Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/1E081892E3AA11EF9553B073762E951A.roa
File: 1E081892E3AA11EF9553B073762E951A.roa (raw, json)
Hash identifier: LVZKWANNLcHHqjb6lqsGWMwIplye542XoApTsgYJWMU=
Subject key identifier: 5C:4B:19:83:9C:DE:7F:0C:70:68:95:60:FD:59:1E:2A:70:AB:A6:22
Certificate issuer: /CN=F36B1D7CAF/serialNumber=0A748532E881D6C9E79DCF24D2B855B74217BB27
Certificate serial: 01D4
Authority key identifier: 0A:74:85:32:E8:81:D6:C9:E7:9D:CF:24:D2:B8:55:B7:42:17:BB:27
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/1E081892E3AA11EF9553B073762E951A.roa
Signing time: Wed 05 Feb 2025 10:15:26 +0000
ROA not before: Wed 05 Feb 2025 10:15:22 +0000
ROA not after: Thu 01 Feb 2035 10:15:22 +0000
asID: 328788
IP address blocks: 196.45.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1D7CAF
Validity
Not Before: Feb 5 10:15:22 2025 GMT
Not After : Feb 1 10:15:22 2035 GMT
Subject: CN=67a33a3e-4566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:70:b4:8b:98:ea:21:cd:1b:1a:39:bd:11:
93:c2:d0:55:08:88:3f:e5:af:2b:9a:11:e3:4d:7d:
db:4c:c6:53:d3:21:5c:b9:e8:d7:d0:6c:cb:57:d2:
9b:0f:9d:1c:86:2c:9c:0b:c4:43:b6:0e:85:54:a7:
69:61:a5:54:77:ee:fa:e5:2d:23:c3:68:fb:db:81:
81:ca:b6:fd:50:27:86:f1:4e:e8:7c:9d:22:f0:79:
2b:05:95:ec:fc:86:59:09:92:80:14:0b:6c:7a:10:
55:98:f6:fc:b1:e7:7e:dd:60:78:d3:52:92:97:13:
c0:96:fe:28:29:92:c0:9d:ed:fc:a7:41:9f:64:d7:
f8:c4:a0:d3:92:33:4e:6d:0c:44:98:0f:6f:3b:6d:
9e:fb:15:30:19:f7:6b:61:83:f0:6e:26:45:d0:88:
23:3f:52:3f:0d:5d:f2:9a:d2:55:44:06:0b:ad:7c:
8a:5c:cb:28:42:99:e0:9d:38:2c:4e:a9:13:9a:fb:
c9:25:05:0e:a9:6b:f7:69:4c:15:b5:60:06:a8:98:
95:05:49:c4:f7:f9:61:8b:81:f3:73:ed:bd:6e:12:
ff:a2:c1:39:25:71:f7:e9:fb:18:5b:0a:c7:4d:16:
05:9c:47:3f:a0:3d:cb:c0:93:9c:5c:3e:10:07:33:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:19:83:9C:DE:7F:0C:70:68:95:60:FD:59:1E:2A:70:AB:A6:22
X509v3 Authority Key Identifier:
keyid:0A:74:85:32:E8:81:D6:C9:E7:9D:CF:24:D2:B8:55:B7:42:17:BB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/1E081892E3AA11EF9553B073762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.45.224.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:bc:e0:3a:67:5f:e6:db:47:12:48:fd:b6:c5:4f:de:34:b1:
a1:9e:a5:ed:55:d2:5a:85:3b:a7:c2:55:8a:b0:9b:e7:8e:1e:
f7:bf:17:45:2b:d3:41:dd:53:34:de:f6:da:6d:14:7e:07:f1:
9b:3f:f1:63:e9:44:18:47:70:fc:6e:c5:3c:0f:3d:e2:1e:8a:
87:d7:cc:0c:a5:4d:0d:78:40:ac:90:3d:cc:97:ac:34:d2:ac:
70:92:fd:ac:a9:80:f4:1e:51:ff:2c:11:b6:e2:7c:bb:41:51:
2f:a1:a4:e6:c9:4a:45:d1:e8:7f:2e:57:0a:7c:0e:29:be:ed:
90:cc:79:b6:14:9a:78:c2:23:08:ed:d4:a7:0a:c7:5c:df:f3:
03:f4:92:a3:0b:23:28:66:8b:37:03:f4:22:7f:3f:ce:c8:ca:
c7:1a:5f:c8:a5:b8:85:69:3e:f3:73:31:97:17:c8:da:79:b2:
6f:be:ec:a0:61:32:aa:80:b5:53:bd:9d:f0:03:12:7e:63:c4:
e4:ad:e6:54:75:b0:60:26:f5:67:d9:15:24:e4:59:eb:da:fc:
c8:ba:26:e3:f6:b2:b7:6f:c4:10:32:e8:07:0c:4f:be:69:b3:
80:33:4b:42:54:93:a6:a6:6c:da:cb:f7:17:81:3a:2d:ef:32:
eb:ed:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:54 2025 by rpki-client