Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1FBF/156436D23E7B11EF81CBC680762E951A/C1D70BE03F7211EFBD093693762E951A.roa
File: C1D70BE03F7211EFBD093693762E951A.roa (raw, json)
Hash identifier: PBzErzmKmN4b8J1jv4sQIAo17DchuSP/4RGtQrDKNHQ=
Subject key identifier: 62:7F:E8:A2:BC:C7:56:55:72:B7:AD:49:EA:A8:B9:D7:4F:25:FD:4C
Certificate issuer: /CN=F36C1FBFAF/serialNumber=7DEAB771D66B17B0EE872E91F18D3C5A16C22FB0
Certificate serial: 03
Authority key identifier: 7D:EA:B7:71:D6:6B:17:B0:EE:87:2E:91:F1:8D:3C:5A:16:C2:2F:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/feq3cdZrF7Duhy6R8Y08WhbCL7A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C1FBF/156436D23E7B11EF81CBC680762E951A/C1D70BE03F7211EFBD093693762E951A.roa
Signing time: Thu 11 Jul 2024 10:45:58 +0000
ROA not before: Thu 11 Jul 2024 10:45:55 +0000
ROA not after: Sun 31 Dec 2034 10:45:55 +0000
asID: 327693
IP address blocks: 102.213.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C1FBF/156436D23E7B11EF81CBC680762E951A/feq3cdZrF7Duhy6R8Y08WhbCL7A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C1FBF/156436D23E7B11EF81CBC680762E951A/feq3cdZrF7Duhy6R8Y08WhbCL7A.mft
rsync://rpki.afrinic.net/repository/afrinic/feq3cdZrF7Duhy6R8Y08WhbCL7A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C1FBFAF
Validity
Not Before: Jul 11 10:45:55 2024 GMT
Not After : Dec 31 10:45:55 2034 GMT
Subject: CN=668fb7e6-b08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:82:8b:a7:3b:10:79:99:18:80:7d:62:18:
ec:29:97:46:31:9e:a8:88:92:0a:77:0e:58:cc:41:
d5:1f:4c:1e:e1:ae:df:44:4c:19:cc:0a:da:b3:0d:
7d:bd:d1:9e:64:b5:99:16:ea:96:51:3c:85:dd:b1:
89:dd:82:52:f1:d7:26:1f:d0:1d:b7:ce:5d:69:20:
bb:9a:c2:f6:0d:93:f0:ed:d8:b8:3e:a5:89:a2:74:
3e:a8:6c:0b:2e:d6:18:fe:99:50:db:e0:fb:e3:a9:
21:56:20:ef:0c:36:13:ae:ff:6c:c6:9b:5d:ec:b5:
37:02:7e:1e:11:1a:c0:55:22:c6:61:46:55:1b:59:
2f:b7:78:84:12:7a:19:d2:10:32:75:7e:b8:00:bc:
14:1e:f3:d2:3f:9a:5e:c4:b2:e4:0d:2a:c2:04:da:
f9:62:75:ac:57:dd:89:39:d2:3f:fe:f8:20:81:58:
dc:ec:b0:75:98:26:9e:71:1b:a2:51:8f:fc:97:2d:
97:50:18:6e:a8:af:72:e3:14:16:15:ee:19:20:3a:
07:cf:fb:5e:31:d2:cb:7c:fa:a9:6c:d6:9f:18:34:
d7:ce:4b:ea:c0:27:d2:07:77:63:bb:49:38:9f:fa:
cf:4c:c3:57:0e:1b:c0:21:85:e5:45:64:3a:2e:18:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7F:E8:A2:BC:C7:56:55:72:B7:AD:49:EA:A8:B9:D7:4F:25:FD:4C
X509v3 Authority Key Identifier:
