Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/646F613C003311F0A1A285B3762E951A.roa
File: 646F613C003311F0A1A285B3762E951A.roa (raw, json)
Hash identifier: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=
Subject key identifier: 73:11:56:3C:21:F5:5A:79:99:D6:35:56:7B:A8:97:11:15:84:72:2F
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0616
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/646F613C003311F0A1A285B3762E951A.roa
Signing time: Thu 13 Mar 2025 17:48:38 +0000
ROA not before: Thu 13 Mar 2025 17:48:33 +0000
ROA not after: Wed 13 Mar 2030 17:48:33 +0000
asID: 26042
IP address blocks: 102.215.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 13 17:48:33 2025 GMT
Not After : Mar 13 17:48:33 2030 GMT
Subject: CN=67d31a76-0ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:13:c2:57:12:e7:85:c0:d8:2c:36:4a:c5:
be:eb:21:b0:46:4d:20:77:3b:33:cf:b8:b0:12:f9:
ff:d0:28:79:92:2d:3a:2d:93:d7:53:09:14:10:ef:
9f:80:c5:93:f4:9b:eb:e6:f4:86:e3:40:ac:c1:ab:
02:ec:61:6c:5e:b4:26:43:37:17:2c:5b:ed:66:7e:
b7:15:0b:1e:4a:a6:3a:72:c6:d4:e0:17:cc:44:93:
04:47:ea:a9:30:8f:37:5d:95:80:fe:2d:8d:c1:73:
d5:96:9d:45:e0:da:ba:68:85:02:b1:fc:43:ee:1f:
cd:1e:5f:5c:c3:00:7f:54:e5:d5:f6:a6:c6:5f:4e:
64:9a:c3:ca:37:b7:b9:5e:32:c1:27:49:cd:0d:1f:
c2:7f:12:50:fc:a7:81:02:3d:99:5c:bf:d0:92:70:
b2:89:e1:14:1d:0b:e0:34:09:40:58:1e:4f:66:f4:
0b:40:1e:0d:c0:e2:fa:31:8f:db:ca:34:4a:bd:c4:
c9:0a:08:4f:74:a9:a6:5a:8f:77:ff:c2:c0:19:94:
08:93:6d:07:23:e2:53:44:b7:03:17:de:01:e2:61:
2f:ae:cb:a3:f3:ce:00:df:c1:3d:d3:90:07:96:cc:
17:7c:e0:5a:71:61:b1:3a:9d:a2:f0:e4:62:25:fa:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:56:3C:21:F5:5A:79:99:D6:35:56:7B:A8:97:11:15:84:72:2F
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/646F613C003311F0A1A285B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
74:86:97:6b:2c:38:91:32:b1:a3:cd:ed:1b:7e:58:16:ed:cd:
df:33:1e:0a:04:67:4c:65:d6:7c:ae:9c:3a:64:8b:57:7a:91:
d6:cb:70:ff:19:28:92:74:8e:6d:68:f7:da:a4:b5:fa:7d:21:
17:44:24:13:3d:45:4b:74:e7:f0:67:69:4d:43:e5:39:6a:b6:
b6:13:44:d1:53:dd:e4:85:f6:72:cb:d7:f4:e0:3a:6c:fb:dc:
28:15:d5:01:3e:4e:b9:16:f1:28:99:1d:69:9e:a3:4a:87:46:
d3:dd:6f:95:d2:26:ec:5b:96:78:a4:d4:cc:ea:b7:44:f7:72:
44:c9:d8:e3:1c:8c:62:1f:41:96:40:b7:f3:3a:2b:28:ae:14:
a6:89:a3:b8:19:e7:46:9a:37:97:79:06:02:ea:02:11:27:5a:
11:a9:76:81:39:3b:2e:b1:1d:64:82:b3:ab:0b:d4:9a:3a:6d:
76:51:db:d0:f8:80:6f:db:b5:6a:31:33:46:62:b5:26:22:7c:
f2:fc:6e:73:b6:b8:ab:a8:97:8f:c5:77:33:c3:ac:3f:ee:b5:
c5:8a:8d:c0:ac:ab:5a:3e:46:b2:f1:a9:95:8d:b4:6d:ed:bb:
40:7d:72:97:b2:e7:b5:b5:90:cc:86:c4:3e:37:fe:50:4e:a1:
ff:6f:31:71
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNTAzMTMxNzQ4MzNaFw0zMDAzMTMxNzQ4MzNaMBgxFjAU
BgNVBAMTDTY3ZDMxYTc2LTBkZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnfhPCVxLnhcDYLDZKxb7rIbBGTSB3OzPPuLAS+f/QKHmSLTotk9dTCRQQ
75+AxZP0m+vm9IbjQKzBqwLsYWxetCZDNxcsW+1mfrcVCx5KpjpyxtTgF8xEkwRH
6qkwjzddlYD+LY3Bc9WWnUXg2rpohQKx/EPuH80eX1zDAH9U5dX2psZfTmSaw8o3
t7leMsEnSc0NH8J/ElD8p4ECPZlcv9CScLKJ4RQdC+A0CUBYHk9m9AtAHg3A4vox
j9vKNEq9xMkKCE90qaZaj3f/wsAZlAiTbQcj4lNEtwMX3gHiYS+uy6PzzgDfwT3T
kAeWzBd84FpxYbE6naLw5GIl+oXxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcxFW
PCH1WnmZ1jVWe6iXERWEci8wHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzY0NkY2MTNDMDAzMzExRjBBMUEyODVCMzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1+YwDQYJKoZIhvcNAQEL
BQADggEBAHSGl2ssOJEysaPN7Rt+WBbtzd8zHgoEZ0xl1nyunDpki1d6kdbLcP8Z
KJJ0jm1o99qktfp9IRdEJBM9RUt05/BnaU1D5TlqtrYTRNFT3eSF9nLL1/TgOmz7
3CgV1QE+TrkW8SiZHWmeo0qHRtPdb5XSJuxblnik1Mzqt0T3ckTJ2OMcjGIfQZZA
t/M6KyiuFKaJo7gZ50aaN5d5BgLqAhEnWhGpdoE5Oy6xHWSCs6sL1Jo6bXZR29D4
gG/btWoxM0ZitSYifPL8bnO2uKuol4/FdzPDrD/utcWKjcCsq1o+RrLxqZWNtG3t
u0B9cpey57W1kMyGxD43/lBOof9vMXE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:50 2025 by rpki-client