Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/340CE78262F511EC88FB8BA35A40D577.roa
File: 340CE78262F511EC88FB8BA35A40D577.roa (raw, json)
Hash identifier: BiKTohKXsACKdCTjuPmJ3W8yxYPF+HL0j5L9QHiSFZI=
Subject key identifier: 4F:34:29:8B:71:F7:5C:3C:64:14:0E:48:BE:FA:AE:DC:06:A8:17:18
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0272
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/340CE78262F511EC88FB8BA35A40D577.roa
Signing time: Wed 22 Dec 2021 07:03:02 +0000
ROA not before: Wed 22 Dec 2021 07:02:59 +0000
ROA not after: Wed 31 Dec 2031 07:02:59 +0000
asID: 19905
IP address blocks: 105.160.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF
Validity
Not Before: Dec 22 07:02:59 2021 GMT
Not After : Dec 31 07:02:59 2031 GMT
Subject: CN=61c2cda6-ae03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:ce:3a:c9:e9:1f:9b:93:cb:b1:18:08:60:
7e:de:25:d2:a7:fc:15:a2:b0:d3:a2:8e:30:a1:71:
ee:8c:14:66:fa:af:2d:f9:c0:1b:56:0a:56:f5:73:
cb:af:bc:61:15:a2:67:83:cc:e8:34:37:b5:c0:e7:
fb:bf:bd:e8:d7:55:d3:08:12:80:ba:87:8d:d2:05:
b5:72:63:51:b8:5a:68:08:49:af:07:56:93:fb:6a:
06:42:d7:92:1f:97:19:f5:48:be:1a:1b:2e:c5:99:
09:ff:ed:e0:0e:ec:57:82:b2:4d:76:73:0e:8e:be:
f6:50:73:5a:52:e3:70:96:cc:72:ad:fd:d0:5b:df:
a4:0c:65:41:64:f7:ee:33:a4:8a:39:78:45:24:15:
81:00:4d:81:b7:00:eb:89:d1:a8:5e:d4:b7:4a:f2:
44:d7:d4:95:ff:52:79:fb:7c:fb:e7:76:ae:38:29:
40:45:b5:7c:df:d2:eb:07:6c:f3:54:59:aa:be:a7:
0e:07:5c:52:c3:fc:1d:8f:36:8e:17:67:c4:81:7b:
cb:81:a0:f0:4a:be:9a:35:95:c8:4d:0f:4f:8e:b8:
21:93:ca:41:5d:14:97:d0:d1:50:a8:b8:67:c8:7a:
5e:9d:8a:86:1a:59:c4:04:18:04:2c:83:05:4e:a8:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:29:8B:71:F7:5C:3C:64:14:0E:48:BE:FA:AE:DC:06:A8:17:18
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/340CE78262F511EC88FB8BA35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.160.0.0/13
Signature Algorithm: sha256WithRSAEncryption
22:85:a6:82:c6:c5:47:33:79:e8:a7:01:ef:d4:d8:76:9a:ce:
1a:bc:3c:38:32:1d:6b:17:4d:d2:b3:52:e9:1d:2f:42:07:36:
00:48:06:1c:37:f6:dd:de:cd:54:c0:2a:bb:ff:b7:e4:0a:2a:
da:21:62:62:0b:14:df:dd:b0:7b:21:b6:0d:29:2f:12:93:83:
f0:46:38:81:4b:dd:8b:35:b5:ca:b6:28:b0:95:43:2f:03:d4:
6d:56:95:6a:67:34:62:b2:f1:18:88:12:a3:ee:93:30:05:93:
07:8d:40:4b:9a:64:0b:c5:03:5a:9a:04:4c:98:59:1b:55:47:
4e:8a:4e:18:0c:36:fa:d2:9b:a4:41:75:4c:16:5e:b1:73:59:
dd:36:ec:ee:4d:f5:8b:3f:8c:59:ec:15:d5:01:f6:0f:f6:59:
98:1e:49:2f:aa:7e:c7:af:bc:04:3e:f7:ac:20:11:8c:74:b3:
93:7f:0c:22:61:e9:11:c8:94:17:1a:40:45:2a:c3:14:98:16:
a3:a2:d4:b9:be:c5:de:94:d0:bb:5c:26:55:ed:75:50:3f:66:
fc:1c:e8:7d:bd:c5:87:ad:58:51:e2:4b:55:dd:46:2c:28:1b:
0a:42:e4:78:60:04:4e:6d:7a:06:b2:64:7a:46:6d:a7:ed:f2:
b6:81:21:1b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODIxMDRBRjExMC8GA1UEBRMoOEIxMDI2OTUzRUNGN0M0Q0UxMzlGRTlBNTlCREQ3
MjI4QTE1MzU0NDAeFw0yMTEyMjIwNzAyNTlaFw0zMTEyMzEwNzAyNTlaMBgxFjAU
BgNVBAMMDTYxYzJjZGE2LWFlMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk8M46yekfm5PLsRgIYH7eJdKn/BWisNOijjChce6MFGb6ry35wBtWClb1
c8uvvGEVomeDzOg0N7XA5/u/vejXVdMIEoC6h43SBbVyY1G4WmgISa8HVpP7agZC
15Iflxn1SL4aGy7FmQn/7eAO7FeCsk12cw6OvvZQc1pS43CWzHKt/dBb36QMZUFk
9+4zpIo5eEUkFYEATYG3AOuJ0ahe1LdK8kTX1JX/Unn7fPvndq44KUBFtXzf0usH
bPNUWaq+pw4HXFLD/B2PNo4XZ8SBe8uBoPBKvpo1lchND0+OuCGTykFdFJfQ0VCo
uGfIel6dioYaWcQEGAQsgwVOqCPDAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUTzQp
i3H3XDxkFA5Ivvqu3AaoFxgwHwYDVR0jBBgwFoAUixAmlT7PfEzhOf6aWb3XIooV
NUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4QUVBMjI4L2l4QW1s
VDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2l4QW1sVDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4
QUVBMjI4LzM0MENFNzgyNjJGNTExRUM4OEZCOEJBMzVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwNpoDANBgkqhkiG9w0BAQsF
AAOCAQEAIoWmgsbFRzN56KcB79TYdprOGrw8ODIdaxdN0rNS6R0vQgc2AEgGHDf2
3d7NVMAqu/+35Aoq2iFiYgsU392weyG2DSkvEpOD8EY4gUvdizW1yrYosJVDLwPU
bVaVamc0YrLxGIgSo+6TMAWTB41AS5pkC8UDWpoETJhZG1VHTopOGAw2+tKbpEF1
TBZesXNZ3Tbs7k31iz+MWewV1QH2D/ZZmB5JL6p+x6+8BD73rCARjHSzk38MImHp
EciUFxpARSrDFJgWo6LUub7F3pTQu1wmVe11UD9m/Bzofb3Fh61YUeJLVd1GLCgb
CkLkeGAETm16BrJkekZtp+3ytoEhGw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:52 2025 by rpki-client