Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/ABC9643AED2B11EFB63252B0762E951A.roa
File: ABC9643AED2B11EFB63252B0762E951A.roa (raw, json)
Hash identifier: rYe+cPZkMHhDG2GzW8uh3+g2G04Hmp44xW61bCXWx/Y=
Subject key identifier: 3A:A1:91:F8:ED:77:16:A4:A3:58:5B:BD:90:01:F2:D6:A8:BE:DA:84
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 0186
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/ABC9643AED2B11EFB63252B0762E951A.roa
Signing time: Mon 17 Feb 2025 12:35:29 +0000
ROA not before: Mon 17 Feb 2025 12:35:25 +0000
ROA not after: Sat 17 Feb 2035 12:35:25 +0000
asID: 29286
IP address blocks: 41.92.251.0/24 maxlen: 30
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF
Validity
Not Before: Feb 17 12:35:25 2025 GMT
Not After : Feb 17 12:35:25 2035 GMT
Subject: CN=67b32d11-f436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:c1:86:06:7d:87:92:45:d4:d8:11:f2:fb:
c9:bc:f9:58:7b:33:69:a7:68:10:bf:68:fe:29:65:
3d:e1:a6:46:88:f9:63:76:e7:6d:91:24:2f:0d:ce:
52:b1:b1:be:7a:0a:42:61:5a:21:fb:ff:52:f0:ec:
27:89:2d:d7:a9:0d:2b:cd:0b:f4:53:a0:e0:c4:b7:
f2:65:2d:00:00:05:14:67:fa:8e:4b:56:64:54:6e:
87:72:b1:6f:89:21:2c:cb:67:00:31:12:ec:75:4c:
a5:a7:79:bc:bc:c8:95:c4:8f:5a:8e:cc:cb:00:f3:
fb:61:c0:f2:96:32:dc:6e:98:f3:df:46:9e:48:99:
e1:08:82:b9:aa:37:c2:f0:78:76:32:60:04:8c:09:
2e:d5:4c:a5:f4:b2:d5:ea:27:a5:e3:f2:d5:dd:d0:
db:26:6a:3b:77:5a:5e:68:84:b5:42:e1:fd:90:48:
62:51:c6:9d:70:2b:7e:b9:4d:08:e2:11:5c:9c:eb:
5d:49:de:b7:95:ce:e6:ef:2b:48:3e:ba:e5:c0:88:
8d:2d:f5:45:eb:b6:1d:df:a9:2f:62:61:ac:d6:f5:
2b:fe:c0:e4:95:10:cb:8b:f9:4d:67:e7:f0:04:ff:
96:4e:9b:de:d8:f0:4a:65:f8:1f:a2:97:80:14:30:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:91:F8:ED:77:16:A4:A3:58:5B:BD:90:01:F2:D6:A8:BE:DA:84
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/ABC9643AED2B11EFB63252B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.251.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:9d:4e:f9:01:e1:e3:f4:a3:f6:d1:6b:f0:d6:63:32:7f:0f:
dc:47:97:95:d6:4a:06:12:26:4c:85:30:11:f9:d6:0e:a2:7d:
0d:cf:f5:1f:e9:e2:9e:ce:e0:c1:5e:eb:3e:53:d7:00:ef:9a:
24:a0:7c:7b:87:7d:f2:c1:53:a8:ef:42:29:37:ef:71:fd:98:
b6:3b:67:b9:65:4e:05:45:0f:d0:fb:1f:18:c3:16:b4:9b:db:
42:41:41:1d:a2:23:45:89:b4:26:0e:07:e9:ca:71:ed:ac:2b:
50:5a:dd:5c:93:3b:01:3c:9a:2e:e2:7e:4b:e3:a9:be:11:a0:
04:d5:e9:c9:f2:d4:f9:5f:b6:a1:c8:58:35:c1:14:e9:8d:02:
46:e8:87:d5:66:8f:9e:a8:c9:3f:30:aa:9b:c3:ec:da:4c:55:
88:e5:2a:2b:1a:ca:80:ca:ac:d7:64:e6:20:43:3d:8e:55:74:
cf:76:6c:ba:29:d3:97:30:94:bf:ca:87:61:8c:77:46:fa:a5:
e2:37:1e:93:bb:75:ed:5c:87:a2:6e:8b:4d:39:7f:8b:ae:d8:
25:f5:14:40:5b:23:7e:06:09:ff:b2:f6:96:03:b2:e5:26:aa:
0e:85:1e:82:01:5e:84:3b:61:58:68:fb:be:b7:d0:0c:a4:15:
c9:2c:69:97
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0JBNkFBRjExMC8GA1UEBRMoNEY0OEU3RUEzMEM5ODlCMTVEMzYzOTM3NzYzNTUz
QTA3RTE2Q0Q4RTAeFw0yNTAyMTcxMjM1MjVaFw0zNTAyMTcxMjM1MjVaMBgxFjAU
BgNVBAMTDTY3YjMyZDExLWY0MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2ccGGBn2HkkXU2BHy+8m8+Vh7M2mnaBC/aP4pZT3hpkaI+WN2522RJC8N
zlKxsb56CkJhWiH7/1Lw7CeJLdepDSvNC/RToODEt/JlLQAABRRn+o5LVmRUbody
sW+JISzLZwAxEux1TKWneby8yJXEj1qOzMsA8/thwPKWMtxumPPfRp5ImeEIgrmq
N8LweHYyYASMCS7VTKX0stXqJ6Xj8tXd0Nsmajt3Wl5ohLVC4f2QSGJRxp1wK365
TQjiEVyc611J3reVzubvK0g+uuXAiI0t9UXrth3fqS9iYazW9Sv+wOSVEMuL+U1n
5/AE/5ZOm97Y8Epl+B+il4AUMAvRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOqGR
+O13FqSjWFu9kAHy1qi+2oQwHwYDVR0jBBgwFoAUT0jn6jDJibFdNjk3djVToH4W
zY4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCQTZBLzBGNEEzN0Y0RUNEOTExRUU5RjczMkM2Nzc3NTQxMkU2L1Qwam42
akRKaWJGZE5qazNkalZUb0g0V3pZNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Qwam42akRKaWJGZE5qazNkalZUb0g0V3pZNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCQTZBLzBGNEEzN0Y0RUNEOTExRUU5RjczMkM2Nzc3
NTQxMkU2L0FCQzk2NDNBRUQyQjExRUZCNjMyNTJCMDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXPswDQYJKoZIhvcNAQEL
BQADggEBAM+dTvkB4eP0o/bRa/DWYzJ/D9xHl5XWSgYSJkyFMBH51g6ifQ3P9R/p
4p7O4MFe6z5T1wDvmiSgfHuHffLBU6jvQik373H9mLY7Z7llTgVFD9D7HxjDFrSb
20JBQR2iI0WJtCYOB+nKce2sK1Ba3VyTOwE8mi7ifkvjqb4RoATV6cny1PlftqHI
WDXBFOmNAkboh9Vmj56oyT8wqpvD7NpMVYjlKisayoDKrNdk5iBDPY5VdM92bLop
05cwlL/Kh2GMd0b6peI3HpO7de1ch6Jui005f4uu2CX1FEBbI34GCf+y9pYDsuUm
qg6FHoIBXoQ7YVho+7630AykFcksaZc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:04:56 2025 by rpki-client