Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/D6B61570F80D11EF99734852762E951A.roa
File: D6B61570F80D11EF99734852762E951A.roa (raw, json)
Hash identifier: tfdDcGbQMsee5OOm9EW60V6hc91lxofJEctKITYoU8M=
Subject key identifier: 40:99:30:82:D7:7F:58:E0:04:76:65:97:D0:A6:71:73:2C:79:B7:D9
Certificate issuer: /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial: 0C73
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/D6B61570F80D11EF99734852762E951A.roa
Signing time: Mon 03 Mar 2025 08:59:39 +0000
ROA not before: Mon 03 Mar 2025 08:59:29 +0000
ROA not after: Wed 31 Mar 2027 08:59:29 +0000
asID: 327983
IP address blocks: 102.216.124.0/22 maxlen: 24
2c0f:f338::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3187 (0xc73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651E73AF
Validity
Not Before: Mar 3 08:59:29 2025 GMT
Not After : Mar 31 08:59:29 2027 GMT
Subject: CN=67c56f7b-40be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:21:71:ca:3d:91:ae:ab:ff:28:9b:86:e8:
b2:38:14:7a:d6:68:88:ec:e0:e8:32:fa:7f:de:71:
35:73:fe:43:23:ec:57:d1:4d:0f:5d:3b:a0:a1:bf:
d1:d4:4c:dc:03:9f:09:d0:81:6d:49:08:64:c6:f5:
44:5f:89:29:81:36:dc:40:5d:72:cf:8a:18:9f:b5:
ce:db:34:db:fa:4f:6c:11:9b:cd:68:d7:75:7d:20:
cc:ee:ee:d1:de:6f:82:cc:c3:33:a5:f0:3b:92:e7:
5d:5e:03:3e:24:ed:0a:86:4f:b7:03:51:7e:f6:c5:
30:6e:45:27:be:2c:e3:99:29:18:46:e4:ae:36:5b:
e3:90:e5:8d:71:4e:66:d5:2f:9a:02:f4:4a:f0:0d:
19:4a:19:56:6c:0e:5a:59:9b:3d:51:59:21:ad:1f:
fe:00:28:3f:5a:81:30:6d:4f:a6:4a:20:29:0c:c7:
47:39:47:31:4e:21:36:3b:2b:df:53:28:6c:ab:4e:
75:71:51:71:96:79:16:ab:2b:97:f3:5b:60:05:89:
cd:95:06:e2:06:24:89:58:30:8a:69:7c:96:ef:0e:
33:06:92:79:3e:e9:4a:f9:9c:fa:04:f6:72:dc:aa:
60:91:f7:29:6f:77:44:43:e3:71:0c:e5:89:0a:5a:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:99:30:82:D7:7F:58:E0:04:76:65:97:D0:A6:71:73:2C:79:B7:D9
X509v3 Authority Key Identifier:
keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/D6B61570F80D11EF99734852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.124.0/22
IPv6:
2c0f:f338::/32
Signature Algorithm: sha256WithRSAEncryption
8d:07:dc:85:e4:09:57:47:b7:1d:4f:f2:32:70:41:c5:ff:bb:
86:4f:f9:a3:4b:76:d8:f7:b5:6f:8e:31:66:c5:80:61:b3:a4:
97:b5:b4:86:db:3e:ca:1e:ab:10:2b:be:b6:e6:70:e1:8e:d6:
