Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/151E2B36E2F111EF89EBF584762E951A.roa
File: 151E2B36E2F111EF89EBF584762E951A.roa (raw, json)
Hash identifier: E+8etKURQ4E310TRAdoliaSiZqoCpE/HK5uaO+7doEA=
Subject key identifier: 26:04:57:90:4B:CA:36:EA:1F:71:12:DA:67:01:F7:7E:2E:DF:CE:19
Certificate issuer: /CN=F36AD16CAF/serialNumber=D5404B046D6ECD6D74141BD3AE4927B8C607EE62
Certificate serial: 06
Authority key identifier: D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/151E2B36E2F111EF89EBF584762E951A.roa
Signing time: Tue 04 Feb 2025 12:10:54 +0000
ROA not before: Tue 04 Feb 2025 12:10:50 +0000
ROA not after: Sun 04 Feb 2035 12:10:50 +0000
asID: 328748
IP address blocks: 102.23.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft
rsync://rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AD16CAF
Validity
Not Before: Feb 4 12:10:50 2025 GMT
Not After : Feb 4 12:10:50 2035 GMT
Subject: CN=67a203ce-f273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:62:a7:8d:3b:5d:d5:2c:75:8e:aa:cb:90:
b0:53:7e:fc:7b:76:11:e3:95:3a:3c:b2:bf:7d:7a:
e6:46:90:e5:6e:37:4b:48:3a:b3:3b:41:38:c0:aa:
22:01:ca:97:06:cc:22:3b:a3:77:f3:3f:40:96:d8:
75:95:4a:22:4a:39:54:91:39:6d:76:a0:bd:c2:06:
fc:3b:22:19:39:2f:08:83:33:2d:c8:64:f0:19:e3:
b4:29:09:57:40:54:e8:23:c0:ba:18:93:3f:b3:e9:
fc:ac:05:77:cf:8b:3a:e9:bd:21:bc:ec:14:e0:ac:
30:98:c3:4f:e9:4b:b2:00:9e:56:1c:e8:d4:7a:44:
5c:7c:a1:41:a6:ef:7d:06:83:73:1b:55:5b:8d:c5:
25:ae:2f:47:70:09:b5:6c:72:fd:57:f8:f8:e0:12:
9e:a2:22:54:d9:db:8f:5e:ad:b6:e5:88:2f:b2:24:
ee:cc:12:07:f2:9a:a6:d6:7d:1e:42:02:10:66:13:
c6:4e:5d:73:d9:bf:84:22:24:6c:eb:1e:b6:72:5c:
7b:c3:31:3d:63:d1:60:05:c7:e3:2e:6f:67:bc:1b:
1d:b1:47:78:3a:25:cd:18:64:60:ae:4e:9d:9c:ef:
bf:81:84:4c:1b:c3:3a:1a:63:1e:bb:c6:8f:03:40:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:04:57:90:4B:CA:36:EA:1F:71:12:DA:67:01:F7:7E:2E:DF:CE:19
X509v3 Authority Key Identifier:
keyid:D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/151E2B36E2F111EF89EBF584762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.207.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cd:74:d5:e0:3a:73:d2:66:54:20:53:6d:56:f9:e4:06:7c:
a6:44:33:fb:82:86:52:83:63:f8:71:2c:9e:c9:d6:12:2a:3a:
1f:e8:47:89:74:fd:9d:aa:da:11:20:29:ad:06:d5:e3:a6:ce:
9b:a9:08:80:02:80:5b:b5:c4:21:ae:7a:7c:1d:fb:05:8d:fe:
4b:87:f4:2c:b0:61:5d:72:15:05:21:44:4e:58:2c:f8:63:7e:
aa:7a:fc:7b:35:25:fb:06:79:03:c9:08:78:2a:68:01:64:d8:
af:df:64:32:60:e5:78:dc:30:bb:7a:5f:d9:47:05:cb:ae:2d:
03:62:92:60:00:09:50:2a:74:49:c3:fd:25:47:ce:c8:26:28:
13:45:5a:a8:db:09:55:1e:36:c8:c5:b7:ac:34:a5:3f:34:9f:
16:62:75:20:56:2a:f7:59:17:3b:72:19:68:38:13:39:f0:47:
da:05:56:3d:da:6c:4c:45:d3:35:31:0b:57:c9:17:b0:8d:77:
f2:c6:77:5c:6a:a3:5e:24:08:4d:91:b5:c8:6c:54:f5:02:2e:
5e:7a:22:00:46:13:2b:de:d0:58:8a:80:e6:b7:fc:e1:4a:87:
aa:22:d0:42:c5:e1:1a:94:22:db:e2:47:f1:b9:12:74:8a:23:
ca:67:1b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:39:31 2025 by rpki-client