Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/0C030AA8C75311EF963E0590762E951A.roa
File: 0C030AA8C75311EF963E0590762E951A.roa (raw, json)
Hash identifier: bNMA6PZ1v1d52Zo3rBQ17thuGGh+4io0kA8gWh05KQo=
Subject key identifier: D5:7B:AA:E8:44:D1:61:46:44:94:50:E8:80:07:77:B7:C1:5B:83:91
Certificate issuer: /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial: 0758
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/0C030AA8C75311EF963E0590762E951A.roa
Signing time: Tue 31 Dec 2024 08:41:37 +0000
ROA not before: Tue 31 Dec 2024 08:41:33 +0000
ROA not after: Sat 30 Dec 2034 08:41:33 +0000
asID: 328631
IP address blocks: 102.206.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 01:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880 (0x758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2303AF
Validity
Not Before: Dec 31 08:41:33 2024 GMT
Not After : Dec 30 08:41:33 2034 GMT
Subject: CN=6773ae41-330c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:5f:91:25:ae:8b:27:39:7d:f4:03:bc:21:
42:af:23:09:64:3d:0d:e9:0f:e9:4b:11:c0:a5:90:
ee:9c:03:f8:99:04:09:bc:47:c2:19:11:c7:60:5a:
85:3c:64:c3:2a:16:49:91:80:fe:67:fb:22:3e:47:
05:f5:94:61:23:7f:d5:ad:a4:98:77:70:53:0a:22:
c8:1d:28:9a:d6:a7:22:dd:20:87:45:b0:b6:b4:ce:
d5:71:1f:c8:e5:a4:38:cd:f2:67:f3:70:6e:3c:06:
cc:37:14:81:95:9b:52:04:4c:f4:d4:60:ea:2a:bc:
19:9f:d1:ad:e3:55:7c:20:e3:4b:d9:49:cd:cb:15:
70:4b:37:3d:0e:eb:ec:b9:09:df:0c:84:b8:34:fd:
4a:17:be:2b:c5:c9:fa:44:f2:63:51:f1:49:9a:85:
8b:ed:ba:52:52:e4:d2:d8:d4:87:c6:b3:ef:2d:7f:
d6:ba:1e:f9:b7:89:1b:22:08:78:91:0f:41:4b:6e:
c0:df:40:f9:76:55:58:cc:51:69:7a:fe:6e:c9:bd:
1c:06:15:b7:30:84:c8:5b:2c:74:b5:c9:0e:03:3f:
68:89:58:05:40:72:a7:5c:ff:2f:25:37:90:95:98:
5e:97:8a:ad:74:ea:9d:a6:13:e1:bd:70:f3:1f:08:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7B:AA:E8:44:D1:61:46:44:94:50:E8:80:07:77:B7:C1:5B:83:91
X509v3 Authority Key Identifier:
keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/0C030AA8C75311EF963E0590762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.232.0/22
Signature Algorithm: sha256WithRSAEncryption
54:1c:1b:da:f0:ad:92:45:a0:75:84:47:c0:05:1a:de:8c:bb:
02:1f:0b:b5:d7:2d:1b:db:72:de:a6:ce:8f:07:f5:35:5b:c9:
98:71:15:c7:db:9f:b4:ae:c5:d5:ad:15:67:20:7c:ef:c6:9f:
d3:6a:a7:de:3a:12:17:c2:8e:fb:cf:44:15:aa:a1:df:67:83:
3e:ac:97:78:ed:a8:40:f1:d2:8c:4a:cb:f0:54:8f:87:9f:2e:
e0:36:55:2f:d6:fc:db:fb:ba:ce:1f:3a:70:d9:a7:dc:51:41:
8a:8d:db:08:a4:cd:5b:83:30:e6:78:bc:e3:af:e4:c9:c2:55:
4b:95:6a:87:3e:4e:37:e1:ff:20:cc:63:4c:07:ea:8e:d7:7c:
3c:9a:36:03:ff:a8:c1:e1:c8:df:42:86:c6:ab:5b:9f:ff:38:
20:79:64:78:42:b8:c4:6e:60:95:39:02:19:ee:69:a6:89:c6:
8b:4f:72:7c:cd:01:ea:57:ae:6c:7a:e1:85:8f:73:cb:b0:4d:
ba:32:fd:02:f0:a5:e3:d3:bb:4a:f1:c3:bb:a6:48:79:ab:c3:
22:a7:69:07:91:b2:6d:1a:a3:b4:f7:f1:8d:ff:9c:a3:b3:49:
31:62:ca:41:70:73:96:7b:46:bc:fa:61:1a:a7:e1:99:54:48:
cd:f6:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:22 2025 by rpki-client