Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/4C4CA36C240511F0A41941F0DAE4EC9C.roa
File: 4C4CA36C240511F0A41941F0DAE4EC9C.roa (raw, json)
Hash identifier: 96jN3F3S5Qws4lMbtHi32wuOKDgpX0E+Lst17cIJts8=
Subject key identifier: 0B:8D:D7:7F:61:F7:09:88:D5:9A:C4:69:9A:25:10:F9:18:2F:21:79
Certificate issuer: /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial: 5D
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/4C4CA36C240511F0A41941F0DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 07:49:23 +0000
ROA not before: Mon 28 Apr 2025 07:49:18 +0000
ROA not after: Wed 22 Apr 2026 07:49:18 +0000
asID: 9009
IP address blocks: 102.210.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Validity
Not Before: Apr 28 07:49:18 2025 GMT
Not After : Apr 22 07:49:18 2026 GMT
Subject: CN=680f3302-56c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:40:b7:dd:d8:b3:b7:ba:81:02:27:21:8c:
03:c2:81:97:e4:21:f3:9d:08:93:7d:dc:55:49:89:
d4:67:63:8b:2c:91:2c:f9:d8:e4:a3:4f:1a:64:56:
2f:c8:c8:07:98:70:f3:d4:10:76:a8:31:8a:c9:bd:
70:b5:b0:8b:0c:08:38:58:f7:8a:ee:61:16:d7:13:
76:a9:4a:41:b6:c0:02:a8:5b:67:c0:93:a1:39:23:
28:86:97:57:fe:28:27:34:3b:f4:90:1c:a0:ae:94:
89:34:39:72:cd:91:8e:52:d2:cc:99:c8:79:e2:9a:
a3:5d:0e:e6:1c:53:62:08:e3:18:64:e4:b7:95:7d:
76:d4:74:45:b7:8f:75:25:1a:ec:80:c7:3b:0a:67:
5c:35:f0:13:04:8e:48:d0:10:bb:68:e0:b7:47:f6:
4f:94:f4:82:09:6d:dd:33:f3:f1:e1:64:36:c9:fb:
44:23:7f:23:c3:b3:b0:af:ab:2f:81:94:f8:97:6d:
49:51:25:f1:7f:36:32:eb:a0:c8:3f:02:3a:f9:e6:
06:20:ec:00:ca:a9:fa:78:65:82:8b:f2:5d:4b:b1:
30:37:4a:ec:f8:83:a5:24:f3:e7:93:21:63:94:b8:
91:2c:a2:bf:d7:98:74:f0:a7:f4:90:59:ef:cf:d7:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:D7:7F:61:F7:09:88:D5:9A:C4:69:9A:25:10:F9:18:2F:21:79
X509v3 Authority Key Identifier:
keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/4C4CA36C240511F0A41941F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.60.0/22
Signature Algorithm: sha256WithRSAEncryption
92:fa:cd:ce:7c:25:7e:8b:b4:9c:75:97:89:ad:f7:27:20:7f:
dd:bf:00:54:0e:1a:8b:ba:42:d1:d6:2d:03:83:39:0e:83:da:
f2:65:f9:e0:53:57:08:f5:9c:2b:0c:76:29:ed:a5:30:2f:ff:
36:7f:3c:85:96:2f:39:66:c5:64:33:c4:da:ed:eb:e5:65:a1:
1b:ec:63:80:95:14:78:c3:97:6b:6d:c5:b6:86:2b:b6:ee:68:
de:dd:bd:f2:47:92:66:d9:d8:5f:c8:f2:e5:00:6d:4b:d8:d5:
10:ba:d7:3e:63:d4:2a:11:4a:b8:e8:aa:30:47:ae:a1:43:c6:
f3:f8:90:d1:45:41:d0:a6:36:15:53:88:69:c3:bb:3f:b1:27:
2c:dd:6f:4f:58:ae:30:aa:a9:26:6f:08:80:12:79:ca:b2:f4:
d0:92:1a:2c:60:b4:15:a5:97:2a:cd:35:60:c3:ea:be:33:97:
fd:fb:6c:dc:f6:66:de:11:17:6b:18:4e:d3:a9:e9:2e:29:9e:
cc:56:bd:9e:35:58:9e:6d:d0:97:73:ef:b5:db:52:bf:7c:2e:
54:af:b4:72:c2:34:35:55:f2:59:c5:a7:12:3f:7e:23:6d:f2:
b3:0f:f0:e6:55:54:e2:e8:77:fe:7b:96:de:2f:7c:6e:59:0b:
a6:30:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:54:26 2025 by rpki-client on console.sobornost.net