Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2345C1ECF5B111EF97A2A7BA762E951A.roa
File: 2345C1ECF5B111EF97A2A7BA762E951A.roa (raw, json)
Hash identifier: /NrGnE5GC/J0kET3GuNQO2y6RqvX9ABS4PQu2Cv5Xw8=
Subject key identifier: 0B:AC:55:3E:DC:CD:B8:06:29:9B:1D:7E:12:B5:7E:F4:3C:2E:FC:1A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13F5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2345C1ECF5B111EF97A2A7BA762E951A.roa
Signing time: Fri 28 Feb 2025 08:51:02 +0000
ROA not before: Fri 28 Feb 2025 08:50:58 +0000
ROA not after: Sun 28 Feb 2027 08:50:58 +0000
asID: 212238
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5109 (0x13f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 28 08:50:58 2025 GMT
Not After : Feb 28 08:50:58 2027 GMT
Subject: CN=67c178f6-e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:76:39:5a:49:74:55:20:7f:66:a4:19:a9:
0a:7c:56:59:2c:cc:93:9c:c9:ad:8c:71:23:d5:68:
b3:39:09:77:2f:ee:ca:03:07:31:38:7d:ae:e2:55:
6c:2c:d7:83:b4:ad:61:fd:3d:f4:2e:21:39:b5:d5:
a5:e0:7b:4f:63:03:b2:e0:58:d6:78:95:01:a7:f1:
86:b4:c6:39:11:48:ee:f0:a7:a5:35:f4:d7:7c:cc:
ff:6e:31:2a:4d:6f:cc:a2:b2:81:de:96:60:84:a7:
e1:c4:d1:97:6c:2d:8e:cf:31:53:49:a2:e9:ba:51:
1e:c8:5f:97:05:c6:6a:b0:ef:23:69:a7:6d:fd:db:
2f:ae:e2:df:92:37:a1:81:cc:6b:99:98:e4:ed:e3:
c8:3b:a4:15:50:e5:4c:eb:48:19:67:8d:3e:a8:14:
dc:bf:32:6f:c1:e9:fb:f0:d7:db:d2:36:5d:03:a9:
f8:57:55:cc:4a:29:f5:83:ff:92:52:35:bc:f5:9f:
6d:ef:42:29:b0:00:95:12:f8:90:59:7f:b9:89:42:
23:81:a2:2c:22:67:7a:72:60:84:61:e3:9e:da:72:
49:5b:77:30:9b:d4:7f:81:58:60:84:18:05:cb:05:
70:6f:92:e5:4d:ee:71:a5:09:9b:91:d6:93:99:ea:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:55:3E:DC:CD:B8:06:29:9B:1D:7E:12:B5:7E:F4:3C:2E:FC:1A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2345C1ECF5B111EF97A2A7BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:09:e1:42:9d:c4:a2:91:54:f6:db:4d:ff:b5:cf:0e:0a:19:
21:f4:d6:a1:97:6f:99:16:cc:c5:a0:89:09:6b:84:46:31:be:
02:ce:a5:32:84:00:ce:3b:34:17:84:3b:e1:70:be:1f:6a:ba:
9b:17:ac:11:d3:f4:bc:24:88:08:c4:e4:22:6d:e0:9d:2b:f3:
f3:36:9a:90:e9:7f:7a:d7:81:4d:0d:99:f0:97:39:f8:d0:06:
c4:0b:2a:6a:dd:35:b9:f3:59:26:06:17:f7:ff:6f:b5:29:5f:
e1:00:ae:df:3c:8b:d4:71:b0:6e:56:1e:d7:6f:08:d5:6b:86:
46:1e:50:56:86:b8:81:a5:31:60:6a:ec:d4:1b:6a:95:a1:99:
2b:ad:20:2d:df:8b:42:da:e4:ff:ad:c8:3c:40:ec:fa:66:1a:
d8:2c:23:3e:ea:27:8b:92:eb:65:2b:56:55:91:ea:10:d7:d2:
a4:f6:74:d3:5f:11:2e:8f:37:84:42:ac:fd:ab:1c:9b:15:fa:
14:b0:d5:10:b9:9d:61:41:82:52:78:a0:61:9f:7e:9c:47:04:
ee:94:65:c5:de:c7:92:24:fb:4d:e7:dd:1d:bd:ae:af:a0:35:
61:c5:49:a5:06:e3:a1:ba:3b:5c:b7:8a:b8:7c:f7:f2:c9:74:
9d:a5:35:6b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE/UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTAyMjgwODUwNThaFw0yNzAyMjgwODUwNThaMBgxFjAU
BgNVBAMTDTY3YzE3OGY2LWU1N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/AnY5Wkl0VSB/ZqQZqQp8VlkszJOcya2McSPVaLM5CXcv7soDBzE4fa7i
VWws14O0rWH9PfQuITm11aXge09jA7LgWNZ4lQGn8Ya0xjkRSO7wp6U19Nd8zP9u
MSpNb8yisoHelmCEp+HE0ZdsLY7PMVNJoum6UR7IX5cFxmqw7yNpp2392y+u4t+S
N6GBzGuZmOTt48g7pBVQ5UzrSBlnjT6oFNy/Mm/B6fvw19vSNl0DqfhXVcxKKfWD
/5JSNbz1n23vQimwAJUS+JBZf7mJQiOBoiwiZ3pyYIRh457acklbdzCb1H+BWGCE
GAXLBXBvkuVN7nGlCZuR1pOZ6gTVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUC6xV
PtzNuAYpmx1+ErV+9Dwu/BowHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzIzNDVDMUVDRjVCMTExRUY5N0EyQTdCQTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYIwDQYJKoZIhvcNAQEL
BQADggEBAKQJ4UKdxKKRVPbbTf+1zw4KGSH01qGXb5kWzMWgiQlrhEYxvgLOpTKE
AM47NBeEO+Fwvh9qupsXrBHT9LwkiAjE5CJt4J0r8/M2mpDpf3rXgU0NmfCXOfjQ
BsQLKmrdNbnzWSYGF/f/b7UpX+EArt88i9RxsG5WHtdvCNVrhkYeUFaGuIGlMWBq
7NQbapWhmSutIC3fi0La5P+tyDxA7PpmGtgsIz7qJ4uS62UrVlWR6hDX0qT2dNNf
ES6PN4RCrP2rHJsV+hSw1RC5nWFBglJ4oGGffpxHBO6UZcXex5Ik+03n3R29rq+g
NWHFSaUG46G6O1y3irh89/LJdJ2lNWs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:07 2025 by rpki-client