14:83:b1:5c:50:ad:7f:45:92:83:c6:2a:84:6a:ed:18:fc:35:
41:ea:fe:b1:c5:fd:7e:da:21:99:45:03:7e:2f:22:ab:d1:f9:
c0:6b:f9:83:3a:c8:5c:63:78:a4:14:43:20:e2:0e:59:aa:4d:
53:1d:96:78:6e:80:15:f4:ba:e0:5a:d2:b5:74:0a:f2:8d:d4:
64:5e:b1:1b:44:e0:40:4b:55:38:ff:10:3c:bd:26:38:cb:e4:
f6:0f:c2:38:46:f8:be:7c:e4:d0:13:8d:f2:ee:4d:09:98:e1:
28:eb:0a:e6:3a:c5:c2:67:cd:2c:11:3f:5e:de:b9:99:5b:72:
f5:6e:13:68:f5:9f:9a:16:ff:f6:98:20:43:64:95:65:d2:f5:
fa:1e:00:39:ca:1e:e8:c2:4e:96:a9:e9:10:a9:e5:ac:8b:02:
38:cd:d1:3c:7a:d1:2e:f0:9d:45:9c:ae:09:c5:fd:75:f5:ac:
eb:7b:60:11:c3:2b:33:58:16:2b:c5:4f:73:2f:be:6d:07:4d:
20:cf:56:e8
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTFFNzNBRjExMC8GA1UEBRMoODc4NEVFNEEwMkRBRjg5NzI2NTZGMTI0NTJCRjI3
QTQ5MTFDMzYyOTAeFw0yNTAzMDMwODU5MjlaFw0yNzAzMzEwODU5MjlaMBgxFjAU
BgNVBAMTDTY3YzU2ZjdiLTQwYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaiCFxyj2Rrqv/KJuG6LI4FHrWaIjs4Ogy+n/ecTVz/kMj7FfRTQ9dO6Ch
v9HUTNwDnwnQgW1JCGTG9URfiSmBNtxAXXLPihiftc7bNNv6T2wRm81o13V9IMzu
7tHeb4LMwzOl8DuS511eAz4k7QqGT7cDUX72xTBuRSe+LOOZKRhG5K42W+OQ5Y1x
TmbVL5oC9ErwDRlKGVZsDlpZmz1RWSGtH/4AKD9agTBtT6ZKICkMx0c5RzFOITY7
K99TKGyrTnVxUXGWeRarK5fzW2AFic2VBuIGJIlYMIppfJbvDjMGknk+6Ur5nPoE
9nLcqmCR9ylvd0RD43EM5YkKWhZPAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUQJkw
gtd/WOAEdmWX0KZxcyx5t9kwHwYDVR0jBBgwFoAUh4TuSgLa+JcmVvEkUr8npJEc
NikwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxRTczLzNDRjBFMDlBNzhDNDExRTY4NDhEM0EzMUY4QUVBMjI4L2g0VHVT
Z0xhLUpjbVZ2RWtVcjhucEpFY05pay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2g0VHVTZ0xhLUpjbVZ2RWtVcjhucEpFY05pay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUxRTczLzNDRjBFMDlBNzhDNDExRTY4NDhEM0EzMUY4
QUVBMjI4L0Q2QjYxNTcwRjgwRDExRUY5OTczNDg1Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2HwwDQQCAAIwBwMFACwP
8zgwDQYJKoZIhvcNAQELBQADggEBAI0H3IXkCVdHtx1P8jJwQcX/u4ZP+aNLdtj3
tW+OMWbFgGGzpJe1tIbbPsoeqxArvrbmcOGO1hSDsVxQrX9FkoPGKoRq7Rj8NUHq
/rHF/X7aIZlFA34vIqvR+cBr+YM6yFxjeKQUQyDiDlmqTVMdlnhugBX0uuBa0rV0
CvKN1GResRtE4EBLVTj/EDy9JjjL5PYPwjhG+L585NATjfLuTQmY4SjrCuY6xcJn
zSwRP17euZlbcvVuE2j1n5oW//aYIENklWXS9foeADnKHujCTpap6RCp5ayLAjjN
0Tx60S7wnUWcrgnF/XX1rOt7YBHDKzNYFivFT3Mvvm0HTSDPVug=
-----END CERTIFICATE-----
Generated at Fri Apr 4 06:12:40 2025 by rpki-client