Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/C74D0818056F11F0A8703576762E951A.roa
File: C74D0818056F11F0A8703576762E951A.roa (raw, json)
Hash identifier: udsd+dhadKE8n2Lv6gYU8JwkzbNqscf8Ts5PZqc3eM4=
Subject key identifier: 08:D1:F2:5E:8D:C5:C9:15:ED:28:29:8A:68:AE:AB:0D:D7:38:9C:2E
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0571
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/C74D0818056F11F0A8703576762E951A.roa
Signing time: Thu 20 Mar 2025 09:43:29 +0000
ROA not before: Thu 20 Mar 2025 09:43:25 +0000
ROA not after: Tue 20 Mar 2035 09:43:25 +0000
asID: 37725
IP address blocks: 102.218.128.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF
Validity
Not Before: Mar 20 09:43:25 2025 GMT
Not After : Mar 20 09:43:25 2035 GMT
Subject: CN=67dbe341-2f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:fc:e3:58:32:93:31:6a:b4:52:b6:89:35:
0f:d4:7f:32:08:c4:33:0c:83:7b:5a:82:93:2b:c2:
9d:a0:67:17:76:49:b8:46:7e:5c:4a:5c:97:0a:30:
60:ef:f9:82:d2:5d:5d:29:dc:2e:1d:f8:f2:e4:b8:
f3:fd:58:64:aa:51:01:41:69:ad:23:68:87:0c:6f:
d2:2b:a2:65:54:40:41:46:e3:06:90:58:2b:5f:e9:
c9:5a:ef:7e:e9:19:5c:29:73:e8:8e:d1:3c:4c:c1:
95:ba:c1:8c:09:9a:3f:e1:16:0f:17:59:17:4d:c7:
ad:1d:ff:61:83:0c:15:a3:3a:50:8c:5b:ad:cb:c9:
13:0c:44:53:d1:ec:07:ab:79:e1:00:1e:bb:36:b0:
03:4b:b4:9b:5d:23:54:66:8d:0e:fb:92:87:40:ca:
26:97:fd:fb:f0:3d:0a:2e:79:a5:dc:7f:c0:ec:d7:
db:2b:06:4e:64:7c:8a:f3:c7:2e:bc:31:fa:7d:5b:
59:d3:b0:2a:19:ed:10:94:e9:59:fa:68:e0:96:c5:
30:6a:49:73:a4:9e:f0:43:08:00:e4:54:22:b9:ee:
cf:ae:08:aa:5c:88:07:52:4d:e9:4b:8a:97:e7:a3:
85:1b:21:6e:3a:06:86:f5:d2:a6:5d:46:d0:cc:03:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:F2:5E:8D:C5:C9:15:ED:28:29:8A:68:AE:AB:0D:D7:38:9C:2E
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/C74D0818056F11F0A8703576762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
Signature Algorithm: sha256WithRSAEncryption
52:84:64:58:b0:77:93:3c:d1:6a:79:89:7a:75:36:35:4e:c7:
ed:93:d1:64:14:34:64:3a:47:61:4e:50:3c:89:7a:44:01:5c:
d5:47:a4:87:cd:27:0c:45:ed:65:8f:6d:e5:2c:3d:8d:02:43:
6f:1e:ae:08:4f:1e:52:45:11:c3:2a:83:e9:99:19:a7:d1:49:
3d:da:be:fa:5e:c4:77:b4:8f:6c:43:13:1d:8a:61:6f:6d:91:
0c:d9:75:c4:9f:43:9d:25:98:cc:fd:84:b3:38:cb:1e:bf:70:
fc:60:a8:34:32:52:9a:f7:6a:8f:28:34:54:30:fd:5d:2f:c6:
2b:7b:5b:f9:c4:d3:82:f6:da:76:8b:f5:90:59:6f:06:26:26:
6b:50:3c:9c:5a:1c:bb:82:a6:1b:d8:c8:bf:d1:08:8a:d7:93:
20:88:99:d8:64:84:00:20:12:5d:d7:20:ed:ed:1a:b6:e0:e3:
83:7e:3d:33:35:86:1b:da:b6:e9:f4:83:96:cb:30:b4:cf:2a:
df:af:51:e9:88:c7:74:12:2a:b5:41:a7:39:93:95:2e:e5:40:
ec:70:b3:f9:77:4b:4d:bf:71:19:0e:28:28:61:26:96:a6:82:
31:d9:cc:be:a9:7d:a9:17:01:cf:37:64:6b:f9:d2:40:87:37:
7c:5e:80:76
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNTAzMjAwOTQzMjVaFw0zNTAzMjAwOTQzMjVaMBgxFjAU
BgNVBAMTDTY3ZGJlMzQxLTJmODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQ9vzjWDKTMWq0UraJNQ/UfzIIxDMMg3tagpMrwp2gZxd2SbhGflxKXJcK
MGDv+YLSXV0p3C4d+PLkuPP9WGSqUQFBaa0jaIcMb9IromVUQEFG4waQWCtf6cla
737pGVwpc+iO0TxMwZW6wYwJmj/hFg8XWRdNx60d/2GDDBWjOlCMW63LyRMMRFPR
7AereeEAHrs2sANLtJtdI1RmjQ77kodAyiaX/fvwPQoueaXcf8Ds19srBk5kfIrz
xy68Mfp9W1nTsCoZ7RCU6Vn6aOCWxTBqSXOknvBDCADkVCK57s+uCKpciAdSTelL
ipfno4UbIW46Bob10qZdRtDMAxwPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUCNHy
Xo3FyRXtKCmKaK6rDdc4nC4wHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFL0M3NEQwODE4MDU2RjExRjBBODcwMzU3Njc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2oAwDQYJKoZIhvcNAQEL
BQADggEBAFKEZFiwd5M80Wp5iXp1NjVOx+2T0WQUNGQ6R2FOUDyJekQBXNVHpIfN
JwxF7WWPbeUsPY0CQ28erghPHlJFEcMqg+mZGafRST3avvpexHe0j2xDEx2KYW9t
kQzZdcSfQ50lmMz9hLM4yx6/cPxgqDQyUpr3ao8oNFQw/V0vxit7W/nE04L22naL
9ZBZbwYmJmtQPJxaHLuCphvYyL/RCIrXkyCImdhkhAAgEl3XIO3tGrbg44N+PTM1
hhvatun0g5bLMLTPKt+vUemIx3QSKrVBpzmTlS7lQOxws/l3S02/cRkOKChhJpam
gjHZzL6pfakXAc83ZGv50kCHN3xegHY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:54 2025 by rpki-client