Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/AD361640056F11F08498DD75762E951A.roa
File: AD361640056F11F08498DD75762E951A.roa (raw, json)
Hash identifier: aT1ghLY8ZRV3xAhoWEyG/loAFftiB5sgBqcPA7Kt+XA=
Subject key identifier: 66:4D:8B:BB:51:4E:CF:53:4E:2E:5C:B4:06:A8:25:09:8E:93:4C:71
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 056F
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/AD361640056F11F08498DD75762E951A.roa
Signing time: Thu 20 Mar 2025 09:42:45 +0000
ROA not before: Thu 20 Mar 2025 09:42:42 +0000
ROA not after: Tue 20 Mar 2035 09:42:42 +0000
asID: 37725
IP address blocks: 102.218.130.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 01:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1391 (0x56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF
Validity
Not Before: Mar 20 09:42:42 2025 GMT
Not After : Mar 20 09:42:42 2035 GMT
Subject: CN=67dbe315-4220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:26:a0:6e:fc:81:a1:34:ce:96:61:56:2f:
fc:f3:89:52:78:ed:51:2e:8a:88:ff:29:7b:d5:cc:
51:1f:ce:95:c0:ee:d6:d3:49:c5:e2:50:e6:1d:db:
f3:d6:b8:65:34:e4:10:14:14:e2:b4:ae:54:cb:c0:
1f:5a:c3:c7:6f:d0:88:c0:60:09:4e:d3:c4:4e:17:
ff:1d:b4:f8:7f:1e:8f:ab:08:6b:ee:79:97:99:98:
b6:53:7b:17:07:7b:d5:b8:3e:dd:30:40:01:5b:55:
60:4a:7c:8c:7c:8b:da:1d:79:88:02:8c:f4:f9:9d:
35:d7:0a:c1:b4:ec:b4:b8:0c:47:a0:4e:13:22:e4:
45:d1:19:72:a3:d6:9c:58:e9:f4:92:fd:2a:33:4d:
79:69:b1:04:f4:55:ae:e2:d3:af:3d:b7:f9:b1:a7:
36:8c:eb:45:0a:50:0d:5a:89:d0:45:7a:14:c8:fe:
7e:1f:3d:13:13:5d:fa:68:4d:c5:2f:7e:70:f8:6a:
c8:0a:aa:d7:d7:23:71:b0:bb:ef:67:50:0e:99:12:
82:f1:28:7d:6b:8f:89:72:23:63:9e:72:81:91:83:
2f:df:cd:a1:43:93:0b:32:5e:e0:c1:23:d6:d2:c3:
bf:a3:d5:30:39:93:26:a2:23:72:2d:ff:af:a3:9e:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4D:8B:BB:51:4E:CF:53:4E:2E:5C:B4:06:A8:25:09:8E:93:4C:71
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/AD361640056F11F08498DD75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:18:60:53:c2:9b:cf:53:e4:13:b5:c4:24:a1:f0:50:2b:ab:
46:e9:68:b1:78:9c:39:9f:9d:18:ce:3e:ec:e7:36:06:a1:9c:
81:c6:11:47:b6:ec:c8:c3:6b:fd:8f:f1:8e:20:64:9a:21:1a:
59:db:3b:3c:91:0a:4d:37:09:1b:cc:63:d5:74:ac:f3:ea:1a:
71:f6:b8:e8:68:fa:cd:47:55:cb:fa:9a:61:ea:f1:cd:43:10:
68:aa:4f:09:b9:78:0e:52:5e:63:55:96:59:8f:39:64:fe:f6:
dc:28:6d:46:8a:9b:2e:a3:2f:c4:7c:46:f0:eb:11:67:cb:0c:
42:f4:47:27:ee:66:be:fb:bf:26:88:a8:2e:20:06:f0:d0:b7:
85:da:3d:f9:75:81:cd:ad:75:da:ee:7d:2e:e7:a9:2e:d1:c9:
81:5d:d1:63:88:af:fc:89:dc:7a:bd:06:e0:8f:09:0f:a9:ed:
cb:a9:6e:7c:82:9b:ff:d4:97:ac:79:7a:a6:a4:34:68:47:ed:
8d:ac:4e:7f:28:5f:d0:02:35:ba:41:a9:a2:21:00:25:62:aa:
5e:1a:be:40:d4:b7:97:de:14:39:be:c6:fb:56:64:22:65:0b:
c5:09:0c:ff:74:0d:c4:7e:a1:de:51:d4:57:c2:f0:58:c7:b0:
9f:e4:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:47:57 2025 by rpki-client