Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/74DC1AE2C46511EF85B5237D762E951A.roa
File: 74DC1AE2C46511EF85B5237D762E951A.roa (raw, json)
Hash identifier: CJ5E2+hEe+/wSXFMNEijdHv/KTZ0Hf60OfkqPWnXEi4=
Subject key identifier: 0A:32:0E:C9:A4:99:CB:19:13:28:5C:18:8A:FF:D4:D5:BB:60:3C:88
Certificate issuer: /CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Certificate serial: 61
Authority key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/74DC1AE2C46511EF85B5237D762E951A.roa
Signing time: Fri 27 Dec 2024 15:15:50 +0000
ROA not before: Fri 27 Dec 2024 15:15:47 +0000
ROA not after: Thu 31 Dec 2026 15:15:47 +0000
asID: 329303
IP address blocks: 102.207.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695083AF
Validity
Not Before: Dec 27 15:15:47 2024 GMT
Not After : Dec 31 15:15:47 2026 GMT
Subject: CN=676ec4a6-aa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:b7:7e:d8:98:54:b7:33:6f:47:0d:ef:a6:
b2:4a:65:ea:07:66:52:1e:3a:13:4c:ba:7c:2a:de:
c8:cc:e5:e5:b9:d6:91:af:c5:04:a5:53:10:61:57:
57:ef:a0:85:66:3a:e8:d1:49:28:bf:89:ba:1f:5a:
bf:be:a8:5c:7b:bb:11:34:d0:47:e7:0e:95:b4:09:
e9:c9:94:7d:ce:8c:14:2b:fa:93:42:25:c5:ab:7e:
59:01:33:52:db:3a:a8:d9:c9:ca:62:f8:a0:c8:a4:
4b:67:45:fe:2d:7d:56:1c:b3:dc:f9:f2:25:a4:94:
c7:e1:08:ea:f3:00:2b:30:e8:ec:ae:d7:ce:7e:d8:
90:5c:80:95:05:d3:74:52:31:26:bb:75:fe:02:4c:
4c:bd:d1:61:c6:ce:66:30:c6:6c:51:78:34:6f:55:
39:7c:f1:e1:be:25:b8:fe:65:4a:6e:0c:8a:02:7d:
29:45:77:f7:fb:61:f7:d1:21:f6:f3:ba:25:30:f1:
11:60:b6:f9:d4:bd:27:8c:9a:e7:e1:f4:d2:8c:85:
c4:26:1d:9f:5b:04:d8:31:9f:2d:f0:38:13:4f:c8:
32:e7:8b:a2:60:60:61:54:e8:c0:03:a3:76:2d:f8:
d6:af:4e:37:34:9c:77:c7:84:9d:f5:17:7f:42:55:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:32:0E:C9:A4:99:CB:19:13:28:5C:18:8A:FF:D4:D5:BB:60:3C:88
X509v3 Authority Key Identifier:
keyid:E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/74DC1AE2C46511EF85B5237D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.92.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:a9:6f:78:8e:9c:6c:ab:d7:f2:4c:3d:a3:02:7a:2f:47:cf:
11:90:3b:4d:4f:3f:f6:fa:06:ea:3e:87:55:45:50:c4:e1:6c:
10:ad:c9:7e:00:2c:4d:0c:6d:ee:ad:a8:fa:b4:05:d7:3d:2a:
b6:db:52:8c:77:0b:82:13:dc:61:9b:6d:a0:a4:12:99:ca:a1:
09:db:7c:60:c6:92:21:e6:79:6d:ed:99:5e:84:b0:27:43:e6:
dc:79:69:51:7e:47:a0:4c:56:3e:97:d3:5a:b6:7a:c4:1e:32:
08:21:e8:f0:92:6b:8c:f6:2c:e2:11:69:3a:37:e0:5a:2a:3c:
16:fa:5c:0c:e9:1c:ef:bf:de:07:d6:4e:7c:07:4d:bb:84:83:
b9:6a:ce:fb:1f:fa:01:f8:15:5c:40:8c:6c:52:b8:3a:68:72:
cc:d9:bb:46:9f:b3:36:12:cb:f3:e8:66:31:d9:29:19:25:9c:
43:30:d6:10:6d:62:75:14:ef:e6:9c:a8:f2:09:f7:38:3f:1c:
e3:dd:6a:01:e2:6b:61:10:eb:01:4d:58:80:f7:aa:04:51:f5:
87:3f:d2:1c:02:b9:1c:f0:e2:4c:e1:9d:5c:45:60:89:96:7c:
73:ac:d2:34:0a:d3:25:ad:f1:30:d8:3a:9e:93:16:13:2b:31:
c5:a8:66:8a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBYTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
NTA4M0FGMTEwLwYDVQQFEyhFNTEwM0VEMTE5RTY0NzlCQjAzNkI3QzNGNDhEQ0M5
RTYyQzE3NDI0MB4XDTI0MTIyNzE1MTU0N1oXDTI2MTIzMTE1MTU0N1owGDEWMBQG
A1UEAxMNNjc2ZWM0YTYtYWE0YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbxt37YmFS3M29HDe+mskpl6gdmUh46E0y6fCreyMzl5bnWka/FBKVTEGFX
V++ghWY66NFJKL+Juh9av76oXHu7ETTQR+cOlbQJ6cmUfc6MFCv6k0Ilxat+WQEz
Uts6qNnJymL4oMikS2dF/i19Vhyz3PnyJaSUx+EI6vMAKzDo7K7Xzn7YkFyAlQXT
dFIxJrt1/gJMTL3RYcbOZjDGbFF4NG9VOXzx4b4luP5lSm4MigJ9KUV39/th99Eh
9vO6JTDxEWC2+dS9J4ya5+H00oyFxCYdn1sE2DGfLfA4E0/IMueLomBgYVTowAOj
di341q9ONzScd8eEnfUXf0JV2psCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQKMg7J
pJnLGRMoXBiK/9TVu2A8iDAfBgNVHSMEGDAWgBTlED7RGeZHm7A2t8P0jcyeYsF0
JDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTUwODMvMEZBNDFDNkU4NjIyMTFFRjhGQ0JENzU4NzYyRTk1MUEvNVJBLTBS
bm1SNXV3TnJmRDlJM01ubUxCZENRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNVJBLTBSbm1SNXV3TnJmRDlJM01ubUxCZENRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTUwODMvMEZBNDFDNkU4NjIyMTFFRjhGQ0JENzU4NzYy
RTk1MUEvNzREQzFBRTJDNDY1MTFFRjg1QjUyMzdENzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbPXDANBgkqhkiG9w0BAQsF
AAOCAQEApKlveI6cbKvX8kw9owJ6L0fPEZA7TU8/9voG6j6HVUVQxOFsEK3JfgAs
TQxt7q2o+rQF1z0qtttSjHcLghPcYZttoKQSmcqhCdt8YMaSIeZ5be2ZXoSwJ0Pm
3HlpUX5HoExWPpfTWrZ6xB4yCCHo8JJrjPYs4hFpOjfgWio8FvpcDOkc77/eB9ZO
fAdNu4SDuWrO+x/6AfgVXECMbFK4OmhyzNm7Rp+zNhLL8+hmMdkpGSWcQzDWEG1i
dRTv5pyo8gn3OD8c491qAeJrYRDrAU1YgPeqBFH1hz/SHAK5HPDiTOGdXEVgiZZ8
c6zSNArTJa3xMNg6npMWEysxxahmig==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:18 2025 by rpki-client