Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/00C569A2002D11F08D8D918C762E951A.roa
File: 00C569A2002D11F08D8D918C762E951A.roa (raw, json)
Hash identifier: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=
Subject key identifier: 67:9F:23:E1:F3:37:5A:15:23:7B:C1:D7:6A:0C:F9:BA:8B:80:C2:F6
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 02F3
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/00C569A2002D11F08D8D918C762E951A.roa
Signing time: Thu 13 Mar 2025 17:02:54 +0000
ROA not before: Thu 13 Mar 2025 17:02:49 +0000
ROA not after: Wed 13 Mar 2030 17:02:49 +0000
asID: 215672
IP address blocks: 102.212.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Mar 13 17:02:49 2025 GMT
Not After : Mar 13 17:02:49 2030 GMT
Subject: CN=67d30fbd-0d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:b3:5e:bc:ad:2a:8f:a0:ec:73:3a:73:3c:
e1:f2:18:04:5b:28:ca:71:a5:56:a9:c0:0e:11:69:
9c:af:60:7d:79:3b:cf:c3:3d:7f:e5:e9:06:36:aa:
d7:cb:75:66:e4:29:9f:2a:5e:74:62:04:10:a9:c6:
15:a3:25:30:47:34:0e:2a:ca:d2:79:89:6d:81:f7:
7b:f5:bf:ee:01:cf:c0:da:1b:ba:d5:6c:2e:cb:fb:
57:13:0c:8e:c3:e9:e3:67:b4:26:c9:05:6a:db:0b:
48:27:0c:07:40:22:07:82:72:2a:a3:5c:72:fb:af:
b7:59:e1:49:95:ad:11:96:91:67:10:18:5c:52:fb:
8e:7b:dc:23:34:ae:ca:d9:d3:f4:dc:e4:61:ad:96:
e1:37:4c:d1:2a:71:c5:b0:42:ca:0c:b9:40:46:0e:
73:f3:df:19:d8:a9:bf:a6:d3:c6:ef:97:5a:eb:3d:
60:df:e3:4b:c2:1d:0f:72:96:b3:3c:57:ce:bc:65:
e1:cc:be:0c:9d:51:bb:61:c9:f3:1f:7a:7b:9e:c4:
7f:bb:dd:10:62:86:24:b1:ac:4c:d1:fe:8b:85:3f:
e0:47:cc:8a:1f:41:31:73:e1:bb:3e:49:de:58:97:
77:7c:e1:bf:4f:03:0c:89:59:99:53:19:3a:14:7f:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9F:23:E1:F3:37:5A:15:23:7B:C1:D7:6A:0C:F9:BA:8B:80:C2:F6
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/00C569A2002D11F08D8D918C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.4.0/24
Signature Algorithm: sha256WithRSAEncryption
35:30:2b:75:c9:0e:15:de:b9:05:2a:48:19:f3:d7:46:23:34:
ab:b8:20:7e:00:56:e1:5e:43:9b:b8:f4:5f:20:57:24:8c:b3:
c0:49:21:3c:66:bd:93:60:e5:75:25:92:22:a6:fe:81:30:9d:
b5:9e:5c:62:95:28:2d:bb:47:2c:6c:ca:99:bd:f6:26:27:42:
8f:ee:60:72:f8:a0:fa:da:32:7d:df:63:ad:70:f3:89:b2:17:
f7:26:f6:df:d2:b8:a2:86:b5:54:d4:b7:6c:b1:f4:c1:23:6a:
9e:89:d3:d4:93:14:84:3e:56:d6:80:9f:7b:96:98:74:54:ff:
0b:6d:88:5b:06:3f:69:b7:ab:d9:1c:b3:c6:92:8f:46:e9:7d:
bb:6f:a8:e1:2e:5d:32:52:5b:b5:e5:76:26:71:fb:0e:7c:b1:
dd:1f:a7:45:0b:e8:13:04:4c:d5:4d:cc:73:d9:79:aa:91:71:
1d:ee:d3:6a:65:b3:cd:2b:7d:f3:79:9c:6a:a8:04:6a:cb:ce:
cc:41:f5:a7:ac:13:7d:09:99:e6:1a:6e:60:d7:d7:6e:98:63:
27:f4:79:41:75:3f:56:38:e0:5c:c7:06:e5:29:f3:8f:46:85:
2c:8b:cc:75:b4:73:bf:55:1d:28:2c:15:77:a0:bb:33:a7:e6:
04:e5:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:19 2025 by rpki-client on console.sobornost.net