Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/6CB39A52065F11F09F72D6A6762E951A.roa
File: 6CB39A52065F11F09F72D6A6762E951A.roa (raw, json)
Hash identifier: KFbSjKmPunloU7Gmb0Dg34EjSwNz2s2wIKC6Ly1USZ4=
Subject key identifier: 02:53:8D:E2:00:2D:E9:D2:D4:FC:C9:BF:DA:73:B4:BC:AE:70:FE:D8
Certificate issuer: /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial: 0124
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/6CB39A52065F11F09F72D6A6762E951A.roa
Signing time: Fri 21 Mar 2025 14:18:56 +0000
ROA not before: Fri 21 Mar 2025 14:18:52 +0000
ROA not after: Tue 22 Apr 2025 14:18:52 +0000
asID: 37084
IP address blocks: 41.221.37.0/24 maxlen: 24
41.221.40.0/24 maxlen: 24
41.221.44.0/24 maxlen: 24
196.45.32.0/24 maxlen: 24
196.45.38.0/24 maxlen: 24
196.45.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368BC41AF
Validity
Not Before: Mar 21 14:18:52 2025 GMT
Not After : Apr 22 14:18:52 2025 GMT
Subject: CN=67dd7550-68ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:f5:b1:7a:1b:8a:36:07:6a:ec:70:34:f0:
f2:f9:35:64:12:63:fc:83:58:19:3e:3f:f6:b5:c2:
21:17:3a:ef:2f:d1:b8:c0:65:da:5b:19:b3:42:28:
6a:95:e4:9d:64:04:c5:f4:6a:28:b9:50:3f:76:70:
f5:57:27:3b:9f:8d:6a:d3:8e:5a:b7:06:1b:65:8a:
a3:6e:4d:e8:56:1d:59:54:79:95:6e:d8:5a:32:90:
3d:62:b7:5d:c3:66:65:bd:a4:da:12:c4:ef:04:98:
5a:2e:46:38:57:ff:fa:04:fb:3c:71:22:6a:2c:aa:
17:00:d6:b8:fe:4c:4d:90:10:d2:fe:a8:82:f1:5a:
99:8b:62:76:3c:f9:3f:81:31:9a:cf:5d:5b:5b:1c:
9b:6e:29:44:c1:b0:5e:7a:84:af:f7:e2:f5:2d:98:
2b:1b:f3:e2:2f:24:9b:f7:7d:c3:ce:4e:32:37:64:
14:3d:3e:a4:b1:ac:75:6e:d9:ae:85:1a:0a:e2:af:
8c:9d:c0:53:da:53:82:99:fb:dd:b8:cc:da:d0:23:
51:38:71:24:e5:8a:ff:5a:7f:22:8b:da:db:b0:e6:
a8:77:35:d0:ac:f9:c9:4d:49:06:1f:98:97:ca:a8:
63:f6:93:69:f0:08:54:c4:a4:4c:92:fa:b7:4b:1f:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:8D:E2:00:2D:E9:D2:D4:FC:C9:BF:DA:73:B4:BC:AE:70:FE:D8
X509v3 Authority Key Identifier:
keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/6CB39A52065F11F09F72D6A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.37.0/24
41.221.40.0/24
41.221.44.0/24
196.45.32.0/24
196.45.38.0/24
196.45.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4f:89:db:20:1b:58:9e:03:86:7b:41:73:b7:40:8a:c8:19:
8e:a7:14:5c:0a:63:ff:5f:45:2e:ea:5d:6d:33:48:e3:d4:a6:
28:30:6a:df:27:79:b8:95:39:53:27:b5:e1:fe:67:00:b7:f6:
6d:05:38:57:d5:82:76:b0:79:3d:4d:e0:46:91:ed:4a:d7:b4:
98:ef:27:77:d0:17:31:b8:4f:f0:39:4d:56:23:e7:7f:2c:f7:
8f:9e:e9:c7:4f:d2:c6:8a:e9:a8:de:04:0a:43:cd:6c:11:09:
d5:ca:4a:e7:ce:c7:e4:c8:11:ac:c2:38:46:6b:ac:46:b9:41:
9f:01:45:3e:e9:e7:2b:6c:59:18:57:36:ce:c5:b9:6b:71:58:
9c:21:57:58:a5:e8:cd:34:2d:fb:ac:70:1b:c2:bf:a0:c4:19:
ca:b8:36:f4:74:2e:b2:fc:2b:86:78:1a:ed:3e:48:5c:5b:3b:
51:71:ac:2f:53:89:a1:e3:f0:62:c3:89:b4:6b:c6:90:f5:17:
5f:34:aa:9a:9a:20:f7:32:e5:ce:e4:15:ec:7b:c2:2a:93:db:
b1:61:83:46:f0:24:73:76:e2:e9:91:29:bb:3a:0d:7a:a9:76:
c3:91:a1:e7:23:82:0d:30:59:be:b6:22:d0:fe:40:55:4c:ba:
9d:9d:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 06:16:44 2025 by rpki-client