Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/8B97C97C29B211F0BE9210EFDAE4EC9C.roa
File: 8B97C97C29B211F0BE9210EFDAE4EC9C.roa (raw, json)
Hash identifier: YWliehZSLVKOUVOtFDH1Zw4P9bTGn6VPsgJOpr2PpdI=
Subject key identifier: FB:CA:30:85:10:B0:6D:22:85:0F:C5:69:39:76:A2:99:32:EB:18:B7
Certificate issuer: /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial: 17
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/8B97C97C29B211F0BE9210EFDAE4EC9C.roa
Signing time: Mon 05 May 2025 13:12:07 +0000
ROA not before: Mon 05 May 2025 13:12:02 +0000
ROA not after: Wed 06 May 2026 13:12:02 +0000
asID: 328939
IP address blocks: 102.218.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Validity
Not Before: May 5 13:12:02 2025 GMT
Not After : May 6 13:12:02 2026 GMT
Subject: CN=6818b927-fe5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:4c:37:41:8d:f6:a0:25:8f:da:22:92:47:
6f:f9:91:9e:9f:53:d0:10:b7:51:b8:26:3a:87:df:
a5:ea:35:b2:8e:20:83:e1:21:6a:cb:64:19:bf:30:
72:23:a9:cf:43:cb:bb:fa:87:7a:7c:c8:1b:b5:ed:
2d:cb:cb:2f:bf:0c:f3:ae:cc:32:a7:f4:28:04:b1:
02:3d:2e:72:f6:d6:23:09:10:95:0e:22:58:f2:bb:
80:1f:ac:99:ca:dc:5f:92:69:c4:11:30:21:cc:26:
e8:a0:08:5a:1b:75:c3:85:49:96:55:9f:27:69:f7:
fa:5a:f3:aa:f3:3e:d2:93:84:63:97:98:dd:6b:8f:
2b:d0:2b:2f:74:b2:8c:8d:23:a7:25:5e:87:98:b1:
ec:74:ce:ce:b0:88:2e:03:48:2e:da:42:c9:0e:b3:
b0:55:8a:b2:9c:98:81:36:e9:67:4f:4c:28:d0:93:
7a:2e:d4:f2:6f:ea:78:51:dd:7e:18:6b:12:95:df:
73:38:b1:bd:a2:f1:88:8e:d4:cf:6a:31:0a:40:87:
ea:84:e4:92:78:5c:7f:6f:71:23:bd:a6:a1:c4:8b:
84:c0:cc:1c:1e:84:28:8a:25:d7:12:b0:2a:12:8d:
b6:45:1c:8b:b6:37:40:78:42:31:87:4d:1c:70:95:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CA:30:85:10:B0:6D:22:85:0F:C5:69:39:76:A2:99:32:EB:18:B7
X509v3 Authority Key Identifier:
keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/8B97C97C29B211F0BE9210EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d1:fd:99:ae:fa:63:bc:88:c0:d9:94:37:40:7c:99:4d:4d:
ed:56:6a:0c:8a:c8:09:60:05:1b:09:8b:02:96:1f:6a:2b:0e:
39:e4:11:bf:1f:ac:38:c6:5b:03:40:6c:64:ce:d8:50:9e:a5:
a7:95:31:83:ac:d3:ac:28:f2:42:8c:1a:4a:a5:37:a1:78:4c:
81:e9:c9:55:c8:44:7e:bc:52:08:2a:79:77:ca:73:5a:6d:cd:
f4:c9:57:c5:94:c7:9a:29:0e:1f:50:94:f9:41:65:49:2c:48:
0a:bd:62:2e:9b:fa:08:5f:5b:a4:6e:04:48:d2:b9:72:5a:e8:
37:24:3d:8b:d7:7c:ce:0d:a7:22:f1:9e:c1:10:2f:3b:4c:eb:
a8:13:e4:ba:c5:0f:e0:c6:c5:9f:c3:02:78:89:2d:c6:81:dc:
08:54:3e:9a:b2:29:2b:38:1d:e9:78:ef:ed:68:01:17:bd:ed:
25:bb:fc:03:82:a6:1a:f9:0c:a9:d7:11:fb:4f:76:73:a2:ae:
08:e1:bc:2f:08:74:82:d2:6c:00:46:fd:da:84:9a:f3:59:32:
41:f8:fe:5f:c2:20:0a:a7:c6:aa:b3:75:6a:3f:77:bf:32:a1:
1c:d8:1b:26:d8:09:ad:c9:fc:02:24:4d:34:75:0e:cf:31:28:
2c:e1:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:22:33 2025 by rpki-client