Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/4C7A7612299A11F0B84321CFDAE4EC9C.roa
File: 4C7A7612299A11F0B84321CFDAE4EC9C.roa (raw, json)
Hash identifier: Nlw1hIVnnrnHZycVHji07xpZ7hIoViBxXu2uxKW1+Ms=
Subject key identifier: 0C:AE:52:A8:EB:EE:D5:D6:9C:B7:B1:17:B2:B2:6F:C8:33:75:D9:B0
Certificate issuer: /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial: 04
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/4C7A7612299A11F0B84321CFDAE4EC9C.roa
Signing time: Mon 05 May 2025 10:18:34 +0000
ROA not before: Mon 05 May 2025 10:18:29 +0000
ROA not after: Tue 05 May 2026 10:18:29 +0000
asID: 328939
IP address blocks: 102.206.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 05:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Validity
Not Before: May 5 10:18:29 2025 GMT
Not After : May 5 10:18:29 2026 GMT
Subject: CN=6818907a-10c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:c1:6d:af:ce:a1:ee:28:68:5b:c9:7d:d5:
d0:1c:37:f2:be:6e:bf:5f:b7:ca:11:c3:26:b9:09:
cd:90:d0:84:49:48:d3:33:73:e0:28:e5:a8:a3:c9:
e1:4b:e3:65:ac:48:50:61:21:76:55:56:e7:a4:37:
5e:c7:23:6a:b0:e8:a4:6b:71:91:05:d8:e2:3b:8a:
54:40:5a:7d:28:58:08:af:a9:7a:24:20:5f:7b:a7:
52:75:e1:6b:71:74:d1:25:e5:51:1b:16:18:33:1f:
7f:dc:5c:d6:f7:f9:06:1b:59:99:03:af:6c:51:e6:
54:63:27:ee:9d:64:25:c6:18:16:64:3d:b4:e1:50:
c0:11:73:7c:fc:3d:16:4d:d2:7c:c1:4c:8f:33:a2:
1c:bd:ea:0c:06:90:9e:81:90:51:c9:d8:3a:b3:32:
d5:12:aa:cc:fc:26:4c:b1:65:b9:e5:98:88:8e:7b:
6c:22:84:0d:58:51:c1:cd:ff:33:5d:82:fa:2c:d5:
00:93:f6:f4:59:42:9b:c2:bc:56:8a:83:a9:4c:9b:
46:1c:61:0c:8f:08:ad:15:6c:91:b6:8e:e5:ce:0e:
d6:01:9b:21:fb:eb:cd:61:d4:01:a1:07:77:60:66:
29:09:8e:60:67:45:70:fd:42:f7:d1:0e:af:7f:11:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AE:52:A8:EB:EE:D5:D6:9C:B7:B1:17:B2:B2:6F:C8:33:75:D9:B0
X509v3 Authority Key Identifier:
keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/4C7A7612299A11F0B84321CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.129.0/24
Signature Algorithm: sha256WithRSAEncryption
22:51:ca:ec:b0:6b:ec:7e:52:aa:42:21:f9:c8:2c:55:3c:3d:
01:53:28:ee:bc:36:0e:fb:da:47:9d:6d:28:f4:f3:94:ee:ea:
35:6a:39:71:de:b0:a7:80:a9:86:e2:7b:89:37:8d:89:d0:b5:
29:c2:3b:e0:f7:df:4a:a2:24:6a:c1:fe:6f:92:d6:ad:be:5a:
2a:86:da:77:6d:79:c8:fe:e6:f2:59:e1:00:86:eb:2d:83:2f:
83:15:ce:7b:ee:56:d8:32:42:a6:ce:24:69:9e:3b:db:f0:2e:
da:4f:8f:c2:b1:ba:7f:46:f7:74:8b:c2:f6:1c:d2:4e:14:2b:
85:d2:bb:62:41:eb:c8:b3:bf:57:5b:93:aa:8d:df:d2:d5:2f:
32:5f:7a:1a:17:ad:8d:6e:fd:a9:8f:ca:00:09:77:9c:bf:07:
91:ee:0e:ca:48:a5:6a:5c:36:86:e8:bc:71:18:dc:d5:1d:0c:
61:b1:45:1b:9c:60:20:be:3a:b9:e8:a1:76:19:6d:3b:55:d9:
21:35:08:3b:34:24:93:9b:32:f0:68:4b:ad:73:44:95:47:9c:
7d:75:cd:1f:5d:bc:e6:29:b5:52:2d:62:a0:6a:c6:a9:53:c8:
76:dc:1b:9e:de:0c:e5:c2:7d:87:18:90:bd:36:25:b8:d5:48:
7d:19:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:24:25 2025 by rpki-client