Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/34C8DFBC105011F093296B58762E951A.roa
File: 34C8DFBC105011F093296B58762E951A.roa (raw, json)
Hash identifier: QuatNFiiwr6rSEcJFhngJgion3t9GXDa/1Qg7UY1HPY=
Subject key identifier: 44:01:9D:F5:1C:F7:3D:CF:BC:32:45:6C:48:3A:CA:DF:D3:5F:E9:CB
Certificate issuer: /CN=F369A67FAF/serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
Certificate serial: 0A
Authority key identifier: 27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/34C8DFBC105011F093296B58762E951A.roa
Signing time: Thu 03 Apr 2025 05:55:12 +0000
ROA not before: Thu 03 Apr 2025 05:55:08 +0000
ROA not after: Tue 02 Apr 2030 05:55:08 +0000
asID: 328713
IP address blocks: 102.221.252.0/24 maxlen: 24
102.221.253.0/24 maxlen: 24
102.221.254.0/24 maxlen: 24
102.221.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369A67FAF, serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
Validity
Not Before: Apr 3 05:55:08 2025 GMT
Not After : Apr 2 05:55:08 2030 GMT
Subject: CN=67ee22c0-73b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b5:77:d2:10:ff:3e:6d:b7:8c:6f:ec:f8:dc:
01:48:7c:ac:24:56:a6:f3:a4:e0:6a:3a:67:f3:d3:
1b:a0:e4:98:6a:90:15:3f:c4:32:ed:46:e6:e9:5d:
8a:f5:58:ff:6b:f0:11:6d:99:17:95:ff:19:73:d1:
c8:a4:2b:f0:ea:d4:4e:95:f5:f6:5b:e1:89:a1:cd:
24:42:d0:2c:07:90:d6:f1:31:1f:e4:78:fc:78:4c:
19:ef:1b:fb:a2:66:8a:b7:cd:5c:dc:b8:40:49:df:
9f:af:86:d8:35:69:72:e7:b5:d0:a2:b5:18:f0:a0:
af:36:08:a6:88:79:ba:59:d2:3f:8c:3c:15:cc:91:
4f:bb:a4:22:93:ac:c6:7c:c9:c1:b1:bc:24:d4:5d:
c7:c0:89:f7:85:69:a3:94:13:83:00:60:01:7e:d1:
a4:f4:2b:91:e7:db:6c:ba:83:c1:39:29:18:2f:b6:
bf:a3:ff:44:81:b3:13:74:32:73:a1:ec:f2:48:64:
dc:f5:f0:5f:b1:68:4a:86:42:21:87:22:49:eb:0f:
2c:45:92:59:8a:ca:77:0e:b4:0a:52:bd:1d:92:c5:
26:36:db:54:a7:5e:c9:d8:e7:9f:12:25:88:0a:68:
df:7e:7d:a7:ac:ef:3a:f3:fb:5a:ca:19:fd:72:d1:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:01:9D:F5:1C:F7:3D:CF:BC:32:45:6C:48:3A:CA:DF:D3:5F:E9:CB
X509v3 Authority Key Identifier:
keyid:27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/34C8DFBC105011F093296B58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:8b:4b:ef:7a:cf:85:cc:c4:b2:9f:ef:d1:2c:a2:44:39:7c:
c6:29:d7:39:59:7d:ad:a8:66:27:2a:9c:ba:8c:47:35:a5:23:
88:65:75:93:78:a8:c0:5a:ee:c6:f4:2d:ba:03:1c:fe:16:87:
8f:dd:b4:3a:d8:17:11:d6:84:90:d7:cd:ae:e3:25:51:be:ea:
89:cb:57:25:31:b0:74:4c:cd:85:e1:ed:45:91:8f:c1:43:3d:
b8:78:a2:09:ac:b5:1f:fc:29:54:7d:b1:70:b0:9f:cd:ad:20:
af:15:ba:b4:60:00:07:84:37:66:9f:a0:b7:e5:7f:c9:0a:31:
2e:5c:f9:e7:3e:70:0f:5f:22:f9:e1:e3:a9:7f:9c:23:57:86:
22:a7:4d:d7:93:6c:49:84:4c:11:a8:d2:3f:90:dd:fe:14:af:
29:b4:b5:81:14:57:a5:cf:22:20:19:95:40:ab:5c:70:22:d1:
2e:da:30:f8:74:e4:83:3a:af:f7:03:53:3e:93:99:ee:4a:96:
ea:7a:bd:d7:d0:1f:6d:b8:4b:5f:f3:f2:aa:57:15:0b:57:e1:
eb:d0:da:bf:d2:a5:9a:4b:45:9b:b4:3e:c1:b4:be:40:7c:73:
38:0f:41:c6:f0:f6:24:57:e0:a0:51:36:eb:1d:43:d8:f5:dc:
0c:32:eb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:28 2025 by rpki-client on console.sobornost.net