Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/7BADB9E6F07211EF92AD9376762E951A.roa
File: 7BADB9E6F07211EF92AD9376762E951A.roa (raw, json)
Hash identifier: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=
Subject key identifier: 07:2A:2C:D9:83:87:43:36:3F:99:8A:D5:BA:3D:9A:2C:74:65:CA:E0
Certificate issuer: /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial: 031A
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/7BADB9E6F07211EF92AD9376762E951A.roa
Signing time: Fri 21 Feb 2025 16:39:56 +0000
ROA not before: Fri 21 Feb 2025 16:39:53 +0000
ROA not after: Mon 21 Feb 2028 16:39:53 +0000
asID: 329182
IP address blocks: 102.213.89.0/24 maxlen: 32
2c0f:2980:4000::/34 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619AFBAF
Validity
Not Before: Feb 21 16:39:53 2025 GMT
Not After : Feb 21 16:39:53 2028 GMT
Subject: CN=67b8ac5c-bb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:b5:42:ac:6b:31:7c:40:04:7c:9f:90:43:
0e:d0:f1:8e:6d:bf:7c:d9:de:d6:52:a3:30:74:b9:
06:84:c7:45:c1:58:08:27:9f:6d:5b:22:81:38:f5:
06:23:08:97:7b:0e:fa:a6:3e:69:60:72:63:15:dd:
15:cc:ff:c3:35:3c:a7:13:f6:e9:5c:36:0a:63:f4:
b7:81:2b:9d:62:d5:da:4b:26:06:c4:af:1d:e2:c9:
92:95:6c:05:e8:bd:7b:85:57:17:49:5b:be:7d:98:
77:08:35:d0:0a:da:16:c5:ac:65:ae:b3:c3:30:de:
df:6b:fa:6d:16:03:f1:04:ab:b0:96:0d:56:4a:80:
f1:11:02:db:3a:c5:3c:33:f9:fb:87:f3:8b:28:d9:
2a:8e:15:75:ee:8c:39:72:ee:12:04:71:8f:fd:7e:
9f:26:86:6e:8b:5e:3e:f5:95:31:e9:c5:f3:ef:b9:
28:ef:28:dd:a9:76:bb:43:8a:dd:68:27:01:60:7a:
08:08:e3:01:d7:e9:d4:a9:a5:77:61:75:8b:9c:87:
15:ef:bd:63:98:0d:e0:b4:3d:0b:e9:b1:60:fe:26:
dd:ed:dc:d4:6d:c5:cc:bb:ed:ed:d1:5c:35:78:72:
f4:22:1c:85:35:fd:3a:50:a0:9b:b1:c5:24:ef:9d:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:2C:D9:83:87:43:36:3F:99:8A:D5:BA:3D:9A:2C:74:65:CA:E0
X509v3 Authority Key Identifier:
keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/7BADB9E6F07211EF92AD9376762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.89.0/24
IPv6:
2c0f:2980:4000::/34
Signature Algorithm: sha256WithRSAEncryption
a6:0f:b5:df:d6:54:74:62:23:08:9d:f0:37:3c:46:65:96:ea:
37:15:07:04:e2:df:c5:92:73:6b:50:a2:65:6c:65:16:e9:9f:
3a:bf:c0:a6:e6:ed:97:7d:03:26:b3:89:57:3d:4f:29:74:b1:
7d:51:ad:80:96:ba:c2:ef:80:da:d6:a9:b1:26:6e:a6:09:21:
31:0b:4b:26:71:cb:fe:90:d5:af:24:bf:12:7f:a3:47:44:50:
8b:2f:3a:eb:ae:7a:f9:c6:01:e8:53:e2:d1:ca:27:ab:ca:9a:
69:05:2b:90:3a:8d:ed:de:3b:71:2d:4b:d7:4b:7a:e4:c1:ea:
43:fb:60:bc:07:00:83:06:55:21:35:bf:87:c4:ba:72:5a:9f:
a2:87:1c:e0:6a:83:56:f3:f3:4a:8d:c2:6d:2b:d9:bf:69:be:
59:15:30:00:8f:69:4a:0f:13:3a:9d:1a:e7:2e:6b:8e:11:2b:
2a:da:1c:c1:6b:9c:c5:9f:3a:11:9a:c0:27:7c:ab:bf:44:76:
7e:e0:f2:03:ad:8f:b8:bf:4a:f6:17:e8:36:7d:dc:a1:ba:59:
80:31:f3:4f:52:99:da:82:d3:eb:70:39:31:88:b1:05:78:4f:
59:75:7d:42:cf:32:ac:a5:81:c6:bd:ef:1f:72:8e:45:b8:f8:
6b:f4:78:b4
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAxowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlBRkJBRjExMC8GA1UEBRMoNTAzRDE4MjhENEVGMENEQzYzQTU4QTU0RjVDMEM5
OTJEMjNCQzFBQTAeFw0yNTAyMjExNjM5NTNaFw0yODAyMjExNjM5NTNaMBgxFjAU
BgNVBAMTDTY3YjhhYzVjLWJiOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUGrVCrGsxfEAEfJ+QQw7Q8Y5tv3zZ3tZSozB0uQaEx0XBWAgnn21bIoE4
9QYjCJd7DvqmPmlgcmMV3RXM/8M1PKcT9ulcNgpj9LeBK51i1dpLJgbErx3iyZKV
bAXovXuFVxdJW759mHcINdAK2hbFrGWus8Mw3t9r+m0WA/EEq7CWDVZKgPERAts6
xTwz+fuH84so2SqOFXXujDly7hIEcY/9fp8mhm6LXj71lTHpxfPvuSjvKN2pdrtD
it1oJwFgeggI4wHX6dSppXdhdYuchxXvvWOYDeC0PQvpsWD+Jt3t3NRtxcy77e3R
XDV4cvQiHIU1/TpQoJuxxSTvnfmVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUByos
2YOHQzY/mYrVuj2aLHRlyuAwHwYDVR0jBBgwFoAUUD0YKNTvDNxjpYpU9cDJktI7
waowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QUZCL0NFNTA0QzBBOUJBNTExRUQ5ODQxQUVDN0YxMjIyNDY4L1VEMFlL
TlR2RE54anBZcFU5Y0RKa3RJN3dhby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VEMFlLTlR2RE54anBZcFU5Y0RKa3RJN3dhby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE5QUZCL0NFNTA0QzBBOUJBNTExRUQ5ODQxQUVDN0Yx
MjIyNDY4LzdCQURCOUU2RjA3MjExRUY5MkFEOTM3Njc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBABm1VkwDgQCAAIwCAMGBiwP
KYBAMA0GCSqGSIb3DQEBCwUAA4IBAQCmD7Xf1lR0YiMInfA3PEZlluo3FQcE4t/F
knNrUKJlbGUW6Z86v8Cm5u2XfQMms4lXPU8pdLF9Ua2AlrrC74Da1qmxJm6mCSEx
C0smccv+kNWvJL8Sf6NHRFCLLzrrrnr5xgHoU+LRyierypppBSuQOo3t3jtxLUvX
S3rkwepD+2C8BwCDBlUhNb+HxLpyWp+ihxzgaoNW8/NKjcJtK9m/ab5ZFTAAj2lK
DxM6nRrnLmuOESsq2hzBa5zFnzoRmsAnfKu/RHZ+4PIDrY+4v0r2F+g2fdyhulmA
MfNPUpnagtPrcDkxiLEFeE9ZdX1CzzKspYHGve8fco5FuPhr9Hi0
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:54 2025 by rpki-client