Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/7E8F4432DB2C11EFB85EEEA5762E951A.roa
File: 7E8F4432DB2C11EFB85EEEA5762E951A.roa (raw, json)
Hash identifier: 0iUpszT2w0fm3mXYVrua9cWk6MIv4HV5O6NkTkk5EUY=
Subject key identifier: 65:84:B4:B0:6A:89:42:13:BF:89:67:C6:81:5E:C0:57:83:A4:FA:22
Certificate issuer: /CN=F36D06FDAF/serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
Certificate serial: 02
Authority key identifier: B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/7E8F4432DB2C11EFB85EEEA5762E951A.roa
Signing time: Sat 25 Jan 2025 14:56:02 +0000
ROA not before: Sat 25 Jan 2025 14:55:58 +0000
ROA not after: Thu 25 Jan 2035 14:55:58 +0000
asID: 329390
IP address blocks: 102.210.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D06FDAF
Validity
Not Before: Jan 25 14:55:58 2025 GMT
Not After : Jan 25 14:55:58 2035 GMT
Subject: CN=6794fb82-b690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:fe:77:0c:a4:0a:f9:96:66:8d:27:ca:92:
ca:49:80:80:ab:32:af:f9:5e:f8:91:ec:1b:6f:82:
64:e7:6d:68:9f:d5:08:4d:4d:99:2f:35:41:d8:a6:
d0:d3:11:c1:67:d5:b3:5b:18:98:e0:d2:c2:be:09:
6e:af:76:77:87:ad:a2:86:6a:91:f8:ef:0b:29:93:
b6:cd:87:4f:24:29:65:48:d0:0a:e7:50:c9:93:f9:
d0:55:75:ab:f9:d8:18:0d:71:49:4f:79:6e:c3:af:
ae:76:82:68:d7:7d:35:9c:a8:f5:9e:f6:dd:4f:a0:
6d:15:76:6a:cb:a9:90:e5:48:ee:5c:9c:de:f2:8d:
fc:66:ed:b6:95:19:f3:bd:e8:f8:c8:5d:e7:1d:21:
e0:89:6a:bc:e3:55:b5:28:6d:d2:55:c4:52:85:e6:
0b:75:be:60:20:7a:15:03:a7:ce:4a:7f:b7:7f:8e:
69:45:23:99:7a:34:8e:32:b7:10:5b:41:f2:e3:16:
8f:27:fc:6e:cd:a9:0c:a8:8d:02:1e:bf:af:2e:fa:
1f:22:a7:9b:9a:49:e1:55:86:cc:75:1a:b3:cf:6c:
66:d2:15:2b:5d:59:0e:85:84:51:16:fd:41:7c:24:
4a:fa:b7:a5:57:8c:5e:69:da:9d:be:46:de:89:3d:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:B4:B0:6A:89:42:13:BF:89:67:C6:81:5E:C0:57:83:A4:FA:22
X509v3 Authority Key Identifier:
keyid:B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/7E8F4432DB2C11EFB85EEEA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.24.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:92:0c:96:c6:72:d2:6b:8b:84:68:b2:2e:e5:69:da:88:c5:
4a:fb:99:ba:ee:94:58:51:f4:61:08:2f:fc:a2:49:78:aa:8e:
26:c4:ab:09:6e:14:36:f5:73:26:92:b0:4b:71:8b:ab:1d:d6:
87:66:16:8e:0a:ce:ac:67:cd:c9:72:68:06:ed:33:13:e2:ba:
50:67:da:c7:e1:b7:10:cd:f3:4d:72:de:ee:03:e3:3a:e0:28:
03:75:0d:36:43:03:39:c0:3f:19:ea:cf:a0:df:2a:79:2c:da:
a4:88:34:59:4c:7b:65:25:b0:66:23:de:5d:61:84:59:07:13:
2f:c6:8b:48:d2:5c:7c:2c:06:fb:92:e2:24:15:9b:13:5c:7a:
d1:1c:44:36:12:33:a3:33:75:c2:02:67:cf:b6:a2:d5:bb:f0:
ff:09:0a:f0:74:ac:7a:18:0b:4e:cd:b6:87:b0:e1:bb:03:0f:
e9:cf:d4:9f:b2:10:d4:b6:b3:04:49:36:9a:68:93:c7:49:a7:
7d:ed:60:8c:cb:96:16:50:0a:7b:67:4b:98:7e:9a:20:68:93:
d1:21:8d:db:00:28:e5:e2:36:8f:c1:b6:af:90:42:d3:0a:4f:
52:04:76:9e:38:12:45:3e:24:b1:b8:3e:c2:24:89:59:1a:5f:
5c:57:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:35 2025 by rpki-client