Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2E2091E20BA911F0903B616A762E951A.roa
File: 2E2091E20BA911F0903B616A762E951A.roa (raw, json)
Hash identifier: kAAlUk1Ht2EDuuPnLeJgiVrkjrnO7CIX3KOmhiu4udw=
Subject key identifier: 48:DF:0E:B7:AA:2B:C8:C8:E0:4B:23:80:A5:35:AE:08:92:37:47:FD
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 069D
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2E2091E20BA911F0903B616A762E951A.roa
Signing time: Fri 28 Mar 2025 07:49:30 +0000
ROA not before: Fri 28 Mar 2025 07:49:26 +0000
ROA not after: Sat 12 Apr 2025 07:49:26 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 01:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Mar 28 07:49:26 2025 GMT
Not After : Apr 12 07:49:26 2025 GMT
Subject: CN=67e6548a-aa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:74:0c:5a:56:e4:77:8d:db:73:78:c5:cc:
2d:5e:36:22:2f:b6:53:e9:79:1d:5a:c0:cf:20:6d:
d6:11:6e:79:dd:4a:f2:c8:f0:76:0f:c3:1a:b2:a1:
98:23:a1:35:ff:10:de:fe:a6:95:ac:ff:70:db:fc:
88:06:51:b4:1b:06:16:51:e3:08:b1:f3:ca:c7:08:
17:6e:b7:8c:4b:36:38:a1:6d:57:b2:f0:c3:ef:25:
04:26:3d:f8:9a:38:65:bc:6d:b3:6a:62:ca:66:19:
f0:42:52:1f:51:ce:c3:d8:22:76:1a:21:32:39:ee:
8e:7d:1a:d6:72:d3:1b:39:af:51:a9:f5:1f:92:17:
91:f2:3f:56:19:8e:74:a0:ca:28:5f:f3:40:b0:e6:
af:60:9a:d4:24:70:f4:30:22:09:a5:65:6d:9f:6a:
e9:17:14:f2:d5:6e:56:13:94:3e:11:6f:1a:81:51:
96:ad:37:85:4e:b5:9a:be:31:8e:b7:f8:3c:d9:dc:
a1:40:59:6f:2f:3d:32:77:9d:aa:bc:9f:1f:ea:f1:
14:96:9e:fd:3e:5c:f8:b4:2c:33:53:14:ec:37:3e:
8e:9c:2e:8e:10:96:d9:20:33:e9:69:1f:76:7f:1d:
66:74:fe:2d:0e:f1:97:d4:9f:44:bc:72:fe:78:fd:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DF:0E:B7:AA:2B:C8:C8:E0:4B:23:80:A5:35:AE:08:92:37:47:FD
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2E2091E20BA911F0903B616A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:aa:ac:d7:8c:fd:a5:20:af:cb:bd:cb:75:bf:0f:40:de:7c:
b4:5b:10:34:56:c5:ce:1e:85:90:3f:15:ce:73:8c:1d:54:03:
e5:90:14:90:ab:f3:cc:d8:60:6d:05:5d:2c:2d:07:20:0c:b4:
67:d3:73:8f:0e:3b:29:7b:eb:64:0c:b3:87:a7:7f:3b:30:de:
2f:29:33:14:75:ee:c9:79:0a:b3:e0:69:3a:3b:30:94:d6:62:
8e:0c:97:76:24:04:02:ef:72:71:33:fb:c5:5a:06:c1:b1:62:
87:f8:9b:10:28:8f:7d:dd:7b:b9:61:16:41:1e:ca:49:68:19:
ee:3c:cc:4a:d9:26:45:01:85:e4:81:1a:f1:42:92:73:c6:2d:
46:8b:b7:ad:4a:5b:93:bc:af:04:8c:bc:b5:33:62:33:62:78:
32:b0:d4:ba:a8:b7:63:92:91:19:10:b5:68:d6:5f:e6:f2:fb:
6a:7a:09:9f:ab:84:78:4d:84:49:0a:54:23:a3:cf:cf:4f:fd:
84:c1:00:89:ba:29:14:0c:1e:42:8a:2f:31:2e:fd:a1:f0:12:
33:a3:66:d9:87:a4:54:cc:81:6e:40:84:e8:39:f3:35:a3:65:
e4:3b:35:44:a4:2a:15:6a:f0:c2:4e:b8:ad:a5:77:1b:ad:8f:
4d:ea:c1:1e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNTAzMjgwNzQ5MjZaFw0yNTA0MTIwNzQ5MjZaMBgxFjAU
BgNVBAMTDTY3ZTY1NDhhLWFhMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/P3QMWlbkd43bc3jFzC1eNiIvtlPpeR1awM8gbdYRbnndSvLI8HYPwxqy
oZgjoTX/EN7+ppWs/3Db/IgGUbQbBhZR4wix88rHCBdut4xLNjihbVey8MPvJQQm
PfiaOGW8bbNqYspmGfBCUh9RzsPYInYaITI57o59GtZy0xs5r1Gp9R+SF5HyP1YZ
jnSgyihf80Cw5q9gmtQkcPQwIgmlZW2faukXFPLVblYTlD4RbxqBUZatN4VOtZq+
MY63+DzZ3KFAWW8vPTJ3naq8nx/q8RSWnv0+XPi0LDNTFOw3Po6cLo4QltkgM+lp
H3Z/HWZ0/i0O8ZfUn0S8cv54/cVzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSN8O
t6oryMjgSyOApTWuCJI3R/0wHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzJFMjA5MUUyMEJBOTExRjA5MDNCNjE2QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbAwDQYJKoZIhvcNAQEL
BQADggEBAB6qrNeM/aUgr8u9y3W/D0DefLRbEDRWxc4ehZA/Fc5zjB1UA+WQFJCr
88zYYG0FXSwtByAMtGfTc48OOyl762QMs4enfzsw3i8pMxR17sl5CrPgaTo7MJTW
Yo4Ml3YkBALvcnEz+8VaBsGxYof4mxAoj33de7lhFkEeykloGe48zErZJkUBheSB
GvFCknPGLUaLt61KW5O8rwSMvLUzYjNieDKw1Lqot2OSkRkQtWjWX+by+2p6CZ+r
hHhNhEkKVCOjz89P/YTBAIm6KRQMHkKKLzEu/aHwEjOjZtmHpFTMgW5AhOg58zWj
ZeQ7NUSkKhVq8MJOuK2ldxutj03qwR4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:27:05 2025 by rpki-client