Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67533A1A03D311F0A539968B762E951A.roa
File: 67533A1A03D311F0A539968B762E951A.roa (raw, json)
Hash identifier: 4b8IH9jBK7qO7SsnuIcEXD2l7tpw+qZ1VP3hlxAZCj4=
Subject key identifier: 93:0B:31:07:69:B7:0C:00:67:82:78:B0:89:0D:97:11:DB:F9:8B:80
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1415
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67533A1A03D311F0A539968B762E951A.roa
Signing time: Tue 18 Mar 2025 08:31:35 +0000
ROA not before: Tue 18 Mar 2025 08:31:32 +0000
ROA not after: Sat 18 Mar 2028 08:31:32 +0000
asID: 9009
IP address blocks: 102.129.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5141 (0x1415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Mar 18 08:31:32 2025 GMT
Not After : Mar 18 08:31:32 2028 GMT
Subject: CN=67d92f67-5b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1b:2a:26:8c:30:f2:f3:26:cb:10:10:e3:20:
a2:d2:0c:74:09:3e:c2:03:c4:06:ec:1b:6d:07:fe:
38:1a:f2:7d:f8:e3:f1:77:87:55:0b:5a:39:47:e9:
a9:4b:14:59:35:c3:38:5e:4f:7e:5f:1c:35:da:fe:
d7:4a:05:5c:68:0f:e5:87:c9:c3:6e:f2:c4:df:c1:
39:b6:4d:e0:51:42:be:e5:04:42:6a:cc:46:af:ec:
74:65:2a:fc:c8:36:2c:fc:68:e3:0a:8f:1b:13:2c:
d2:d2:03:4b:31:bc:24:c2:e7:3d:d7:c7:44:41:5d:
d3:1b:e8:a9:26:7d:4e:f0:c8:09:57:40:29:fe:ae:
0d:e7:46:7e:52:66:b3:82:82:a0:6e:cb:fa:73:97:
f7:a8:3c:fc:18:c4:77:55:17:58:de:62:d7:ba:f4:
d2:29:f2:fe:6a:8c:f9:c0:aa:18:59:5e:b0:ad:e6:
28:6f:de:76:fd:b9:b4:ef:f6:25:39:b1:6d:95:03:
37:1b:ac:ff:ce:5e:a5:0b:be:e5:0e:07:64:da:13:
9e:ad:f9:ce:e9:e5:2b:44:91:66:91:a7:c2:64:a6:
8a:88:f7:e1:45:a5:86:f5:7e:65:f6:8c:3f:dd:1d:
0d:74:82:22:07:8f:a4:a3:ca:14:b4:99:c3:02:fa:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0B:31:07:69:B7:0C:00:67:82:78:B0:89:0D:97:11:DB:F9:8B:80
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67533A1A03D311F0A539968B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.222.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:bc:26:dc:63:70:15:da:88:e0:10:d1:a5:4a:f0:f8:55:c6:
47:e3:8e:ae:bb:85:66:e4:af:3e:4a:fa:ef:82:ee:e9:e8:6a:
83:55:6e:2c:87:9e:84:0e:c4:5c:14:91:29:a9:af:34:ac:8e:
a9:ed:2a:39:ec:e7:38:e2:86:f2:2c:bb:ff:3e:8b:e6:05:d1:
67:04:d0:5f:01:8d:4c:f5:4a:f1:ad:dd:f5:c8:e4:41:a9:e4:
10:7e:16:e5:77:a8:82:b1:01:d6:07:30:50:af:a1:ac:c2:14:
93:09:fd:9a:37:87:27:87:8a:1f:26:b6:21:8e:01:45:1a:0d:
98:5a:9f:37:94:eb:ed:82:e9:8d:d7:9a:ee:e8:fc:ed:ce:57:
34:bb:45:9d:31:73:83:85:8f:fb:a8:95:ab:5d:06:44:37:e1:
07:d5:24:77:69:3a:62:a1:41:74:e9:69:05:2f:85:61:52:10:
1d:08:26:ec:75:35:b3:27:fe:b5:31:c7:72:91:c4:9b:a5:c8:
99:09:d8:f7:be:43:1c:6f:43:a7:49:5f:b0:41:d7:27:20:db:
cf:f0:68:61:49:a6:4b:be:40:2a:6f:dd:91:b8:7d:1a:28:fb:
eb:3b:aa:9a:cb:54:41:6a:68:ee:9a:d7:22:d2:53:19:93:34:
0b:ad:3c:85
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFBUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTAzMTgwODMxMzJaFw0yODAzMTgwODMxMzJaMBgxFjAU
BgNVBAMTDTY3ZDkyZjY3LTViOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhGyomjDDy8ybLEBDjIKLSDHQJPsIDxAbsG20H/jga8n344/F3h1ULWjlH
6alLFFk1wzheT35fHDXa/tdKBVxoD+WHycNu8sTfwTm2TeBRQr7lBEJqzEav7HRl
KvzINiz8aOMKjxsTLNLSA0sxvCTC5z3Xx0RBXdMb6KkmfU7wyAlXQCn+rg3nRn5S
ZrOCgqBuy/pzl/eoPPwYxHdVF1jeYte69NIp8v5qjPnAqhhZXrCt5ihv3nb9ubTv
9iU5sW2VAzcbrP/OXqULvuUOB2TaE56t+c7p5StEkWaRp8JkpoqI9+FFpYb1fmX2
jD/dHQ10giIHj6SjyhS0mcMC+gKXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUkwsx
B2m3DABngniwiQ2XEdv5i4AwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzY3NTMzQTFBMDNEMzExRjBBNTM5OTY4Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgd4wDQYJKoZIhvcNAQEL
BQADggEBAMO8JtxjcBXaiOAQ0aVK8PhVxkfjjq67hWbkrz5K+u+C7unoaoNVbiyH
noQOxFwUkSmprzSsjqntKjns5zjihvIsu/8+i+YF0WcE0F8BjUz1SvGt3fXI5EGp
5BB+FuV3qIKxAdYHMFCvoazCFJMJ/Zo3hyeHih8mtiGOAUUaDZhanzeU6+2C6Y3X
mu7o/O3OVzS7RZ0xc4OFj/uolatdBkQ34QfVJHdpOmKhQXTpaQUvhWFSEB0IJux1
NbMn/rUxx3KRxJulyJkJ2Pe+QxxvQ6dJX7BB1ycg28/waGFJpku+QCpv3ZG4fRoo
++s7qprLVEFqaO6a1yLSUxmTNAutPIU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:58 2025 by rpki-client