Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/9BAF9D2A2E4011F095868FEADAE4EC9C.roa
File: 9BAF9D2A2E4011F095868FEADAE4EC9C.roa (raw, json)
Hash identifier: f5siUrHoUyVq+e+9suWpWVzhrVVztln2eSltwK6bCU8=
Subject key identifier: FA:78:88:37:08:DB:33:07:97:14:A1:BC:06:D3:78:E6:FE:6A:07:79
Certificate issuer: /CN=F3659F22AF/serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Certificate serial: 01A2
Authority key identifier: 55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/9BAF9D2A2E4011F095868FEADAE4EC9C.roa
Signing time: Sun 11 May 2025 08:19:08 +0000
ROA not before: Sun 11 May 2025 08:19:02 +0000
ROA not after: Sun 31 May 2026 08:19:02 +0000
asID: 328711
IP address blocks: 102.222.156.0/22 maxlen: 24
2c0f:e928::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F22AF, serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Validity
Not Before: May 11 08:19:02 2025 GMT
Not After : May 31 08:19:02 2026 GMT
Subject: CN=68205d7c-17b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:29:69:7b:71:9d:48:79:2f:1c:3b:49:22:
69:70:4d:0b:94:a7:46:26:22:ca:07:d6:12:05:4d:
ae:c6:38:f5:6c:6e:9c:f2:ed:3f:74:47:92:8e:cd:
b5:95:ee:77:7b:16:4f:62:30:21:81:47:56:32:88:
d5:f3:ca:b8:0b:92:12:62:c8:d5:7c:c1:55:56:85:
9f:d7:08:32:a3:d6:9c:08:91:ce:37:75:8a:f6:7b:
79:02:26:41:ea:ae:31:77:84:a5:9f:3b:c2:17:fb:
03:1a:40:cb:e9:4d:82:64:9d:7f:aa:3f:31:55:50:
b6:88:e2:69:44:c5:1e:63:fe:d3:72:7c:41:84:62:
3c:a3:fc:34:64:21:22:d7:a7:56:f6:46:80:7e:0b:
ed:fb:a7:8a:38:75:83:a3:a9:62:12:0b:ac:b2:c8:
69:cd:8c:f4:03:d2:35:ad:35:78:6b:a2:f2:59:d3:
f1:0d:a6:6e:2d:80:eb:67:03:92:6f:04:c9:26:91:
26:e0:c7:20:26:f4:de:f2:79:ce:fe:74:5a:d7:3e:
19:4c:cc:10:04:8b:b7:c4:4c:6c:82:33:e3:33:a8:
10:1c:ad:1b:14:80:7f:d3:e2:44:7e:fc:5a:5e:46:
cf:85:dd:ea:73:e2:3b:b9:a6:3c:3b:6a:fc:66:22:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:88:37:08:DB:33:07:97:14:A1:BC:06:D3:78:E6:FE:6A:07:79
X509v3 Authority Key Identifier:
keyid:55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/9BAF9D2A2E4011F095868FEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.156.0/22
IPv6:
2c0f:e928::/32
Signature Algorithm: sha256WithRSAEncryption
77:ce:09:b1:1e:3e:f0:42:bc:f4:8d:34:8c:5b:f2:2e:62:60:
f9:83:2c:2a:0f:f9:b5:13:19:c7:4e:81:a5:69:83:e2:fb:03:
a4:2e:6c:5f:f7:ff:67:d0:23:b4:63:54:e6:3d:83:68:71:6a:
85:5a:cf:10:86:f6:39:b0:06:1c:92:5a:d2:be:22:e6:78:d1:
95:32:17:03:02:29:40:6f:0b:dd:b9:a9:02:1e:fb:5e:2a:19:
f1:36:b7:8f:56:f7:cc:a2:91:0f:7f:38:4c:e6:81:05:6b:a4:
7e:8b:40:23:6e:4e:cd:4e:06:e4:3e:00:e8:89:a2:0c:4f:29:
78:4f:de:d7:40:d2:c6:a7:5c:e3:ed:5b:f8:97:e1:3d:aa:2c:
c6:52:e9:96:bc:9d:73:3e:a5:91:a3:cb:7a:2b:f8:5c:eb:8a:
44:40:c3:e7:eb:5b:a8:b0:6b:cf:d0:18:14:6b:21:0f:cc:71:
04:b1:52:ba:4c:5e:ba:97:49:80:03:ab:65:ea:95:0e:13:fa:
85:f5:6d:db:68:02:ed:6e:7f:01:b8:6e:4d:3a:d6:77:13:8f:
7f:e9:d3:bc:b2:fc:42:1f:a1:ae:f2:45:1c:fc:03:c6:15:42:
9f:25:6c:27:5e:e2:6f:f4:4d:fe:e4:32:ea:f9:6c:59:45:35:
f0:69:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:37:06 2025 by rpki-client