Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/E44691A42F3211F09C2DD1BADAE4EC9C.roa
File: E44691A42F3211F09C2DD1BADAE4EC9C.roa (raw, json)
Hash identifier: lrbHcWPiIcB8N+/jAI7IqmQFwQtonM2D4rkcMKVtlnQ=
Subject key identifier: 52:0D:94:E6:0D:9A:24:B6:5F:24:12:F8:C4:70:1D:94:C2:4B:5C:45
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 0900
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/E44691A42F3211F09C2DD1BADAE4EC9C.roa
Signing time: Mon 12 May 2025 13:13:28 +0000
ROA not before: Tue 13 May 2025 13:13:23 +0000
ROA not after: Fri 01 Dec 2028 13:13:23 +0000
asID: 328366
IP address blocks: 102.207.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF, serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Validity
Not Before: May 13 13:13:23 2025 GMT
Not After : Dec 1 13:13:23 2028 GMT
Subject: CN=6821f3f8-329c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:3a:d5:4e:87:ca:be:ad:1f:00:1b:73:5b:
d2:90:fa:c3:7e:35:fa:bd:c0:34:5b:97:87:58:b4:
a6:66:4b:ca:47:37:4a:f1:78:45:16:cd:be:b5:6a:
9e:16:1e:ef:ab:a1:03:6f:5b:3e:ea:01:1b:98:7c:
f8:bb:1d:4b:75:4c:41:f8:1e:3d:71:9f:d7:d7:f4:
fb:04:62:03:18:0d:f2:7c:e5:61:37:5f:fa:f5:83:
9a:7b:e1:fc:6d:37:85:7e:19:2b:ba:10:9c:06:b9:
fc:97:ee:cc:92:4a:60:15:63:0e:4d:44:c2:38:7b:
a9:84:0f:8d:5b:b1:95:2d:4a:16:ce:f0:79:96:55:
aa:bb:62:33:1d:bc:89:b2:4d:dc:b5:6e:2d:52:8d:
76:98:47:49:4d:17:2f:38:69:b8:bb:a0:a2:05:29:
e1:bc:95:0b:da:f1:15:73:0e:67:c9:77:87:ed:78:
99:72:dc:fc:59:45:c8:7b:7c:5c:23:79:1d:37:e8:
c0:b7:c2:ad:c0:76:70:68:4f:22:fd:19:88:6e:e6:
3e:0d:87:df:a2:35:c0:d4:c7:17:07:9a:5c:11:8e:
35:1f:b2:e6:04:4f:7a:9e:0f:33:b2:54:be:d8:d3:
9b:0e:46:f1:dd:f2:b4:08:f3:d1:6a:a4:d6:88:da:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:94:E6:0D:9A:24:B6:5F:24:12:F8:C4:70:1D:94:C2:4B:5C:45
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/E44691A42F3211F09C2DD1BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
80:86:1f:f0:a2:18:48:cf:8c:dd:dc:f8:d2:9b:7c:8f:77:d7:
64:57:dc:35:61:34:00:b5:80:bc:16:e3:bd:c9:02:7c:02:8b:
a9:16:10:42:27:f6:af:c0:8f:d5:40:60:d1:9a:28:13:cf:94:
4f:7a:1c:e1:dc:a2:73:a1:c1:32:3d:39:1a:ee:39:31:96:46:
b0:c6:fa:7f:98:34:72:25:90:cd:cb:ee:7f:f4:29:60:5a:89:
42:d1:5e:36:55:93:dd:1b:f0:23:86:e8:83:03:c4:a8:7b:b9:
87:9d:6b:f2:81:ea:1e:91:fc:d5:f7:23:fb:dc:dd:fd:d0:c1:
cf:3c:c5:7e:8f:49:4b:98:a1:6c:63:98:04:eb:c6:5d:ff:24:
bc:12:74:2e:a4:5f:32:90:59:02:d2:53:0f:61:7a:dd:db:39:
bb:2f:c5:49:ab:4a:d1:64:db:86:8d:30:70:c7:08:87:31:9e:
ba:01:1a:64:22:b4:e5:bc:be:b0:4d:17:c8:b0:89:41:26:23:
76:d0:5a:ed:7b:bd:c7:19:82:08:6c:bb:1d:8a:4d:b1:0d:4f:
c1:f6:73:bb:ec:0b:81:77:23:ee:9c:38:88:e9:37:07:58:1d:
2c:88:00:ca:93:55:2d:bc:2f:57:bd:6c:61:eb:c5:93:18:a3:
c2:7a:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:03:00 2025 by rpki-client