Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/373D29E4095511F096A41CBE762E951A.roa
File: 373D29E4095511F096A41CBE762E951A.roa (raw, json)
Hash identifier: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=
Subject key identifier: BF:9E:64:82:7A:10:E4:5B:DE:AA:F9:C4:E4:B7:48:D8:BC:3B:9C:AB
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0634
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/373D29E4095511F096A41CBE762E951A.roa
Signing time: Tue 25 Mar 2025 08:43:25 +0000
ROA not before: Tue 25 Mar 2025 08:43:21 +0000
ROA not after: Mon 25 Mar 2030 08:43:21 +0000
asID: 136744
IP address blocks: 102.215.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588 (0x634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 25 08:43:21 2025 GMT
Not After : Mar 25 08:43:21 2030 GMT
Subject: CN=67e26cad-f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:e0:bc:51:c0:e8:3e:56:3b:e2:bb:73:8f:
5f:b9:58:dc:f8:65:e2:03:72:0b:e5:e4:43:68:dc:
64:f1:c1:7d:8d:2d:f2:a4:1f:7f:33:d2:16:af:bb:
1b:04:00:c2:51:14:53:7c:f0:16:b1:53:5b:b3:a5:
b1:fb:64:ca:46:ed:46:c7:0a:8e:1d:33:9e:3d:a4:
e6:a1:e1:6a:3f:10:2b:e5:41:d3:62:8a:a5:44:20:
77:ca:88:92:fd:55:ad:fb:5a:3a:da:da:4b:66:7a:
73:e1:fc:ec:09:8b:5b:33:f2:f1:fb:8f:4b:92:3a:
71:64:c0:e4:16:69:d6:39:56:c1:16:65:35:17:5e:
80:d6:d6:03:08:25:18:53:12:a8:17:1c:5c:b5:e7:
c3:92:25:cb:65:59:fe:7d:7c:8b:2a:70:31:58:af:
a4:85:3c:c4:45:90:5b:96:49:34:78:ec:10:33:b7:
4a:06:70:fa:63:57:93:ff:db:66:be:c1:ef:ac:69:
20:bf:e3:20:fe:58:d6:8f:02:b9:8a:2f:e9:c5:65:
6d:16:75:68:7f:91:f9:01:2f:53:f5:2a:33:79:aa:
cc:4e:9e:00:fa:bb:df:ee:a4:22:83:06:21:e1:6f:
63:8b:12:7d:f3:97:fc:64:bd:97:6c:82:f0:88:a1:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:64:82:7A:10:E4:5B:DE:AA:F9:C4:E4:B7:48:D8:BC:3B:9C:AB
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/373D29E4095511F096A41CBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:43:d4:07:e3:a6:b8:15:6f:81:8a:b9:60:44:09:fc:bb:c9:
d6:82:41:c0:e2:52:3c:f6:7c:92:0e:68:fc:d2:25:51:08:d5:
e1:0e:b7:17:b2:21:59:5c:35:c9:b6:9a:17:3f:fb:b2:28:52:
f2:8f:a7:0f:78:7b:44:4d:00:1a:86:95:d2:45:ac:5e:e9:8d:
bd:ef:b2:49:e9:10:4c:57:ef:eb:0a:1f:4d:28:19:f2:ea:10:
86:4e:e9:ad:ec:fc:0b:27:43:54:47:ff:e3:e8:a2:c3:1b:21:
1f:e9:8d:72:73:88:62:d0:01:73:9b:fd:79:f7:1d:bd:73:f5:
fd:5e:7e:db:38:c8:3e:4c:55:5c:4d:7f:9d:21:26:ca:9d:0c:
17:f9:77:3e:59:f9:0a:1a:27:67:81:66:54:b6:22:d5:f1:e6:
55:04:00:0a:1c:5e:4e:3c:d8:a2:8e:c1:cf:71:84:ad:9e:3b:
a9:ed:e7:be:84:ba:4c:92:a3:69:76:d3:8d:dd:de:44:47:64:
01:18:ff:21:19:3d:75:09:ad:ae:cb:ff:80:99:cd:f4:62:18:
1f:37:f3:8c:32:fe:5b:b4:71:c3:ab:5b:84:96:f7:c5:1a:40:
df:cf:3a:d6:5a:24:2e:df:c2:ca:9f:d6:60:6d:42:80:29:36:
aa:c3:06:94
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNTAzMjUwODQzMjFaFw0zMDAzMjUwODQzMjFaMBgxFjAU
BgNVBAMTDTY3ZTI2Y2FkLWYxYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCaDOC8UcDoPlY74rtzj1+5WNz4ZeIDcgvl5ENo3GTxwX2NLfKkH38z0hav
uxsEAMJRFFN88BaxU1uzpbH7ZMpG7UbHCo4dM549pOah4Wo/ECvlQdNiiqVEIHfK
iJL9Va37Wjra2ktmenPh/OwJi1sz8vH7j0uSOnFkwOQWadY5VsEWZTUXXoDW1gMI
JRhTEqgXHFy158OSJctlWf59fIsqcDFYr6SFPMRFkFuWSTR47BAzt0oGcPpjV5P/
22a+we+saSC/4yD+WNaPArmKL+nFZW0WdWh/kfkBL1P1KjN5qsxOngD6u9/upCKD
BiHhb2OLEn3zl/xkvZdsgvCIodGjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUv55k
gnoQ5FveqvnE5LdI2Lw7nKswHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzM3M0QyOUU0MDk1NTExRjA5NkE0MUNCRTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1+MwDQYJKoZIhvcNAQEL
BQADggEBAC9D1AfjprgVb4GKuWBECfy7ydaCQcDiUjz2fJIOaPzSJVEI1eEOtxey
IVlcNcm2mhc/+7IoUvKPpw94e0RNABqGldJFrF7pjb3vsknpEExX7+sKH00oGfLq
EIZO6a3s/AsnQ1RH/+PoosMbIR/pjXJziGLQAXOb/Xn3Hb1z9f1efts4yD5MVVxN
f50hJsqdDBf5dz5Z+QoaJ2eBZlS2ItXx5lUEAAocXk482KKOwc9xhK2eO6nt576E
ukySo2l2043d3kRHZAEY/yEZPXUJra7L/4CZzfRiGB8384wy/lu0ccOrW4SW98Ua
QN/POtZaJC7fwsqf1mBtQoApNqrDBpQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:30 2025 by rpki-client