Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/2C6E0438D1B111EFAE9F9072762E951A.roa
File: 2C6E0438D1B111EFAE9F9072762E951A.roa (raw, json)
Hash identifier: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=
Subject key identifier: AB:60:2F:47:3A:69:89:0B:3B:68:E2:4A:03:AB:5F:7F:67:E0:D8:A4
Certificate issuer: /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial: 02
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/2C6E0438D1B111EFAE9F9072762E951A.roa
Signing time: Mon 13 Jan 2025 13:20:36 +0000
ROA not before: Mon 13 Jan 2025 13:20:32 +0000
ROA not after: Sun 13 Jan 2030 13:20:32 +0000
asID: 329254
IP address blocks: 102.212.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 03:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624132AF
Validity
Not Before: Jan 13 13:20:32 2025 GMT
Not After : Jan 13 13:20:32 2030 GMT
Subject: CN=67851324-3e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:60:0d:47:9a:ef:8c:69:f6:be:46:b6:b1:
64:3f:98:c7:69:18:d3:f6:a6:e2:59:63:2b:0b:77:
d2:f5:bd:7e:87:2d:bb:48:1f:0f:66:f6:14:c7:69:
51:32:69:f5:5d:20:cb:2a:4d:91:7e:d9:77:e1:92:
03:00:91:88:06:2f:4e:fa:6f:b5:4a:04:dd:38:52:
be:af:29:5f:ec:d7:d6:b5:3f:20:e2:fa:81:ff:bb:
c4:e9:f4:02:92:73:d4:fc:88:7f:11:cc:08:33:2d:
0f:60:4a:4e:3d:54:1e:68:1d:82:b3:5e:b7:70:dd:
0b:ab:cf:20:04:88:4e:f4:5d:0c:ab:3c:79:3e:bf:
66:7d:a4:35:fb:4b:40:40:a2:cb:df:0e:bc:36:76:
cc:b1:e4:24:13:a5:32:b2:e5:78:33:69:5a:24:db:
33:e2:e5:fb:93:a6:7e:d5:c7:13:75:52:6c:21:7a:
57:d3:90:e9:97:b0:c8:f9:c8:f1:8b:77:93:49:8a:
7f:c7:a4:56:26:78:24:a7:55:98:c0:f4:e8:8d:4d:
3a:ae:de:57:17:73:0a:57:17:44:fd:49:e0:a2:f1:
20:e3:96:c6:0e:89:71:38:87:88:b6:b8:90:3a:ca:
1a:48:b9:32:0b:74:4f:5c:9a:bd:9b:83:7e:e9:2b:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:2F:47:3A:69:89:0B:3B:68:E2:4A:03:AB:5F:7F:67:E0:D8:A4
X509v3 Authority Key Identifier:
keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/2C6E0438D1B111EFAE9F9072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.11.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f1:e6:9e:58:e7:e3:25:a3:06:82:63:2c:bd:65:56:27:39:
e5:68:19:c8:ad:cc:4c:09:09:09:21:1f:93:e2:d8:ee:2e:80:
94:b4:77:8d:42:94:dc:71:2a:87:25:9d:48:45:c9:a5:2a:42:
c0:f5:10:19:51:90:08:6b:1c:95:fe:07:f1:81:6e:82:ab:05:
3e:6b:bd:f4:b0:b0:13:c1:ba:af:2a:60:88:79:c8:24:6f:9b:
c3:1b:22:b7:3e:ab:39:19:22:c6:7e:60:24:4e:9e:b5:00:11:
ce:3a:26:30:8c:57:d5:f4:1b:86:59:4c:ed:30:7c:a2:a7:69:
bf:68:1b:5b:fa:aa:e6:02:34:63:8b:c7:7a:12:6e:f5:72:b5:
18:a0:78:fb:3d:4f:cb:0b:9a:d8:41:bd:4d:a7:71:89:e9:37:
20:13:99:36:14:26:5e:7d:c7:18:d4:2b:b5:a8:11:c0:14:96:
9b:3f:be:c5:8e:5d:30:12:96:39:6a:4b:db:1c:35:6c:d4:9d:
38:a1:55:a4:a7:65:bd:95:52:a9:6e:64:92:c7:3b:b1:47:87:
b9:bb:a8:43:12:02:a4:d0:7a:78:2e:37:ca:da:97:2b:6f:0f:
85:f1:96:ff:18:09:e1:df:f5:47:fb:05:6f:0d:6e:8f:f1:f0:
94:c7:53:33
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NDEzMkFGMTEwLwYDVQQFEyg5MkNBMkI0MUVFQzNFMDFBMTkzODlFMjIyMDg4QUMz
RkMzQTE0OEVEMB4XDTI1MDExMzEzMjAzMloXDTMwMDExMzEzMjAzMlowGDEWMBQG
A1UEAxMNNjc4NTEzMjQtM2UzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+HYA1Hmu+Mafa+RraxZD+Yx2kY0/am4lljKwt30vW9foctu0gfD2b2FMdp
UTJp9V0gyypNkX7Zd+GSAwCRiAYvTvpvtUoE3ThSvq8pX+zX1rU/IOL6gf+7xOn0
ApJz1PyIfxHMCDMtD2BKTj1UHmgdgrNet3DdC6vPIASITvRdDKs8eT6/Zn2kNftL
QECiy98OvDZ2zLHkJBOlMrLleDNpWiTbM+Ll+5OmftXHE3VSbCF6V9OQ6ZewyPnI
8Yt3k0mKf8ekViZ4JKdVmMD06I1NOq7eVxdzClcXRP1J4KLxIOOWxg6JcTiHiLa4
kDrKGki5Mgt0T1yavZuDfukrUAUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSrYC9H
OmmJCzto4koDq19/Z+DYpDAfBgNVHSMEGDAWgBSSyitB7sPgGhk4niIgiKw/w6FI
7TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjQxMzIvOEJGQkQ5NTJEMUFDMTFFRkE1RDExNjU1NzYyRTk1MUEva3NvclFl
N0Q0Qm9aT0o0aUlJaXNQOE9oU08wLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva3NvclFlN0Q0Qm9aT0o0aUlJaXNQOE9oU08wLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQxMzIvOEJGQkQ5NTJEMUFDMTFFRkE1RDExNjU1NzYy
RTk1MUEvMkM2RTA0MzhEMUIxMTFFRkFFOUY5MDcyNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbUCzANBgkqhkiG9w0BAQsF
AAOCAQEAOfHmnljn4yWjBoJjLL1lVic55WgZyK3MTAkJCSEfk+LY7i6AlLR3jUKU
3HEqhyWdSEXJpSpCwPUQGVGQCGsclf4H8YFugqsFPmu99LCwE8G6rypgiHnIJG+b
wxsitz6rORkixn5gJE6etQARzjomMIxX1fQbhllM7TB8oqdpv2gbW/qq5gI0Y4vH
ehJu9XK1GKB4+z1Pywua2EG9Tadxiek3IBOZNhQmXn3HGNQrtagRwBSWmz++xY5d
MBKWOWpL2xw1bNSdOKFVpKdlvZVSqW5kksc7sUeHubuoQxICpNB6eC43ytqXK28P
hfGW/xgJ4d/1R/sFbw1uj/HwlMdTMw==
-----END CERTIFICATE-----
Generated at Wed Feb 5 15:56:52 2025 by rpki-client