51:08:5a:
c0:32:ab:53:bf:72:36:6a:fc:cf:41:0c:c6:93:b4:
f6:a4:6e:3d:91:ee:75:30:c1:28:6e:1a:ab:3a:63:
06:81:f4:7a:01:2a:01:06:07:82:3d:66:33:f3:d3:
b9:0d:9c:91:90:c7:f3:cb:28:ec:23:aa:27:bc:a7:
92:d5:82:7e:e5:46:87:d3:25:38:ea:8c:72:cc:ef:
4d:54:48:0f:03:33:ec:0d:4e:7a:3b:1f:07:a8:ab:
b8:f5:84:95:a1:32:e9:33:08:7f:54:9e:0e:bb:82:
c2:1d:92:14:79:8e:54:23:29:32:7f:c0:c9:7c:3c:
08:5a:c7:98:f6:82:20:8f:7f:65:3a:09:88:36:a4:
10:be:62:9a:b8:1f:52:bc:99:90:56:9d:7d:ce:c4:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:37:59:E4:41:F3:1B:92:BA:88:E7:B8:C4:F1:30:3A:03:03:62:32
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/B462D8D82F8B11EEB56DF4854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.48.0.0/12
Signature Algorithm: sha256WithRSAEncryption
aa:4c:ce:16:b1:3e:ed:be:e6:d4:cc:25:a4:70:4d:b0:de:d3:
75:f3:4c:69:00:bf:01:47:98:72:31:6c:24:78:10:71:2d:e0:
7f:80:2f:77:fb:9d:7a:2b:55:2b:b9:e0:52:3e:68:93:57:d2:
07:b2:9e:51:60:b6:8f:aa:18:3d:0c:86:8e:dd:ef:9f:5a:83:
47:67:54:a3:e3:c0:d8:69:6c:48:af:0b:07:b0:05:81:1b:15:
3b:91:f6:59:9e:f5:eb:c8:d0:4e:4a:0e:fb:44:5a:ef:be:7c:
da:ce:0f:62:a4:c9:85:9b:e2:3b:89:1d:ad:fa:47:32:d9:9e:
6e:f2:51:64:b2:06:a1:b8:e1:be:2f:b3:e9:0b:57:f6:9d:5c:
b5:42:b6:6a:b5:98:7e:5e:de:54:8b:2d:1a:2d:92:ed:58:df:
b7:f0:08:ca:73:28:ed:8d:95:9d:ef:6c:fd:fc:98:65:ca:22:
34:1e:c7:8f:79:db:98:68:f8:ac:48:10:33:a1:97:a5:ea:0b:
d2:e1:a1:6a:8e:74:aa:10:73:46:fe:69:79:7a:03:4a:a6:0b:
2b:a2:51:d2:81:ec:85:8c:14:ad:ef:4c:17:9d:3d:5d:8c:e3:
1e:6c:ec:c3:0a:91:4c:c3:40:96:0b:77:07:82:c0:26:fb:d9:
43:81:32:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:16:47 2025 by rpki-client