Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/AFDCE496DD6A11EFB91A764C762E951A.roa
File: AFDCE496DD6A11EFB91A764C762E951A.roa (raw, json)
Hash identifier: LUqMxb0MwGP6MZT9i0MH7OuuoSQyIJFrnjoWDAeBNXw=
Subject key identifier: FC:89:E2:E6:34:10:81:4E:B0:7F:B2:FA:89:42:85:CE:BD:C3:F2:4E
Certificate issuer: /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial: 0251
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/AFDCE496DD6A11EFB91A764C762E951A.roa
Signing time: Tue 28 Jan 2025 11:26:16 +0000
ROA not before: Tue 28 Jan 2025 11:26:12 +0000
ROA not after: Mon 31 Jan 2028 11:26:12 +0000
asID: 328987
IP address blocks: 102.217.64.0/23 maxlen: 23
102.217.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CAD03AF
Validity
Not Before: Jan 28 11:26:12 2025 GMT
Not After : Jan 31 11:26:12 2028 GMT
Subject: CN=6798bed8-cd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:ba:82:00:e4:3c:dd:3d:bb:1b:e6:5a:8e:
53:87:f5:ae:3b:06:7e:49:cb:c2:1e:6d:91:94:71:
45:bf:03:af:a2:90:b9:32:c7:98:7b:e1:95:35:f0:
c4:07:60:f3:24:52:ef:e4:b6:8f:2f:f9:70:db:41:
c3:9c:84:6a:bf:d7:85:7a:6c:12:1e:eb:96:8d:87:
05:88:26:0b:3c:62:f7:4f:c0:54:45:c0:9c:b6:b3:
c3:58:d4:89:32:28:62:eb:9b:47:42:65:5c:30:36:
c1:62:4b:ca:2c:06:0c:81:69:36:e5:b4:5c:79:74:
45:9d:95:f9:c1:40:dd:fc:a1:52:7c:62:75:57:e6:
be:18:90:47:90:1b:bd:e3:0f:45:82:c9:b3:07:77:
62:4a:33:f5:b4:ed:93:1e:51:3c:f4:5d:f0:f6:ab:
b5:be:67:10:60:a5:c2:40:15:4f:aa:a4:43:e2:47:
8d:66:7b:81:9f:cb:5e:3d:e0:b8:6b:37:fa:32:82:
fa:5b:8a:fe:11:40:af:7b:a8:95:0c:d3:2a:38:87:
1b:90:55:d0:63:c8:a1:38:0c:c3:29:60:15:93:b0:
81:95:3e:19:15:e2:1c:a5:0a:24:bd:e0:bf:86:1f:
05:e8:c0:89:29:a0:dd:ff:f0:54:3a:44:4e:e2:73:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:E2:E6:34:10:81:4E:B0:7F:B2:FA:89:42:85:CE:BD:C3:F2:4E
X509v3 Authority Key Identifier:
keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/AFDCE496DD6A11EFB91A764C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.64.0/22
Signature Algorithm: sha256WithRSAEncryption
59:d3:15:9f:8d:3e:52:86:7b:8e:37:36:63:69:b5:fc:c6:8e:
d9:bc:96:13:7f:bb:7e:d5:65:73:7e:8b:45:f7:74:33:ec:94:
31:ca:1b:e2:a1:29:c6:30:a3:c5:7e:71:d2:f1:21:7c:7f:db:
38:c9:ac:e8:e6:cd:9f:6f:db:5a:0d:0f:13:d1:2a:2d:ff:dd:
27:f1:ac:2e:f6:64:4f:25:b3:7a:ea:45:1a:33:13:a4:8b:e3:
84:11:34:f4:c3:fd:45:70:05:73:27:9d:20:3e:ea:cd:23:ca:
13:7e:2a:86:da:87:43:fb:95:86:b9:03:9f:62:01:ac:84:cc:
c0:db:cc:5f:40:c4:fe:ea:5b:37:96:aa:01:0e:1f:86:a2:00:
c8:d0:d2:da:79:5b:c7:e9:e9:bb:cc:61:ad:81:78:83:37:27:
28:15:72:e0:27:bf:a6:45:2d:85:52:b2:c4:02:9f:d8:8b:ce:
aa:28:97:40:c7:79:cb:cd:b5:ff:4c:0b:3f:ec:28:8e:50:b3:
0a:79:8e:c8:32:f0:9b:c4:b4:a6:e1:48:6d:02:14:2e:e5:75:
72:cf:b9:fe:4e:c1:d0:4e:24:4d:ed:6b:74:e4:1a:c0:b8:ef:
cb:1c:94:40:67:64:aa:fa:39:a1:55:df:03:84:d9:27:85:47:
e2:05:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:20 2025 by rpki-client