Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/9F80812EDB0911EFB46D89BD762E951A.roa
File: 9F80812EDB0911EFB46D89BD762E951A.roa (raw, json)
Hash identifier: FoaOMoMM4KGYFeAi/UEScoLQ2zP+N4lDb6DDMV/MjGk=
Subject key identifier: C1:49:85:C0:1B:A1:25:77:09:86:E3:67:CC:FC:5F:E9:EB:F9:17:08
Certificate issuer: /CN=F36750E0AF/serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
Certificate serial: 0298
Authority key identifier: 1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/9F80812EDB0911EFB46D89BD762E951A.roa
Signing time: Sat 25 Jan 2025 10:46:25 +0000
ROA not before: Sat 25 Jan 2025 10:46:21 +0000
ROA not after: Fri 29 Jan 2027 10:46:21 +0000
asID: 328275
IP address blocks: 102.165.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36750E0AF, serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
Validity
Not Before: Jan 25 10:46:21 2025 GMT
Not After : Jan 29 10:46:21 2027 GMT
Subject: CN=6794c101-6f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:dc:5c:00:9d:3a:b1:40:fc:44:5b:3a:4e:
f7:e4:7e:3c:f2:4f:8f:dc:30:8f:f6:19:46:23:1b:
d1:4c:7e:79:1e:cf:e7:25:a2:9a:fd:20:b0:a5:23:
4f:f1:9f:71:28:ef:03:0d:c4:45:43:9d:8f:ba:3a:
f5:1e:c2:79:ce:d1:5d:af:a4:49:0a:4f:ab:21:f6:
c5:28:54:58:a1:69:1d:df:a5:e6:30:f3:44:73:9f:
fd:a2:ac:cd:53:fb:ec:d2:55:fa:84:c0:75:4b:e8:
e9:0f:ce:c8:05:bb:0a:7d:fb:d8:7a:01:c9:29:0e:
9b:74:eb:ca:89:83:0f:c3:89:01:55:41:0a:af:a8:
ac:88:fd:eb:fa:d6:e2:bb:08:28:31:76:90:b4:de:
43:56:37:07:a5:cc:10:c1:37:46:8a:e7:0d:fd:eb:
a4:6f:bb:9f:14:28:e8:31:cf:31:db:2d:b4:4b:2f:
dc:5a:8d:4e:e8:91:80:d3:d2:50:68:3c:03:23:06:
64:b4:e9:12:05:00:08:18:c1:7f:59:97:16:f3:94:
cc:e3:ad:f6:fe:29:de:f7:c7:c5:0d:47:ee:d9:be:
eb:18:5a:12:75:ca:24:1c:0a:ab:24:53:80:99:a4:
52:4a:c2:a8:3b:a8:4e:79:ce:46:de:ec:7f:f9:70:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:85:C0:1B:A1:25:77:09:86:E3:67:CC:FC:5F:E9:EB:F9:17:08
X509v3 Authority Key Identifier:
keyid:1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/9F80812EDB0911EFB46D89BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:e7:1b:75:eb:35:95:b7:3a:24:4d:a5:8c:91:dd:19:11:66:
2c:22:f6:e2:ab:dc:68:88:23:ee:21:dc:01:97:1f:c4:67:bb:
43:05:20:b3:00:d4:8f:08:14:67:47:a6:e8:f9:4f:6a:59:8f:
11:01:46:2e:e4:d7:10:b4:1c:ad:9f:0e:0c:c3:be:91:72:77:
47:8e:d8:61:fa:bd:1a:59:cd:b0:cb:f7:e4:db:d4:35:37:d0:
b7:93:49:6a:8d:13:2e:db:25:b8:e2:31:a9:db:72:02:1c:e8:
25:32:ae:14:ae:90:d4:19:23:e6:c2:8a:36:20:bc:57:30:18:
98:c0:07:d2:4a:6f:9a:1a:f7:db:b6:3e:1d:f8:7c:61:a6:f5:
80:72:78:b5:de:47:1e:9d:4f:33:74:e5:1f:7d:95:a8:70:ca:
19:75:47:0d:20:45:48:7e:38:7f:25:62:65:86:73:a5:96:71:
ac:d0:94:d6:3e:90:7a:34:60:19:34:e1:72:48:05:cf:10:4c:
9e:1d:d9:17:ad:e4:10:99:0f:db:4c:bb:f0:14:23:a4:74:fa:
85:11:ca:82:7a:b5:64:9b:24:db:ed:c7:f0:cb:87:dd:96:ba:
bf:de:34:ef:af:93:1d:be:a3:e5:2b:77:9d:e0:29:86:29:50:
00:e6:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:43 2025 by rpki-client on console.sobornost.net