Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/084F90C4E5D611EF84AC297B762E951A.roa
File: 084F90C4E5D611EF84AC297B762E951A.roa (raw, json)
Hash identifier: DaYG5IraEvwWyXIavbksw5PJX3qGabDzBgWW9HfrjbY=
Subject key identifier: 49:BD:A2:B0:21:2F:F1:57:B9:B8:36:68:9E:83:5C:5F:B5:C6:51:FF
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 04D3
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/084F90C4E5D611EF84AC297B762E951A.roa
Signing time: Sat 08 Feb 2025 04:34:50 +0000
ROA not before: Sat 08 Feb 2025 04:34:45 +0000
ROA not after: Fri 08 Feb 2030 04:34:45 +0000
asID: 15399
IP address blocks: 102.207.28.0/22 maxlen: 22
102.208.152.0/22 maxlen: 22
102.209.36.0/22 maxlen: 22
102.209.92.0/22 maxlen: 22
102.209.132.0/22 maxlen: 22
102.210.84.0/22 maxlen: 22
102.210.180.0/22 maxlen: 22
102.211.32.0/22 maxlen: 22
102.211.88.0/22 maxlen: 22
102.211.248.0/22 maxlen: 22
102.212.112.0/22 maxlen: 22
102.212.116.0/22 maxlen: 22
102.213.36.0/22 maxlen: 22
102.214.48.0/22 maxlen: 22
102.215.28.0/22 maxlen: 22
102.215.148.0/22 maxlen: 22
102.215.160.0/22 maxlen: 22
102.216.60.0/22 maxlen: 22
102.216.244.0/22 maxlen: 22
102.217.80.0/22 maxlen: 22
102.218.28.0/22 maxlen: 22
102.219.120.0/22 maxlen: 22
102.219.216.0/22 maxlen: 22
102.221.20.0/22 maxlen: 22
102.222.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF
Validity
Not Before: Feb 8 04:34:45 2025 GMT
Not After : Feb 8 04:34:45 2030 GMT
Subject: CN=67a6deea-abc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:a0:84:86:a9:17:50:da:cf:1f:8a:41:53:
f0:a6:ec:50:d5:c3:a2:4d:4f:bd:f2:41:5c:4a:bf:
1c:d1:6f:22:36:32:f9:f4:b5:06:15:95:57:c5:56:
74:11:6b:c3:61:a7:b6:96:01:2c:f0:37:00:fb:88:
93:4f:35:99:fb:84:ae:11:76:2f:7c:38:39:14:de:
8e:7e:20:c8:e0:c5:52:d3:a9:b2:17:f8:3e:36:ba:
00:36:23:89:c7:51:98:1e:7d:54:57:75:60:f3:42:
ad:c2:df:55:c7:3d:98:72:56:30:36:8b:70:cf:d0:
b4:c1:bf:9a:e2:86:9d:7e:90:6a:c4:f3:fe:f6:4d:
2a:8f:f0:55:7b:70:7c:31:62:30:d9:b3:68:1f:d5:
26:5a:6c:ba:dd:cf:46:57:09:c1:51:91:59:0b:e8:
7b:1a:aa:d5:57:fa:93:74:95:7c:86:f0:c3:71:b4:
fa:2e:ae:7b:be:46:87:e3:dd:a9:72:27:e6:78:f0:
22:ae:5b:01:c4:16:9d:41:eb:8e:e6:77:34:e6:03:
b5:0f:83:c9:d3:1b:5f:3f:bb:70:82:93:53:79:70:
3b:c9:7d:a4:13:65:73:3d:33:1d:7f:2a:7c:38:ab:
af:33:ca:49:66:4a:1e:82:43:6c:c5:32:ab:4c:8d:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BD:A2:B0:21:2F:F1:57:B9:B8:36:68:9E:83:5C:5F:B5:C6:51:FF
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/084F90C4E5D611EF84AC297B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.28.0/22
102.208.152.0/22
102.209.36.0/22
102.209.92.0/22
102.209.132.0/22
102.210.84.0/22
102.210.180.0/22
102.211.32.0/22
102.211.88.0/22
102.211.248.0/22
102.212.112.0/21
102.213.36.0/22
102.214.48.0/22
102.215.28.0/22
102.215.148.0/22
102.215.160.0/22
102.216.60.0/22
102.216.244.0/22
102.217.80.0/22
102.218.28.0/22
102.219.120.0/22
102.219.216.0/22
102.221.20.0/22
102.222.84.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d1:74:44:5d:57:3f:50:96:20:e8:cb:c1:fa:ef:ca:d2:e1:
77:d6:5b:3c:50:8b:67:26:68:18:94:a1:3f:ee:ec:c1:a9:36:
81:61:df:e8:d3:5c:cf:11:99:45:fc:1e:ee:d5:1e:9c:00:77:
65:0d:99:51:dc:fd:22:c4:24:f7:f4:38:f1:52:23:12:35:7a:
6a:3a:e6:90:ac:8f:f2:e9:5e:58:6d:c7:49:1c:8c:d5:23:03:
c1:cd:e2:a9:1c:40:5d:36:69:91:e2:47:7f:ac:2d:93:de:75:
c4:71:73:d1:f9:69:1d:af:4a:cb:0c:e0:9b:0d:1b:1e:5b:dc:
11:7b:7a:ef:c8:cf:75:64:0e:4b:ef:be:ff:df:ce:61:4c:27:
4c:aa:a4:b2:cc:e9:9d:d4:a9:4a:15:a7:d0:d1:23:23:d2:8f:
72:fc:72:b5:2a:42:00:c2:8a:f7:de:78:89:8e:9c:5a:47:c8:
8e:78:95:84:a5:fe:23:fb:81:ee:9d:ec:d4:11:ef:d2:dc:e0:
0f:4b:27:f3:ae:e5:8d:b1:c9:d2:f4:bf:f9:b1:10:e5:b1:89:
1b:28:aa:68:ad:33:5f:3e:f5:f4:86:39:48:42:72:c0:1c:e2:
bd:34:5f:4b:22:03:bc:9e:39:5c:e6:c4:15:33:50:f9:69:e0:
fd:d4:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:44 2025 by rpki-client