Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/421E36CC9A8A11EE9A56173AD25BE465.roa
File: 421E36CC9A8A11EE9A56173AD25BE465.roa (raw, json)
Hash identifier: 6btWgtEr5ZNoJrSB9pwHdhVF5zwvZr6M9WePfENj/6Y=
Subject key identifier: 50:F3:4A:1C:33:0B:2B:8D:41:D5:79:EA:D3:9B:1C:74:10:01:27:6B
Certificate issuer: /CN=F36992ECAF/serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
Certificate serial: 02
Authority key identifier: 31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/421E36CC9A8A11EE9A56173AD25BE465.roa
Signing time: Thu 14 Dec 2023 14:08:30 +0000
ROA not before: Thu 14 Dec 2023 14:08:27 +0000
ROA not after: Sun 14 Dec 2025 14:08:27 +0000
asID: 329376
IP address blocks: 102.210.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl
rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36992ECAF
Validity
Not Before: Dec 14 14:08:27 2023 GMT
Not After : Dec 14 14:08:27 2025 GMT
Subject: CN=657b0c5e-798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:00:2f:07:63:31:21:78:3f:61:11:a7:66:
ad:8c:dc:b6:36:95:b7:29:6b:b8:09:ed:54:c0:ac:
27:02:23:d3:e2:dd:e4:09:be:e1:00:49:6c:c0:d9:
89:5e:2f:29:a3:53:93:85:b3:69:98:83:c3:28:d9:
de:f3:3b:3d:f8:30:29:36:49:da:60:25:c7:69:ea:
68:c2:f0:06:91:d5:3d:9d:c4:b6:a6:aa:17:ab:00:
c7:a3:08:93:b9:f9:3d:37:6f:5f:3b:fd:e4:b9:27:
3d:9f:6c:15:32:7c:4f:05:33:d1:bf:6c:f2:07:aa:
a1:7c:11:8a:c3:11:31:e1:66:b2:aa:33:88:14:91:
7f:84:a0:fb:c2:00:c7:27:e5:7c:37:84:b4:8f:fe:
ec:21:ad:0b:30:9f:26:8a:a9:a8:3f:3c:13:53:88:
b1:37:32:41:2e:9b:0d:0b:5e:31:b3:28:39:5a:4e:
23:e6:54:78:eb:a2:ef:bc:49:27:9b:bd:c6:62:60:
78:bc:7b:0f:20:9d:7e:bf:a4:94:6f:37:a3:9f:48:
d0:cc:3b:c9:3c:9f:c0:f7:9c:20:02:1a:89:2b:5f:
47:cc:40:68:c1:2c:bf:e4:c3:84:e7:16:7f:f3:3d:
93:d8:4a:ab:a3:4f:a9:70:7c:6f:a1:c8:75:ec:63:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:4A:1C:33:0B:2B:8D:41:D5:79:EA:D3:9B:1C:74:10:01:27:6B
X509v3 Authority Key Identifier:
keyid:31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/421E36CC9A8A11EE9A56173AD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:39:7d:b0:ab:ad:7d:74:03:0a:fe:5a:a1:f9:51:84:6c:c3:
fc:a8:32:45:f2:1f:f6:dd:55:dd:f0:8f:34:69:bd:cf:5d:dd:
4a:a1:1c:00:0b:c9:be:11:fb:03:cc:1d:76:88:51:88:38:b4:
51:05:fa:fa:9e:c0:bf:c5:7e:0b:5d:64:69:ac:34:d9:47:f9:
29:74:f8:40:15:17:a2:37:6b:00:a7:2e:68:f8:98:80:c2:cf:
b8:05:ab:9e:ef:6a:d7:50:16:75:18:13:b9:52:25:b6:80:ab:
83:27:d2:30:36:f2:50:3e:3d:69:36:1e:c3:42:dd:c2:52:1e:
ec:ab:ad:a7:f5:9a:63:b0:69:b4:48:bc:e6:76:37:eb:e5:1c:
b0:a1:de:0f:85:bc:e5:cd:46:78:a5:4d:7d:32:f7:6b:e9:1a:
2c:38:91:5f:2c:f1:68:70:de:66:50:88:ba:0f:eb:a6:4b:7f:
37:b1:2f:39:6c:c5:c6:5c:e3:c5:89:ae:71:0a:64:78:07:e0:
8e:5d:e9:d7:b3:25:c9:2b:0e:fe:5f:1d:62:19:68:06:4b:6b:
bc:4f:5f:22:e8:a4:56:81:a8:09:61:b0:b3:c0:ff:71:de:3f:
ec:cb:2e:78:df:25:94:1f:75:6f:e5:b2:d8:15:96:35:d6:1c:
1f:ea:f1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:26 2025 by rpki-client