Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa
File: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (raw, json)
Hash identifier: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=
Subject key identifier: 3D:00:96:79:EF:A1:9E:26:E6:EA:98:63:61:CE:D9:70:B6:5A:1D:F3
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 034C
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa
Signing time: Sun 11 May 2025 21:03:51 +0000
ROA not before: Mon 12 May 2025 21:03:44 +0000
ROA not after: Sun 12 May 2030 21:03:44 +0000
asID: 211826
IP address blocks: 102.212.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: May 12 21:03:44 2025 GMT
Not After : May 12 21:03:44 2030 GMT
Subject: CN=682110b7-2a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:04:9f:d1:96:3b:ac:d0:15:60:c5:de:49:
1c:87:5e:6e:ff:27:30:f8:46:0b:0e:b1:dd:b8:9b:
51:66:4e:0f:a2:66:81:b3:7a:55:05:f1:79:32:4c:
f6:84:15:6d:5f:8e:65:1c:2b:b4:ad:19:8f:e5:ac:
ee:eb:07:43:79:76:c3:e2:28:00:e4:bc:b2:b2:f1:
91:96:b9:7f:19:76:fd:24:f7:5a:64:1a:63:09:e9:
6e:bd:93:e9:16:49:e8:30:3f:2a:c1:ea:2c:25:f3:
66:7b:3f:4a:05:f3:f6:89:45:6e:e3:2c:f1:f1:32:
d7:dc:c1:d2:64:22:61:9b:b0:56:a8:af:aa:19:53:
e0:d7:3c:cf:8d:63:61:c5:79:34:78:70:06:dd:e4:
95:a0:a0:e3:2c:f2:34:89:9c:36:21:16:0e:be:cc:
ff:04:30:51:92:8d:62:20:3e:e3:fe:2a:41:e7:8c:
15:fd:48:8a:5e:13:7d:d9:b2:8d:b4:0c:d2:2a:0a:
f3:35:be:1f:a2:54:4e:df:85:80:f1:5b:9a:de:d5:
c6:94:22:45:f5:a2:b7:97:bd:c6:7d:61:bc:89:04:
74:11:68:e7:44:c4:bd:21:f3:e9:91:09:b0:ce:ed:
c1:18:e1:38:21:09:9f:7b:02:9b:6c:74:e7:7c:9f:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:96:79:EF:A1:9E:26:E6:EA:98:63:61:CE:D9:70:B6:5A:1D:F3
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1a:93:64:7f:d2:00:92:40:cb:3c:8e:24:d8:3a:34:48:27:
11:f0:14:cd:3b:f3:36:a3:d0:36:d5:44:42:e2:37:17:fa:8f:
3d:e2:fb:d1:19:65:41:3f:8c:ae:27:c6:c6:de:f0:d2:9b:ca:
08:a9:a2:01:f6:47:69:9b:2a:d2:ca:70:8e:59:81:98:af:9f:
cd:a7:bb:3c:0c:c5:84:3f:3e:28:79:49:6c:64:fe:98:2c:8c:
73:1a:5e:6c:cd:d8:6e:88:f2:1f:8e:d3:bb:1a:4c:6c:a5:fd:
92:64:ea:bc:ad:6b:68:1e:21:45:03:92:8c:aa:8c:3d:50:41:
3c:d3:4a:8a:e0:76:58:1f:33:69:12:cb:a7:30:09:f1:da:54:
f2:3c:f7:5f:75:3c:9f:7c:6e:4a:c7:16:99:fa:72:ec:d0:73:
d5:f7:96:a0:27:ff:51:de:dd:1d:fa:38:76:43:e7:cb:fd:0f:
89:6d:c4:74:ea:96:e9:03:9d:07:61:5b:80:e6:fe:8b:a6:6e:
a8:5b:05:8a:95:1b:8a:d8:00:35:8a:3e:6f:6e:18:e5:3e:d8:
f6:2f:9a:13:b4:41:9c:95:71:81:fb:d7:f0:0b:82:24:d7:07:
6c:a4:38:36:d5:d0:70:61:74:48:83:8b:22:af:dd:aa:0d:3e:
c5:a9:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:34:18 2025 by rpki-client