Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3A984160EF7811EFBAE0E8A5762E951A.roa
File: 3A984160EF7811EFBAE0E8A5762E951A.roa (raw, json)
Hash identifier: wHn4dF6I7Dyf+VZOr2mxt31ut8HGDMrGuegRJRtPs3Q=
Subject key identifier: AD:0D:5F:A6:03:1E:E0:4F:76:66:5D:65:8C:4F:56:D3:39:24:93:93
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 0620
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3A984160EF7811EFBAE0E8A5762E951A.roa
Signing time: Thu 20 Feb 2025 10:48:33 +0000
ROA not before: Thu 20 Feb 2025 10:48:29 +0000
ROA not after: Tue 20 Feb 2035 10:48:29 +0000
asID: 139989
IP address blocks: 41.216.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF
Validity
Not Before: Feb 20 10:48:29 2025 GMT
Not After : Feb 20 10:48:29 2035 GMT
Subject: CN=67b70881-4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:98:bd:95:55:4a:fb:e0:47:8d:f2:0d:1b:
91:57:51:f5:cb:eb:6f:be:56:16:62:f9:3d:f1:4f:
bf:a3:15:36:9e:15:79:02:e4:d9:7d:64:f3:bb:53:
b2:9c:26:34:15:69:58:ec:3a:ae:97:e1:de:57:48:
04:11:f1:d5:16:13:39:d8:95:9e:6b:83:14:23:b3:
d7:63:b7:10:03:e4:67:7e:41:ac:8f:e1:bc:e4:e2:
6d:06:58:38:75:cb:52:0e:f8:50:43:27:31:10:64:
4b:95:71:1a:aa:2f:c8:66:53:48:95:18:d1:78:5a:
e4:96:3d:4c:b2:e5:12:96:ad:ff:35:58:2e:9e:b9:
0a:1f:ba:87:5a:e5:42:55:61:1b:58:38:55:e5:c0:
fe:4b:fc:25:d1:0e:ba:66:34:3b:8c:2b:eb:29:2f:
2e:15:3e:ef:64:2f:a7:a7:9c:11:d0:18:26:61:15:
d5:b3:8b:ad:7e:43:c9:8d:73:e7:ad:44:b7:1c:a2:
c9:72:76:21:33:75:8b:93:ae:87:dd:a7:07:e0:c9:
0f:80:03:a1:f9:bb:d1:4f:f3:ef:b8:61:25:90:4d:
27:3c:39:c7:d6:35:f4:3e:be:01:33:37:10:04:fb:
53:17:16:9b:6d:72:48:99:e3:fa:b2:36:38:07:f3:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:5F:A6:03:1E:E0:4F:76:66:5D:65:8C:4F:56:D3:39:24:93:93
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3A984160EF7811EFBAE0E8A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fa:df:69:49:79:de:ef:ce:57:5d:18:d5:bc:e4:51:3b:d8:
af:4c:43:8b:c3:20:71:b2:a3:16:a8:d6:37:35:e0:a4:de:93:
6a:87:18:fb:a0:24:b8:c8:2e:42:7b:05:8c:65:42:6a:23:a4:
a2:75:e8:a1:29:86:7a:c5:de:78:e9:b2:53:ba:4d:2f:15:c5:
66:74:d4:64:26:81:be:a7:0f:ac:d3:a1:33:cd:ba:53:bf:5b:
14:7a:80:ea:0b:c0:1e:3e:31:fa:ca:fc:ac:99:70:7a:a7:4b:
ca:2d:79:48:55:9a:4b:1b:23:4f:71:f6:ea:3f:85:be:dd:3e:
fb:28:5c:f2:18:60:bb:0a:99:ae:70:4c:84:59:bd:fc:5f:e3:
70:83:b5:a7:71:56:43:66:46:5b:59:6c:6f:7d:59:7e:f4:24:
ad:f1:b7:e3:98:b8:98:97:23:2f:5c:cd:8f:43:f8:a6:0c:05:
a1:b3:90:e1:f1:f3:17:65:e2:cd:6e:39:5d:35:88:b4:bc:7b:
e2:01:f5:84:bf:02:dd:34:75:a4:e0:46:eb:74:43:20:2b:8a:
75:af:46:ca:23:e8:12:21:58:43:e1:a2:88:79:e6:13:3d:88:
28:2c:23:01:66:e3:c9:33:42:6a:f1:59:55:61:ff:37:fe:1c:
e0:cb:a0:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNTAyMjAxMDQ4MjlaFw0zNTAyMjAxMDQ4MjlaMBgxFjAU
BgNVBAMTDTY3YjcwODgxLTRiNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDj9pi9lVVK++BHjfING5FXUfXL62++VhZi+T3xT7+jFTaeFXkC5Nl9ZPO7
U7KcJjQVaVjsOq6X4d5XSAQR8dUWEznYlZ5rgxQjs9djtxAD5Gd+QayP4bzk4m0G
WDh1y1IO+FBDJzEQZEuVcRqqL8hmU0iVGNF4WuSWPUyy5RKWrf81WC6euQofuoda
5UJVYRtYOFXlwP5L/CXRDrpmNDuMK+spLy4VPu9kL6ennBHQGCZhFdWzi61+Q8mN
c+etRLccoslydiEzdYuTrofdpwfgyQ+AA6H5u9FP8++4YSWQTSc8OcfWNfQ+vgEz
NxAE+1MXFpttckiZ4/qyNjgH84M7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrQ1f
pgMe4E92Zl1ljE9W0zkkk5MwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4LzNBOTg0MTYwRUY3ODExRUZCQUUwRThBNTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LQwDQYJKoZIhvcNAQEL
BQADggEBAAv632lJed7vzlddGNW85FE72K9MQ4vDIHGyoxao1jc14KTek2qHGPug
JLjILkJ7BYxlQmojpKJ16KEphnrF3njpslO6TS8VxWZ01GQmgb6nD6zToTPNulO/
WxR6gOoLwB4+MfrK/KyZcHqnS8oteUhVmksbI09x9uo/hb7dPvsoXPIYYLsKma5w
TIRZvfxf43CDtadxVkNmRltZbG99WX70JK3xt+OYuJiXIy9czY9D+KYMBaGzkOHx
8xdl4s1uOV01iLS8e+IB9YS/At00daTgRut0QyArinWvRsoj6BIhWEPhooh55hM9
iCgsIwFm48kzQmrxWVVh/zf+HODLoDk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:49:41 2025 by rpki-client