Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/84D63AD4FCAC11EFBDC66892762E951A.roa
File: 84D63AD4FCAC11EFBDC66892762E951A.roa (raw, json)
Hash identifier: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=
Subject key identifier: 0B:3E:9B:80:60:F3:67:68:BB:49:BB:25:6E:AE:5A:21:30:7F:C6:F5
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 043C
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/84D63AD4FCAC11EFBDC66892762E951A.roa
Signing time: Sun 09 Mar 2025 06:05:37 +0000
ROA not before: Sun 09 Mar 2025 06:05:32 +0000
ROA not after: Fri 30 Mar 2035 06:05:32 +0000
asID: 33785
IP address blocks: 41.77.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF
Validity
Not Before: Mar 9 06:05:32 2025 GMT
Not After : Mar 30 06:05:32 2035 GMT
Subject: CN=67cd2fb0-2595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:bb:fc:32:e7:16:7f:af:db:ab:7e:1a:59:
a8:b1:3b:05:55:69:2e:9a:76:6a:d7:2b:4e:94:9d:
52:6b:a4:bc:ce:7d:cc:f5:40:5b:a1:86:3c:8e:d1:
25:69:93:07:da:b8:1b:0c:1f:89:ae:40:4c:48:57:
41:96:51:d3:ae:81:17:1e:bc:87:33:d8:0c:23:36:
f4:c7:49:43:f8:d0:c5:cd:47:50:3b:29:8e:81:b3:
d4:39:71:6a:8f:3f:86:33:54:8d:6e:45:f0:bd:d8:
3a:db:ba:40:c8:4b:e1:0c:12:05:68:e5:83:1e:a4:
eb:7b:57:ec:cb:c5:01:7a:7c:ef:1f:c7:27:a7:a9:
41:44:b7:be:1f:39:6f:58:59:7b:29:79:5b:14:d7:
4b:84:39:0e:32:4f:5e:ba:1e:fd:7f:3f:ec:bf:cf:
20:b9:86:87:d8:5a:05:0d:fb:e9:55:39:df:b9:18:
c7:c0:85:06:2d:24:c1:12:14:b0:63:e0:ad:96:2c:
d8:af:26:85:6c:b9:e6:56:4c:de:24:07:50:51:fb:
b6:79:ab:73:d3:75:2a:bb:7e:ad:f8:75:1e:ff:38:
fb:1c:1c:b3:d6:53:1a:ac:3f:dd:b4:8a:52:a9:2c:
5f:51:2d:a5:42:a4:ae:ec:fb:19:d0:7f:4b:bb:d0:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3E:9B:80:60:F3:67:68:BB:49:BB:25:6E:AE:5A:21:30:7F:C6:F5
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/84D63AD4FCAC11EFBDC66892762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.141.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b5:b4:8f:cf:ee:00:cc:b0:90:2b:c3:eb:8c:3c:ff:41:29:
93:6d:a2:09:28:74:49:5e:82:11:d4:d4:aa:13:5c:5c:20:29:
8e:a0:c8:c9:ed:12:1c:9b:92:45:c6:d5:8d:6d:1d:09:97:07:
f2:91:3a:2a:b6:c5:1d:90:d7:cb:54:6f:61:cf:4e:b4:81:b7:
53:c9:12:0e:09:3a:12:33:ff:ad:0c:6b:12:63:56:ef:e0:a8:
f0:57:35:1b:86:5d:63:68:04:e6:b1:44:0d:4e:4a:7c:2e:69:
44:66:20:99:84:39:47:f1:8e:09:e0:d4:e3:d4:76:6d:d4:79:
c1:f2:1c:4a:92:eb:b1:fc:02:e3:57:cc:71:f2:d2:26:3e:4b:
c0:fb:41:4e:3b:4e:5e:fa:e5:e6:55:62:2e:ea:ef:49:b2:31:
c2:43:d4:c4:de:f2:f7:a6:8d:38:93:0d:3e:26:f3:8d:47:10:
2b:7b:86:ab:85:06:47:5f:81:61:78:30:11:e4:b8:24:b7:6c:
81:9f:f2:f4:5b:62:63:f1:cb:cb:e5:26:d5:73:19:0c:81:41:
e5:1d:26:b3:ab:01:4a:fa:0d:38:b4:d7:e9:22:79:01:cb:1b:
ce:3b:7b:aa:12:28:30:9b:3c:0b:ba:88:e2:57:4f:21:cf:53:
04:27:60:10
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkM4MEFBRjExMC8GA1UEBRMoOEM4RjhDRTJBRDU1QjkzNjZCRUM2RURGNDkyQ0Q5
QzE0OThFMDY2NDAeFw0yNTAzMDkwNjA1MzJaFw0zNTAzMzAwNjA1MzJaMBgxFjAU
BgNVBAMTDTY3Y2QyZmIwLTI1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgkrv8MucWf6/bq34aWaixOwVVaS6admrXK06UnVJrpLzOfcz1QFuhhjyO
0SVpkwfauBsMH4muQExIV0GWUdOugRcevIcz2AwjNvTHSUP40MXNR1A7KY6Bs9Q5
cWqPP4YzVI1uRfC92DrbukDIS+EMEgVo5YMepOt7V+zLxQF6fO8fxyenqUFEt74f
OW9YWXspeVsU10uEOQ4yT166Hv1/P+y/zyC5hofYWgUN++lVOd+5GMfAhQYtJMES
FLBj4K2WLNivJoVsueZWTN4kB1BR+7Z5q3PTdSq7fq34dR7/OPscHLPWUxqsP920
ilKpLF9RLaVCpK7s+xnQf0u70OVRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUCz6b
gGDzZ2i7Sbslbq5aITB/xvUwHwYDVR0jBBgwFoAUjI+M4q1VuTZr7G7fSSzZwUmO
BmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYxMjIyNDY4L2pJLU00
cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pJLU00cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYx
MjIyNDY4Lzg0RDYzQUQ0RkNBQzExRUZCREM2Njg5Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApTY0wDQYJKoZIhvcNAQEL
BQADggEBABa1tI/P7gDMsJArw+uMPP9BKZNtogkodEleghHU1KoTXFwgKY6gyMnt
EhybkkXG1Y1tHQmXB/KROiq2xR2Q18tUb2HPTrSBt1PJEg4JOhIz/60MaxJjVu/g
qPBXNRuGXWNoBOaxRA1OSnwuaURmIJmEOUfxjgng1OPUdm3UecHyHEqS67H8AuNX
zHHy0iY+S8D7QU47Tl765eZVYi7q70myMcJD1MTe8vemjTiTDT4m841HECt7hquF
BkdfgWF4MBHkuCS3bIGf8vRbYmPxy8vlJtVzGQyBQeUdJrOrAUr6DTi01+kieQHL
G847e6oSKDCbPAu6iOJXTyHPUwQnYBA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:58 2025 by rpki-client