keyid:7D:EA:B7:71:D6:6B:17:B0:EE:87:2E:91:F1:8D:3C:5A:16:C2:2F:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1FBF/156436D23E7B11EF81CBC680762E951A/feq3cdZrF7Duhy6R8Y08WhbCL7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/feq3cdZrF7Duhy6R8Y08WhbCL7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1FBF/156436D23E7B11EF81CBC680762E951A/C1D70BE03F7211EFBD093693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.164.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:ee:8a:c3:5a:df:e0:1e:1c:29:40:25:84:6f:f5:54:d9:4d:
22:a7:30:51:d3:a2:4d:93:dc:2f:e8:28:aa:54:f4:47:fd:d0:
8a:9d:6b:4b:d2:37:84:33:93:19:86:31:98:57:28:6f:4d:c1:
be:bf:65:c1:a6:d0:a9:e4:de:bc:ae:0e:fc:cc:57:9f:9f:f7:
1f:59:a8:6c:af:49:e5:8f:95:eb:df:e3:f2:e3:af:c8:78:e0:
33:20:29:21:02:77:40:0c:5e:fa:df:00:f3:fa:8f:d4:24:5f:
51:b9:4a:e1:ee:cb:7e:1c:53:88:a2:d1:2d:58:d8:e5:9c:be:
62:50:97:04:a3:a7:2a:43:46:a9:7c:52:09:27:bf:2f:fc:69:
ca:32:cc:c1:fd:f8:7d:98:8e:ca:60:3b:4e:0d:b5:fd:8e:6b:
8d:7a:02:3f:7a:33:cd:0b:ec:0c:58:25:2c:7b:36:bb:fc:98:
1c:62:c8:f1:d4:4b:f1:42:c4:61:1a:3d:0d:c0:17:f6:b3:1e:
44:91:d5:74:e6:89:25:08:dc:55:96:f7:33:15:ea:5c:89:25:
8d:63:a1:65:10:23:14:3e:e5:79:8d:22:43:c1:84:6a:15:e7:
cf:5b:1d:55:3e:4a:8d:9e:f8:e6:2d:e6:83:90:90:1e:dd:96:
5e:76:ff:e7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MUZCRkFGMTEwLwYDVQQFEyg3REVBQjc3MUQ2NkIxN0IwRUU4NzJFOTFGMThEM0M1
QTE2QzIyRkIwMB4XDTI0MDcxMTEwNDU1NVoXDTM0MTIzMTEwNDU1NVowGDEWMBQG
A1UEAxMNNjY4ZmI3ZTYtYjA4YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALWngounOxB5mRiAfWIY7CmXRjGeqIiSCncOWMxB1R9MHuGu30RMGcwK2rMN
fb3RnmS1mRbqllE8hd2xid2CUvHXJh/QHbfOXWkgu5rC9g2T8O3YuD6liaJ0Pqhs
Cy7WGP6ZUNvg++OpIVYg7ww2E67/bMabXey1NwJ+HhEawFUixmFGVRtZL7d4hBJ6
GdIQMnV+uAC8FB7z0j+aXsSy5A0qwgTa+WJ1rFfdiTnSP/74IIFY3OywdZgmnnEb
olGP/Jctl1AYbqivcuMUFhXuGSA6B8/7XjHSy3z6qWzWnxg0185L6sAn0gd3Y7tJ
OJ/6z0zDVw4bwCGF5UVkOi4YoqMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRif+ii
vMdWVXK3rUnqqLnXTyX9TDAfBgNVHSMEGDAWgBR96rdx1msXsO6HLpHxjTxaFsIv
sDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzFGQkYvMTU2NDM2RDIzRTdCMTFFRjgxQ0JDNjgwNzYyRTk1MUEvZmVxM2Nk
WnJGN0R1aHk2UjhZMDhXaGJDTDdBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZmVxM2NkWnJGN0R1aHk2UjhZMDhXaGJDTDdBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzFGQkYvMTU2NDM2RDIzRTdCMTFFRjgxQ0JDNjgwNzYy
RTk1MUEvQzFENzBCRTAzRjcyMTFFRkJEMDkzNjkzNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbVpDANBgkqhkiG9w0BAQsF
AAOCAQEAx+6Kw1rf4B4cKUAlhG/1VNlNIqcwUdOiTZPcL+goqlT0R/3Qip1rS9I3
hDOTGYYxmFcob03Bvr9lwabQqeTevK4O/MxXn5/3H1mobK9J5Y+V69/j8uOvyHjg
MyApIQJ3QAxe+t8A8/qP1CRfUblK4e7LfhxTiKLRLVjY5Zy+YlCXBKOnKkNGqXxS
CSe/L/xpyjLMwf34fZiOymA7Tg21/Y5rjXoCP3ozzQvsDFglLHs2u/yYHGLI8dRL
8ULEYRo9DcAX9rMeRJHVdOaJJQjcVZb3MxXqXIkljWOhZRAjFD7leY0iQ8GEahXn
z1sdVT5KjZ745i3mg5CQHt2WXnb/5w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:09 2025 by rpki-client