Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/470EEE98A8A211EFA8BD9E75762E951A.roa
File: 470EEE98A8A211EFA8BD9E75762E951A.roa (raw, json)
Hash identifier: iqK90hrsVoILkGXNjsS2cvJVdMr1EBrXVUYagyMPFss=
Subject key identifier: E4:15:84:1B:22:98:EC:A2:EA:24:68:68:27:B8:AF:EF:20:88:B5:0B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12F2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/470EEE98A8A211EFA8BD9E75762E951A.roa
Signing time: Fri 22 Nov 2024 07:20:40 +0000
ROA not before: Fri 22 Nov 2024 07:20:36 +0000
ROA not after: Sun 22 Nov 2026 07:20:36 +0000
asID: 29802
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4850 (0x12f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Nov 22 07:20:36 2024 GMT
Not After : Nov 22 07:20:36 2026 GMT
Subject: CN=674030c8-5b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:f2:0b:9b:6d:1a:d3:02:89:e6:82:44:5d:
7c:b3:4e:59:dd:55:b9:da:46:f0:0d:06:8d:b4:f4:
de:17:ff:68:24:5f:ca:e4:94:e7:14:a9:15:25:6f:
c0:30:a4:bb:d0:58:f3:43:ff:2a:6c:e5:60:1b:81:
39:62:36:81:e7:4e:16:b1:a9:4d:02:d4:cc:f7:bf:
d6:80:06:44:d7:55:7b:4f:ea:5f:7a:d1:92:f9:78:
12:47:a0:3c:c8:1e:ed:5f:7b:60:7e:bf:5c:0b:9e:
91:c0:f9:18:e2:51:64:5f:59:07:d1:8d:61:17:8d:
e7:d2:e1:8a:f8:90:ea:04:2b:5e:3b:c9:71:5a:fd:
ed:35:aa:fa:f7:23:e1:2b:06:63:70:43:82:27:50:
45:ca:20:da:88:57:8f:db:1e:f7:c6:4a:a0:f3:10:
37:f6:f4:01:54:a2:bb:2c:ac:28:f4:7c:51:e2:cf:
d7:a1:12:37:8e:79:df:4d:12:ce:76:f0:fa:22:fa:
8e:58:41:de:a5:c7:7c:c2:d8:1c:d1:91:2f:98:19:
e9:81:46:b7:eb:96:ed:3d:57:4d:1a:4f:37:57:d3:
66:37:14:50:3f:de:31:fa:1b:73:35:b9:0f:cf:86:
65:c5:ce:cd:93:aa:c5:c3:b8:11:68:57:95:3b:51:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:15:84:1B:22:98:EC:A2:EA:24:68:68:27:B8:AF:EF:20:88:B5:0B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/470EEE98A8A211EFA8BD9E75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
07:72:68:10:b6:f8:92:e4:2e:9a:85:f8:1a:aa:3b:f4:81:8e:
25:80:f8:10:85:34:c8:08:05:9a:91:8d:07:67:14:3b:66:01:
d2:82:72:d1:6c:af:a7:95:cc:06:9c:aa:14:0c:f5:2c:75:0b:
20:82:42:95:a0:67:4d:b8:d3:d8:5b:b7:e8:8a:c2:ae:ac:40:
ca:0e:94:bd:b1:3e:50:65:a3:53:e6:ac:8c:cb:2f:a4:53:6c:
dc:28:12:2e:74:d7:52:bb:8e:d5:d5:39:95:0f:24:f4:ec:9b:
20:b0:e9:75:03:48:6b:3e:7d:7e:6d:9b:d2:ae:3f:3c:bc:00:
59:a2:37:72:89:4c:65:b7:cf:8f:1a:6c:3c:30:44:79:ee:88:
e2:69:99:e9:c2:36:a2:c6:77:2d:8f:0c:3a:d6:3f:c7:8a:9d:
8f:89:ad:af:25:d8:62:97:60:7a:f5:01:4a:ee:5c:33:74:01:
ea:35:ab:12:cb:b1:89:43:79:eb:92:a9:b3:73:dd:b9:21:72:
80:04:92:41:5e:f7:81:5f:49:c5:22:10:58:fc:4f:3e:98:a7:
0c:68:ea:17:bd:51:1e:cf:1a:3a:9c:f4:88:84:eb:ff:d8:8e:
a7:b1:df:8d:66:be:8b:3c:a0:b5:a2:c6:ee:01:56:a6:1d:1a:
ab:01:a8:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEvIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDExMjIwNzIwMzZaFw0yNjExMjIwNzIwMzZaMBgxFjAU
BgNVBAMTDTY3NDAzMGM4LTViMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0k/ILm20a0wKJ5oJEXXyzTlndVbnaRvANBo209N4X/2gkX8rklOcUqRUl
b8AwpLvQWPND/yps5WAbgTliNoHnThaxqU0C1Mz3v9aABkTXVXtP6l960ZL5eBJH
oDzIHu1fe2B+v1wLnpHA+RjiUWRfWQfRjWEXjefS4Yr4kOoEK147yXFa/e01qvr3
I+ErBmNwQ4InUEXKINqIV4/bHvfGSqDzEDf29AFUorssrCj0fFHiz9ehEjeOed9N
Es528Poi+o5YQd6lx3zC2BzRkS+YGemBRrfrlu09V00aTzdX02Y3FFA/3jH6G3M1
uQ/PhmXFzs2TqsXDuBFoV5U7UURVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5BWE
GyKY7KLqJGhoJ7iv7yCItQswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzQ3MEVFRTk4QThBMjExRUZBOEJEOUU3NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcswDQYJKoZIhvcNAQEL
BQADggEBAAdyaBC2+JLkLpqF+BqqO/SBjiWA+BCFNMgIBZqRjQdnFDtmAdKCctFs
r6eVzAacqhQM9Sx1CyCCQpWgZ02409hbt+iKwq6sQMoOlL2xPlBlo1PmrIzLL6RT
bNwoEi5011K7jtXVOZUPJPTsmyCw6XUDSGs+fX5tm9KuPzy8AFmiN3KJTGW3z48a
bDwwRHnuiOJpmenCNqLGdy2PDDrWP8eKnY+Jra8l2GKXYHr1AUruXDN0Aeo1qxLL
sYlDeeuSqbNz3bkhcoAEkkFe94FfScUiEFj8Tz6Ypwxo6he9UR7PGjqc9IiE6//Y
jqex341mvos8oLWixu4BVqYdGqsBqOk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:47 2025 by rpki-client