Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/14D0DD48FCAC11EF8F606291762E951A.roa
File: 14D0DD48FCAC11EF8F606291762E951A.roa (raw, json)
Hash identifier: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=
Subject key identifier: 5D:6A:DE:53:9B:69:E1:55:32:E0:6B:39:53:36:16:C2:BA:A0:B2:90
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 0437
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/14D0DD48FCAC11EF8F606291762E951A.roa
Signing time: Sun 09 Mar 2025 06:02:28 +0000
ROA not before: Sun 09 Mar 2025 06:02:25 +0000
ROA not after: Sat 31 Mar 2035 06:02:25 +0000
asID: 33785
IP address blocks: 41.77.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 02:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF
Validity
Not Before: Mar 9 06:02:25 2025 GMT
Not After : Mar 31 06:02:25 2035 GMT
Subject: CN=67cd2ef4-8386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:c0:22:1d:a0:5f:4b:28:a4:2f:0e:3d:3b:
7c:36:48:4a:9e:14:7e:69:f3:31:43:82:49:37:b8:
03:9e:2e:c8:ec:a5:5f:28:58:88:b8:6e:78:ff:4d:
1d:4b:ef:50:30:7e:61:c5:b0:69:11:ab:ff:3f:75:
3f:57:da:05:40:ae:61:06:2d:44:e8:69:ef:1d:c1:
3d:10:6b:58:88:b4:e5:f4:48:53:cb:fe:5f:49:9d:
a4:33:a3:fd:3b:64:3d:8f:59:59:96:be:5f:c3:d9:
48:49:4b:4e:ec:5d:15:15:09:a3:b9:ef:61:bf:c4:
45:cd:7d:75:83:f2:e4:73:25:05:6c:92:22:45:4a:
98:19:5f:d4:6e:44:01:17:66:5a:90:44:c8:f2:e0:
40:bd:92:8e:4c:de:78:94:e7:a4:d3:c7:74:2e:f9:
e3:7d:88:1a:0b:87:a3:22:21:7e:48:19:7f:94:b9:
78:21:fb:7c:5e:eb:1b:57:6c:3f:f7:56:82:72:ab:
ef:33:92:22:71:1a:db:2b:6f:ca:e3:e7:75:53:d1:
2f:cb:6b:d5:cc:7d:4b:0f:99:97:58:09:9a:5c:21:
ba:46:ab:8a:e5:06:09:8c:c9:a3:b8:db:d9:88:e0:
f6:5a:78:a4:1f:6d:a9:dc:3d:88:5b:ee:09:79:19:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6A:DE:53:9B:69:E1:55:32:E0:6B:39:53:36:16:C2:BA:A0:B2:90
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/14D0DD48FCAC11EF8F606291762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.140.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4f:1b:bc:74:04:dc:1b:c3:69:66:06:6f:e2:f0:9d:6d:a7:
0a:50:4f:c7:6a:ad:01:fa:5b:b7:80:48:ed:b5:08:52:ce:76:
f1:75:a1:c9:9b:b6:2a:40:74:b2:c1:69:40:b2:58:36:b2:db:
47:96:cb:db:8f:b9:6b:0a:8a:97:45:ae:3e:9a:87:0d:b7:f3:
9d:39:16:40:b6:d9:fc:86:ac:92:72:f6:e8:54:92:8a:be:9d:
a5:44:6c:9a:f5:7a:cb:c4:94:85:08:3f:01:17:eb:2c:b1:f5:
a3:5f:74:b0:4f:d7:c9:19:c0:00:ab:f0:ba:ea:a9:69:ce:cb:
f7:ff:b1:ca:81:d3:ba:85:d5:25:20:e8:98:ac:57:ff:9f:ff:
06:d9:5f:10:55:40:3c:c3:a1:41:09:f8:cd:c8:ce:07:16:4b:
cc:0c:68:c8:88:f9:a8:e7:fe:ca:57:d3:4d:73:25:2c:dd:b5:
10:10:4d:7a:9c:b5:b5:89:c2:12:04:d5:b7:49:b9:5f:d2:dc:
67:d3:f0:9a:4d:7c:7a:86:ad:7f:7f:19:80:ac:36:06:c5:ba:
d8:6a:85:d8:93:3b:01:b6:ee:e0:c1:bc:fb:78:c7:2f:c0:b1:
37:39:47:9b:f3:ab:38:7c:0b:67:d9:fd:6a:88:f3:0a:4d:c6:
6c:f3:28:c3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkM4MEFBRjExMC8GA1UEBRMoOEM4RjhDRTJBRDU1QjkzNjZCRUM2RURGNDkyQ0Q5
QzE0OThFMDY2NDAeFw0yNTAzMDkwNjAyMjVaFw0zNTAzMzEwNjAyMjVaMBgxFjAU
BgNVBAMTDTY3Y2QyZWY0LTgzODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCAsAiHaBfSyikLw49O3w2SEqeFH5p8zFDgkk3uAOeLsjspV8oWIi4bnj/
TR1L71AwfmHFsGkRq/8/dT9X2gVArmEGLUToae8dwT0Qa1iItOX0SFPL/l9JnaQz
o/07ZD2PWVmWvl/D2UhJS07sXRUVCaO572G/xEXNfXWD8uRzJQVskiJFSpgZX9Ru
RAEXZlqQRMjy4EC9ko5M3niU56TTx3Qu+eN9iBoLh6MiIX5IGX+UuXgh+3xe6xtX
bD/3VoJyq+8zkiJxGtsrb8rj53VT0S/La9XMfUsPmZdYCZpcIbpGq4rlBgmMyaO4
29mI4PZaeKQfbancPYhb7gl5GRSvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXWre
U5tp4VUy4Gs5UzYWwrqgspAwHwYDVR0jBBgwFoAUjI+M4q1VuTZr7G7fSSzZwUmO
BmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYxMjIyNDY4L2pJLU00
cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pJLU00cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYx
MjIyNDY4LzE0RDBERDQ4RkNBQzExRUY4RjYwNjI5MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApTYwwDQYJKoZIhvcNAQEL
BQADggEBAGdPG7x0BNwbw2lmBm/i8J1tpwpQT8dqrQH6W7eASO21CFLOdvF1ocmb
tipAdLLBaUCyWDay20eWy9uPuWsKipdFrj6ahw238505FkC22fyGrJJy9uhUkoq+
naVEbJr1esvElIUIPwEX6yyx9aNfdLBP18kZwACr8LrqqWnOy/f/scqB07qF1SUg
6JisV/+f/wbZXxBVQDzDoUEJ+M3IzgcWS8wMaMiI+ajn/spX001zJSzdtRAQTXqc
tbWJwhIE1bdJuV/S3GfT8JpNfHqGrX9/GYCsNgbFuthqhdiTOwG27uDBvPt4xy/A
sTc5R5vzqzh8C2fZ/WqI8wpNxmzzKMM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:23 2025 by rpki-client