Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/90DFE62C13B311F0B457F24A762E951A.roa
File: 90DFE62C13B311F0B457F24A762E951A.roa (raw, json)
Hash identifier: F0Iu3tARZ4V2QdTChm0buYcD4/1ZoSlFs0g6nMo5b0Y=
Subject key identifier: D2:65:40:60:8F:7C:10:CD:6F:74:2D:8A:68:71:6D:20:06:75:45:C4
Certificate issuer: /CN=F36E3941AF/serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
Certificate serial: 0272
Authority key identifier: 45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/90DFE62C13B311F0B457F24A762E951A.roa
Signing time: Mon 07 Apr 2025 13:24:00 +0000
ROA not before: Mon 07 Apr 2025 13:23:56 +0000
ROA not after: Mon 30 Apr 2035 13:23:56 +0000
asID: 328780
IP address blocks: 102.206.200.0/24 maxlen: 31
102.206.201.0/24 maxlen: 31
102.206.202.0/24 maxlen: 31
102.206.203.0/24 maxlen: 31
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3941AF, serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
Validity
Not Before: Apr 7 13:23:56 2025 GMT
Not After : Apr 30 13:23:56 2035 GMT
Subject: CN=67f3d1f0-9763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:1e:a3:6e:70:1a:f3:0d:00:ad:37:31:d6:
fc:d5:70:95:81:26:c6:62:35:f9:b3:be:a9:b8:35:
f4:29:57:9c:a2:8a:11:e5:9e:d7:4a:d5:db:5a:e3:
98:86:bd:f0:b7:51:01:be:64:00:7b:37:4f:3a:0a:
14:a4:94:8f:86:7e:bc:2e:3c:ff:56:fe:17:94:72:
63:80:ab:e7:4e:3d:a9:4b:04:e0:0c:8a:fc:75:73:
9e:7d:b8:89:80:d2:3a:5c:06:c2:5f:c7:f1:11:ca:
be:1c:ea:5f:03:68:67:d4:0c:80:8d:9d:7e:56:87:
65:35:0a:a5:b2:26:41:00:fd:80:75:50:27:4f:35:
d6:3f:3d:4b:33:87:24:0a:79:c1:77:79:cc:e7:30:
dd:ea:7a:d6:57:7e:4c:c1:2a:31:fa:48:b2:66:04:
ca:b9:55:c8:9d:ed:ae:c9:00:cb:d8:c3:80:96:17:
9c:7b:73:6c:33:36:21:ff:88:ec:ed:01:cb:3a:3c:
93:f1:b3:45:4d:cd:10:4b:cb:e9:76:84:7f:6e:82:
75:64:c0:5f:d7:f1:be:72:b4:76:d4:58:02:2e:79:
d2:d6:ff:27:bd:1d:b4:16:07:5a:5e:c4:b8:8e:72:
fd:b3:e3:26:0b:de:28:f4:41:40:35:d7:5b:5e:03:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:65:40:60:8F:7C:10:CD:6F:74:2D:8A:68:71:6D:20:06:75:45:C4
X509v3 Authority Key Identifier:
keyid:45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/90DFE62C13B311F0B457F24A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:93:e8:16:bc:b2:85:f7:b7:bf:ea:6e:87:50:2c:16:cb:3a:
93:e7:8a:38:90:09:f4:74:83:08:8d:93:58:fc:45:6f:60:a5:
b1:01:7a:c9:d2:9f:17:66:62:06:0c:8b:ad:c4:53:9d:5f:d5:
f2:92:10:2a:6b:8b:b9:66:e1:1a:34:35:89:82:6a:0e:92:c4:
15:1b:b7:11:93:8e:be:0f:02:a4:8c:6b:6e:fa:55:71:7a:35:
5d:c9:be:7f:a6:11:9f:08:a8:46:bc:fa:bd:39:8c:04:bb:74:
a0:ef:ef:fb:cb:c4:25:3c:21:3e:c8:82:da:85:9a:d6:6e:58:
0c:cc:4b:d3:36:3d:a7:00:8e:44:7d:61:e6:bd:45:1b:44:02:
bd:61:a2:a0:55:bd:ab:be:5f:b7:3e:52:9b:a6:f8:9a:51:5e:
59:35:38:2f:df:c5:cb:8c:71:9b:b4:92:3d:c4:e5:c6:a4:4a:
1d:a7:8d:ac:6b:15:b3:e7:50:13:07:02:44:7d:64:e6:24:9e:
de:86:59:52:67:2c:ca:6c:11:22:7c:e1:ad:28:fb:48:fc:55:
ea:00:af:ec:0e:1f:98:6f:e5:9c:50:e0:21:85:1c:0a:1c:e9:
05:88:a9:e7:8c:9f:30:34:85:c1:7a:81:36:91:6e:88:8f:67:
dc:83:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:37 2025 by rpki-client on console.sobornost.net