Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78B5C9E4097311F0903A7A79762E951A.roa
File: 78B5C9E4097311F0903A7A79762E951A.roa (raw, json)
Hash identifier: RFfxBmYgTDbG4SIOMUUyGz2zzijJEpsoKkSY6PETovk=
Subject key identifier: 26:74:1B:54:50:82:F2:F2:CF:78:E6:55:E3:8C:59:F8:0D:D7:DE:3A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1424
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78B5C9E4097311F0903A7A79762E951A.roa
Signing time: Tue 25 Mar 2025 12:20:00 +0000
ROA not before: Tue 25 Mar 2025 12:19:56 +0000
ROA not after: Thu 25 Mar 2027 12:19:56 +0000
asID: 395793
IP address blocks: 102.129.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5156 (0x1424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Mar 25 12:19:56 2025 GMT
Not After : Mar 25 12:19:56 2027 GMT
Subject: CN=67e29f70-78cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:be:33:56:26:06:2b:2d:68:00:b7:a2:1e:
b0:e5:d9:d6:c3:2f:54:f3:8a:e9:90:63:1a:af:1d:
60:9e:04:63:b1:68:83:c6:29:92:58:bc:f4:85:0d:
6f:27:c8:64:f3:c0:2b:65:e9:20:b5:21:58:62:c8:
0e:4e:2e:64:d0:4d:a1:67:ec:99:e0:0f:15:5d:55:
dc:c0:5e:6d:24:62:2f:08:61:d2:a7:fe:7f:15:5d:
de:60:f0:95:9c:72:74:c1:85:ed:e6:32:43:b5:e1:
f6:14:f5:83:85:00:c1:11:4e:4d:95:9e:16:a0:49:
aa:51:68:39:91:a5:10:60:0e:a5:f7:52:99:c7:ae:
e3:b1:06:50:b8:67:f1:97:8b:bd:a3:6f:79:82:a9:
cc:44:d5:bc:70:72:7c:7e:aa:d9:27:5f:e3:e5:aa:
00:45:54:c5:c8:9c:bc:99:32:e6:f7:7d:5a:4f:e3:
02:ee:7c:21:36:97:9e:e1:03:61:6c:7d:53:22:f3:
f1:75:62:79:b3:ca:5e:f7:2d:3d:d8:83:c9:3e:76:
f2:b5:c9:61:a9:9d:89:ec:7d:20:0a:d2:f5:8a:07:
bc:ff:b8:17:8b:47:f2:e3:dd:76:91:fd:44:33:1b:
4e:13:e5:ed:c7:7c:e9:03:26:a8:cc:da:9e:98:8a:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:74:1B:54:50:82:F2:F2:CF:78:E6:55:E3:8C:59:F8:0D:D7:DE:3A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78B5C9E4097311F0903A7A79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:7e:2a:76:17:32:54:6d:cd:bf:fe:b0:11:8d:d4:89:1e:33:
e2:2b:91:d2:8c:73:04:c1:f1:98:94:b6:52:e8:e9:a5:b1:04:
1d:bd:65:50:9b:ea:2c:9d:f5:8e:16:be:51:00:b6:e8:21:2f:
7a:d4:53:30:11:29:b2:c3:c9:9e:d5:29:b9:26:18:ea:03:9f:
ad:fb:0b:4c:06:b6:bf:16:75:32:44:95:69:a1:17:dd:99:b3:
88:1e:18:5f:c3:9c:b6:86:bd:d5:9d:9e:23:77:86:d0:77:50:
f6:a6:61:19:df:78:52:ac:93:40:84:54:1a:6c:f5:a0:90:7c:
cf:8f:2b:b5:7c:5e:af:e2:ce:7f:ef:17:0f:b5:f5:2e:87:d5:
07:2e:b6:cb:69:5a:5f:1b:4d:cc:2d:93:b3:10:d0:ab:48:4c:
19:d1:4a:bc:d9:ac:b1:3d:47:57:e1:75:2b:a5:1c:eb:f4:86:
a0:8b:57:b7:62:d4:7a:40:ed:d8:28:e8:7b:c3:1e:f1:2e:96:
cd:a6:81:7e:5c:85:82:d2:b9:5c:7c:31:33:20:71:96:2d:b3:
9d:c6:62:f7:03:6b:fd:b9:49:46:42:3d:12:68:c1:a6:89:e8:
ba:53:b1:98:0a:f3:63:2e:59:4a:f5:ec:d0:d6:94:28:4f:65:
25:c6:ce:e2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFCQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTAzMjUxMjE5NTZaFw0yNzAzMjUxMjE5NTZaMBgxFjAU
BgNVBAMTDTY3ZTI5ZjcwLTc4Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDACb4zViYGKy1oALeiHrDl2dbDL1TziumQYxqvHWCeBGOxaIPGKZJYvPSF
DW8nyGTzwCtl6SC1IVhiyA5OLmTQTaFn7JngDxVdVdzAXm0kYi8IYdKn/n8VXd5g
8JWccnTBhe3mMkO14fYU9YOFAMERTk2VnhagSapRaDmRpRBgDqX3UpnHruOxBlC4
Z/GXi72jb3mCqcxE1bxwcnx+qtknX+PlqgBFVMXInLyZMub3fVpP4wLufCE2l57h
A2FsfVMi8/F1Ynmzyl73LT3Yg8k+dvK1yWGpnYnsfSAK0vWKB7z/uBeLR/Lj3XaR
/UQzG04T5e3HfOkDJqjM2p6YiiGDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJnQb
VFCC8vLPeOZV44xZ+A3X3jowHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzc4QjVDOUU0MDk3MzExRjA5MDNBN0E3OTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbYwDQYJKoZIhvcNAQEL
BQADggEBAMd+KnYXMlRtzb/+sBGN1IkeM+IrkdKMcwTB8ZiUtlLo6aWxBB29ZVCb
6iyd9Y4WvlEAtughL3rUUzARKbLDyZ7VKbkmGOoDn637C0wGtr8WdTJElWmhF92Z
s4geGF/DnLaGvdWdniN3htB3UPamYRnfeFKsk0CEVBps9aCQfM+PK7V8Xq/izn/v
Fw+19S6H1QcutstpWl8bTcwtk7MQ0KtITBnRSrzZrLE9R1fhdSulHOv0hqCLV7di
1HpA7dgo6HvDHvEuls2mgX5chYLSuVx8MTMgcZYts53GYvcDa/25SUZCPRJowaaJ
6LpTsZgK82MuWUr17NDWlChPZSXGzuI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:35 2025 by rpki-client