Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/74007D02ABF611EF84EDDE6A762E951A.roa
File: 74007D02ABF611EF84EDDE6A762E951A.roa (raw, json)
Hash identifier: KZGGhsqVyrno2LUhnkf8Uvj8V+irkoe9+uULUCYcyBA=
Subject key identifier: 72:EB:59:67:FE:89:E7:1E:62:9B:29:2E:9A:46:20:51:FC:1A:58:F2
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 025D
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/74007D02ABF611EF84EDDE6A762E951A.roa
Signing time: Tue 26 Nov 2024 13:00:47 +0000
ROA not before: Tue 26 Nov 2024 13:00:43 +0000
ROA not after: Tue 01 Jan 2030 13:00:43 +0000
asID: 37684
IP address blocks: 102.207.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF
Validity
Not Before: Nov 26 13:00:43 2024 GMT
Not After : Jan 1 13:00:43 2030 GMT
Subject: CN=6745c67f-26c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:de:a2:2a:b8:c5:4b:44:b3:56:13:74:7e:
11:59:36:8b:76:49:bb:6b:5d:2b:27:a3:34:48:4f:
8b:a8:40:69:6a:b9:9c:79:97:ee:5e:10:62:16:89:
2e:4e:a8:0c:7b:4f:ce:40:3a:07:7d:09:37:a7:5b:
a9:cd:e0:61:3d:a3:92:d2:76:67:79:ca:28:9a:c6:
8f:ee:fb:cb:ef:42:3c:62:2d:8b:ce:f3:90:9c:50:
18:03:a2:6e:8e:34:44:0a:e6:2d:65:b6:64:0b:b3:
1f:8f:d3:b4:c9:56:4c:51:5d:c4:cc:be:21:af:e9:
e3:96:a2:3e:a1:94:aa:f8:f9:c3:c6:72:ec:bf:f1:
63:6b:b1:f4:66:99:47:f6:fc:07:60:23:8a:04:bc:
5c:cb:32:10:d0:d1:e2:dc:fe:6f:c2:28:10:6d:cd:
13:fb:a7:ca:00:de:e8:06:de:a4:24:bd:a1:17:a2:
b2:6c:2c:b6:91:6a:98:de:09:9c:ac:d7:ac:7d:5c:
4c:ae:a7:63:ca:18:67:0c:f7:5d:3b:de:a0:73:26:
12:23:1b:20:69:f1:b8:17:fb:a5:7f:b8:38:b1:0f:
1f:b5:7c:59:1c:a3:13:9e:cf:d6:da:78:69:3e:e1:
55:f4:a4:88:74:b6:34:29:ed:f1:87:75:df:de:bc:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:59:67:FE:89:E7:1E:62:9B:29:2E:9A:46:20:51:FC:1A:58:F2
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/74007D02ABF611EF84EDDE6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7a:8a:46:78:06:e7:7e:f2:51:bc:b3:cb:0d:1c:0e:98:f1:
b1:b3:12:e0:1d:41:c5:d0:97:a7:8e:81:f6:5d:25:35:c7:76:
ef:34:87:9b:af:29:35:8f:07:53:e9:42:2d:23:d8:21:96:d0:
54:8b:75:6d:25:2b:e6:ea:8c:35:c2:65:64:9d:aa:75:21:24:
d7:1e:c5:e9:b8:1c:1d:20:82:aa:3b:69:74:bc:ef:3f:26:c9:
ae:35:ff:be:d6:bd:66:78:5d:6f:37:08:1a:93:bd:53:18:29:
2f:80:a9:ee:de:fe:e8:fb:bb:42:67:6f:2b:05:19:40:80:2f:
8a:ee:b8:6f:3e:3c:72:1c:5c:d3:8a:d5:bc:36:72:ba:ec:70:
11:3f:9e:50:7c:c4:2c:18:49:52:f4:91:3b:0a:cb:42:79:2f:
5d:18:7b:27:37:59:74:f0:bb:7b:13:b0:22:73:ad:81:3a:33:
a5:5f:0a:35:aa:d3:1e:70:71:a4:da:fe:66:7f:40:7a:05:99:
b0:e5:a0:3b:8c:1c:91:62:34:79:ca:96:0e:5d:13:de:3e:4c:
62:e9:b9:50:62:d9:c0:95:de:09:f5:9d:c0:96:6b:c7:3e:22:
8e:d2:18:89:49:fe:25:9d:61:25:96:0d:96:d2:a8:03:93:d0:
ff:59:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:43 2025 by rpki-client