Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/DDD5C20E089A11F09138F44B762E951A.roa
File: DDD5C20E089A11F09138F44B762E951A.roa (raw, json)
Hash identifier: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=
Subject key identifier: B4:31:C6:D5:DF:CA:7A:3D:0A:BA:DB:2E:97:85:3F:B7:FA:4A:D1:3F
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 03D4
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/DDD5C20E089A11F09138F44B762E951A.roa
Signing time: Mon 24 Mar 2025 10:29:29 +0000
ROA not before: Mon 24 Mar 2025 10:29:25 +0000
ROA not after: Thu 30 Mar 2028 10:29:25 +0000
asID: 29259
IP address blocks: 102.213.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF
Validity
Not Before: Mar 24 10:29:25 2025 GMT
Not After : Mar 30 10:29:25 2028 GMT
Subject: CN=67e13409-d8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:0c:46:dc:a3:9f:6f:cb:46:c4:0e:af:0c:
f2:f5:15:70:61:a9:dc:62:fc:e0:a7:e4:1d:fb:68:
b7:11:fb:d5:db:e7:5a:29:87:77:69:b4:13:de:9d:
07:01:75:25:f9:06:6c:2c:d5:91:e4:34:5e:88:eb:
4d:bd:32:8d:10:86:db:c0:ee:7d:60:ee:6a:d5:20:
b2:1f:b2:bf:0b:87:db:18:25:4e:df:29:8b:e3:10:
ea:89:80:0a:dc:ec:bc:6f:2a:66:74:21:3b:aa:d2:
5b:7c:8d:a1:a5:79:52:59:d0:f4:fa:42:25:04:39:
a1:ce:49:6e:9c:09:ae:ef:9d:cd:9e:c3:51:3e:05:
67:a2:9a:0a:b1:2e:51:f8:df:48:df:16:fc:74:c6:
4d:1b:9a:16:3b:c0:a5:f7:bc:f2:6a:4e:6b:ce:e4:
eb:d8:08:f2:6b:e0:85:bc:5f:c2:eb:7f:e3:9f:5d:
87:9c:c1:be:b4:c1:92:f8:07:60:38:a7:f7:6b:72:
5b:96:68:e7:97:aa:5f:42:9b:02:29:b6:11:05:80:
bb:cc:d2:bd:87:cd:7d:50:da:6a:cd:28:97:bf:d2:
7c:9d:9b:55:ca:3a:a5:19:42:27:c2:fe:8b:08:ac:
e1:41:99:3b:15:ad:90:b8:f8:55:ab:e7:e1:89:60:
24:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:31:C6:D5:DF:CA:7A:3D:0A:BA:DB:2E:97:85:3F:B7:FA:4A:D1:3F
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/DDD5C20E089A11F09138F44B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.196.0/24
Signature Algorithm: sha256WithRSAEncryption
18:50:db:7e:e6:b3:b2:20:28:ba:b6:00:ed:b3:74:88:41:7f:
87:38:eb:4f:0e:3d:d0:19:7e:f7:6a:18:50:cc:24:26:59:24:
d6:88:53:d2:23:a1:40:7e:a6:90:fc:7a:85:bb:b9:b4:b7:34:
15:2f:3f:9a:4c:34:a1:15:f3:33:b5:e4:bb:50:1e:cb:89:1a:
f0:96:c9:dc:7d:44:e2:30:bb:8b:97:a2:b5:fb:1d:0c:26:58:
ee:bf:dc:38:fe:e1:ab:42:14:68:c4:83:79:a0:0f:4c:31:5b:
c4:87:63:d9:7a:98:aa:a0:1d:94:7a:f4:85:d2:f0:db:48:53:
49:af:1f:b8:20:70:62:43:7e:e4:0a:77:2c:56:e2:fc:f2:c0:
88:f1:c0:60:a5:b4:e8:d5:ad:f2:0a:d0:c5:6d:53:88:73:29:
9b:84:52:dc:dd:c6:1b:1e:6c:af:f0:9f:f6:5f:0a:36:f3:d9:
e3:6d:7c:82:e7:fb:85:d3:58:d8:8c:c0:28:8a:0f:fa:8e:71:
62:a5:da:86:ac:92:53:74:94:4e:e9:de:53:e2:3d:a4:be:cc:
9d:6e:eb:f0:22:5d:b9:bf:26:65:39:3f:c7:b4:5b:75:09:12:
64:d9:4f:99:54:e4:0e:6b:0f:22:f5:7d:d8:01:88:e4:f5:99:
64:95:5f:25
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBRjExMC8GA1UEBRMoODRCQzIyQTE0QkI1Rjg4OUJDMTBBMjJDRjE3QzlD
MTlCNTE5QjI4ODAeFw0yNTAzMjQxMDI5MjVaFw0yODAzMzAxMDI5MjVaMBgxFjAU
BgNVBAMTDTY3ZTEzNDA5LWQ4ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDlsQxG3KOfb8tGxA6vDPL1FXBhqdxi/OCn5B37aLcR+9Xb51oph3dptBPe
nQcBdSX5Bmws1ZHkNF6I6029Mo0QhtvA7n1g7mrVILIfsr8Lh9sYJU7fKYvjEOqJ
gArc7LxvKmZ0ITuq0lt8jaGleVJZ0PT6QiUEOaHOSW6cCa7vnc2ew1E+BWeimgqx
LlH430jfFvx0xk0bmhY7wKX3vPJqTmvO5OvYCPJr4IW8X8Lrf+OfXYecwb60wZL4
B2A4p/drcluWaOeXql9CmwIpthEFgLvM0r2HzX1Q2mrNKJe/0nydm1XKOqUZQifC
/osIrOFBmTsVrZC4+FWr5+GJYCTNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtDHG
1d/Kej0Kutsul4U/t/pK0T8wHwYDVR0jBBgwFoAUhLwioUu1+Im8EKIs8XycGbUZ
sogwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYxMjIyNDY4L2hMd2lv
VXUxLUltOEVLSXM4WHljR2JVWnNvZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hMd2lvVXUxLUltOEVLSXM4WHljR2JVWnNvZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYx
MjIyNDY4L0RERDVDMjBFMDg5QTExRjA5MTM4RjQ0Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1cQwDQYJKoZIhvcNAQEL
BQADggEBABhQ237ms7IgKLq2AO2zdIhBf4c4608OPdAZfvdqGFDMJCZZJNaIU9Ij
oUB+ppD8eoW7ubS3NBUvP5pMNKEV8zO15LtQHsuJGvCWydx9ROIwu4uXorX7HQwm
WO6/3Dj+4atCFGjEg3mgD0wxW8SHY9l6mKqgHZR69IXS8NtIU0mvH7ggcGJDfuQK
dyxW4vzywIjxwGCltOjVrfIK0MVtU4hzKZuEUtzdxhsebK/wn/ZfCjbz2eNtfILn
+4XTWNiMwCiKD/qOcWKl2oasklN0lE7p3lPiPaS+zJ1u6/AiXbm/JmU5P8e0W3UJ
EmTZT5lU5A5rDyL1fdgBiOT1mWSVXyU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:38 2025 by rpki-client