Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9D00E53A042411F0AE942178762E951A.roa
File: 9D00E53A042411F0AE942178762E951A.roa (raw, json)
Hash identifier: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=
Subject key identifier: B1:C9:07:47:A4:DE:AB:38:AB:81:5C:2E:0D:21:7F:AD:8C:78:CC:DB
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0627
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9D00E53A042411F0AE942178762E951A.roa
Signing time: Tue 18 Mar 2025 18:12:55 +0000
ROA not before: Tue 18 Mar 2025 18:12:51 +0000
ROA not after: Mon 18 Mar 2030 18:12:51 +0000
asID: 212238
IP address blocks: 102.217.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1575 (0x627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 18 18:12:51 2025 GMT
Not After : Mar 18 18:12:51 2030 GMT
Subject: CN=67d9b7a7-28c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:4e:ad:83:11:b8:97:87:44:5c:97:40:fb:
36:73:9d:32:14:fe:0c:ad:fe:eb:6c:ad:57:64:a1:
9f:13:bc:7a:cc:d9:4d:32:72:36:bc:91:5a:b1:75:
31:ba:42:29:aa:6f:f0:24:c5:fa:ea:cd:53:0a:b9:
ed:d2:75:4c:2f:0c:a0:2d:a0:a2:ce:e7:f0:02:0e:
16:31:d0:58:d7:3f:c4:21:dd:06:2f:8a:3c:06:c5:
53:de:40:aa:a2:b7:16:5e:ba:0a:d5:bf:4d:02:74:
63:cf:a1:b2:11:41:7f:dd:be:43:b0:32:ee:1f:a1:
28:d9:51:b1:09:92:57:2f:b8:ba:11:6f:5d:20:93:
0e:bb:10:8a:d7:f1:b6:0e:64:51:db:9e:54:cd:25:
7d:7c:6d:fa:17:b4:3e:e6:ad:bc:53:f7:fe:73:b5:
2c:fd:f7:10:41:b9:36:1d:26:4f:4b:7f:b4:91:b5:
96:05:92:29:ae:36:92:0e:0d:13:0e:b9:03:fd:5e:
4b:ff:48:4f:84:51:a8:18:a4:40:a2:5c:90:62:03:
be:ad:ea:77:83:0f:18:1e:1f:42:8d:42:71:fc:d9:
6b:06:c5:8a:c7:f1:2e:a3:55:86:16:8f:14:5b:4d:
6d:1b:39:75:ea:e5:6d:4e:64:a3:9c:9b:bb:2b:24:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:07:47:A4:DE:AB:38:AB:81:5C:2E:0D:21:7F:AD:8C:78:CC:DB
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9D00E53A042411F0AE942178762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:68:5e:0e:ed:44:e2:2c:93:e6:cc:05:03:1f:31:6b:8f:ef:
83:40:5f:ea:c7:55:4a:29:28:7e:4c:e7:0f:4a:e1:41:6b:b0:
a1:6d:9e:40:3e:1b:77:89:58:cf:5e:0c:5e:af:76:cd:15:17:
fc:1a:d4:5e:53:0d:6a:26:7c:b7:56:32:25:89:5f:e8:f7:7e:
f4:c6:a7:79:cb:89:4e:ee:d4:31:c1:8f:42:78:5d:e5:11:75:
b3:71:c4:74:48:23:97:69:85:09:ae:58:b4:34:e2:c0:64:e8:
d2:da:60:e4:fc:d2:03:54:24:e8:77:8d:55:b9:8a:3b:e8:72:
77:4f:56:6e:9f:37:57:9d:f2:22:34:b7:ef:e4:db:d5:42:f1:
c7:5f:d2:f0:99:19:92:59:27:31:45:d5:c7:14:04:86:8b:39:
ac:75:de:5f:76:8f:0c:64:9c:35:22:7b:b6:ae:8d:1a:5a:7b:
ca:52:89:e8:86:0a:73:77:91:0a:8e:fb:ba:69:ec:4a:54:e8:
13:7c:1c:d3:3f:71:20:d0:6d:34:3b:f1:6f:14:86:83:28:a3:
76:e4:ff:3e:3e:37:e8:50:2d:90:df:be:8d:4b:8d:f4:ad:96:
07:a5:f3:26:3c:13:e8:80:8f:c7:ed:98:3f:c1:4e:0e:bb:e8:
b5:fa:13:f4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBicwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNTAzMTgxODEyNTFaFw0zMDAzMTgxODEyNTFaMBgxFjAU
BgNVBAMTDTY3ZDliN2E3LTI4YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVCU6tgxG4l4dEXJdA+zZznTIU/gyt/utsrVdkoZ8TvHrM2U0ycja8kVqx
dTG6Qimqb/AkxfrqzVMKue3SdUwvDKAtoKLO5/ACDhYx0FjXP8Qh3QYvijwGxVPe
QKqitxZeugrVv00CdGPPobIRQX/dvkOwMu4foSjZUbEJklcvuLoRb10gkw67EIrX
8bYOZFHbnlTNJX18bfoXtD7mrbxT9/5ztSz99xBBuTYdJk9Lf7SRtZYFkimuNpIO
DRMOuQP9Xkv/SE+EUagYpECiXJBiA76t6neDDxgeH0KNQnH82WsGxYrH8S6jVYYW
jxRbTW0bOXXq5W1OZKOcm7srJIfRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsckH
R6TeqzirgVwuDSF/rYx4zNswHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzlEMDBFNTNBMDQyNDExRjBBRTk0MjE3ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2WgwDQYJKoZIhvcNAQEL
BQADggEBAI5oXg7tROIsk+bMBQMfMWuP74NAX+rHVUopKH5M5w9K4UFrsKFtnkA+
G3eJWM9eDF6vds0VF/wa1F5TDWomfLdWMiWJX+j3fvTGp3nLiU7u1DHBj0J4XeUR
dbNxxHRII5dphQmuWLQ04sBk6NLaYOT80gNUJOh3jVW5ijvocndPVm6fN1ed8iI0
t+/k29VC8cdf0vCZGZJZJzFF1ccUBIaLOax13l92jwxknDUie7aujRpae8pSieiG
CnN3kQqO+7pp7EpU6BN8HNM/cSDQbTQ78W8UhoMoo3bk/z4+N+hQLZDfvo1LjfSt
lgel8yY8E+iAj8ftmD/BTg676LX6E/Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:14:01 2025 by rpki-client