Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/2418D284FDCD11EF96657AA0762E951A.roa
File: 2418D284FDCD11EF96657AA0762E951A.roa (raw, json)
Hash identifier: lOGO89NqAFdMu8XVc7OtqDfuARY8aOX0jiQsxOy0BYQ=
Subject key identifier: 6D:96:6B:CC:AB:7D:36:E2:F1:8E:A5:30:2F:B3:F2:50:50:71:86:A8
Certificate issuer: /CN=F36E3941AF/serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
Certificate serial: 0250
Authority key identifier: 45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/2418D284FDCD11EF96657AA0762E951A.roa
Signing time: Mon 10 Mar 2025 16:31:39 +0000
ROA not before: Mon 10 Mar 2025 16:31:35 +0000
ROA not after: Sat 10 Mar 2035 16:31:35 +0000
asID: 328780
IP address blocks: 102.206.200.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 02:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3941AF
Validity
Not Before: Mar 10 16:31:35 2025 GMT
Not After : Mar 10 16:31:35 2035 GMT
Subject: CN=67cf13eb-d69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:05:c6:54:81:1a:0a:0a:60:53:6e:3a:9f:
1a:a4:f8:1c:b8:f8:f0:a0:21:f5:e7:23:50:1a:74:
6d:0b:78:d6:78:18:4c:a4:03:39:4b:e7:65:ba:41:
e8:81:31:f2:83:0c:f1:82:19:b3:19:90:bd:b9:12:
6c:84:f3:96:5e:19:db:10:c7:c2:b4:75:40:98:dc:
75:07:27:db:bd:02:42:11:10:c8:19:7d:71:57:85:
b1:93:09:12:0f:a5:30:95:6c:c7:92:88:49:31:07:
94:db:93:7d:05:30:f2:4a:c9:53:13:31:d1:ef:f6:
e1:b2:2d:89:2e:30:dc:82:04:0c:f6:a3:f1:5a:51:
e7:b5:75:8f:10:aa:fb:c3:92:39:34:fd:7b:a5:86:
bf:19:e9:c8:ff:98:fc:63:b5:b4:98:9f:c9:f4:77:
66:8e:28:7c:88:6c:fd:bc:10:1f:92:b0:4d:9d:26:
d6:3c:39:f4:ba:18:0b:87:76:c8:be:b7:79:a8:b6:
a0:fb:1d:ab:91:48:15:d6:be:32:45:5c:0c:dc:04:
de:60:4e:65:16:af:07:f0:98:d0:7a:d2:f0:f2:c6:
3c:72:31:c8:6c:72:ad:5f:46:8b:a0:12:a3:44:16:
46:67:ad:4a:27:c1:f3:c4:2f:aa:aa:7f:5e:16:c2:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:96:6B:CC:AB:7D:36:E2:F1:8E:A5:30:2F:B3:F2:50:50:71:86:A8
X509v3 Authority Key Identifier:
keyid:45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/2418D284FDCD11EF96657AA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:68:5c:06:6e:5b:df:b4:d1:84:d8:f8:e2:27:2e:4f:f1:ab:
a7:6d:1c:97:fc:ed:0a:c0:61:1a:e4:b3:2f:c5:41:47:87:46:
f5:99:6f:14:4d:92:aa:11:50:b1:3d:b4:c5:d2:8c:bc:5b:24:
09:e2:5f:ae:9c:1e:2a:81:84:d9:fa:c1:ed:ce:05:a3:bd:a4:
d6:c7:bf:04:d9:0c:3f:76:45:e4:ea:d8:75:ff:d8:17:f9:a2:
e6:1e:7c:b6:8f:2d:b1:11:b1:28:7d:af:5e:c2:23:bf:e3:7a:
bb:6c:2d:5e:49:42:ab:72:cd:76:9f:7c:47:28:72:c1:5d:a7:
01:e8:c8:00:67:c6:94:99:0e:37:2f:29:19:cb:cf:73:c5:a3:
cf:45:0a:dc:0a:e4:1e:9f:15:e6:7d:42:67:b8:c7:7c:7a:3f:
c5:2f:3e:82:2d:de:84:67:33:c0:09:35:9f:84:b6:80:27:a2:
62:d6:bd:70:40:33:da:26:80:0e:36:64:17:cd:5c:e3:ed:a5:
2d:42:2a:61:98:31:15:19:13:b3:87:e9:c5:20:da:7a:2c:44:
a4:35:0f:f1:cb:91:6a:35:02:92:b6:55:44:3f:3f:11:f1:03:
83:f1:a6:1f:4c:4d:b7:d0:24:46:e5:f1:c1:7f:72:e4:02:df:
44:5d:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:43 2025 by rpki-client