Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C0C88E8D97F11EFBD37D453762E951A.roa
File: 9C0C88E8D97F11EFBD37D453762E951A.roa (raw, json)
Hash identifier: s6j/jRgkTBXIbRxdTi87gRoRk9OB085raeKpTSqQ+e0=
Subject key identifier: 12:86:0C:12:D0:01:02:D9:F5:68:17:32:3B:03:4D:05:90:22:D3:F5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1384
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C0C88E8D97F11EFBD37D453762E951A.roa
Signing time: Thu 23 Jan 2025 11:45:57 +0000
ROA not before: Thu 23 Jan 2025 11:45:54 +0000
ROA not after: Sat 23 Jan 2027 11:45:54 +0000
asID: 26042
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4996 (0x1384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 23 11:45:54 2025 GMT
Not After : Jan 23 11:45:54 2027 GMT
Subject: CN=67922bf5-7477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:09:47:17:1b:24:7b:4a:e5:ee:a1:e3:17:
d7:01:f1:ea:9f:dc:10:d4:18:97:52:64:92:b2:5d:
8b:36:69:40:45:0a:6d:19:64:b5:e8:4a:f7:b8:a6:
7d:db:12:de:16:52:97:c3:38:a9:f4:82:ce:05:8d:
9a:33:28:d1:88:ee:78:e9:08:1b:79:ec:52:d0:cd:
3b:72:ba:7d:b8:3c:96:42:87:be:2a:46:46:f1:ed:
16:a6:57:b5:b9:a2:6b:4e:d0:fb:64:b9:0d:10:43:
0d:88:a4:b3:4e:f8:6b:39:f8:94:1f:e5:09:e8:0d:
0f:bc:c4:a3:9d:8a:58:90:19:51:c8:40:2b:72:49:
4a:95:97:75:ba:8e:18:c3:3c:05:9c:2b:a0:78:eb:
77:84:17:1c:98:fc:33:68:84:04:f7:ab:67:01:57:
d2:f4:4c:a2:92:82:56:7f:b8:5a:d0:5d:21:8a:2b:
20:af:99:6e:f9:e8:b9:cc:30:ad:6e:e3:1e:d1:e7:
73:64:c9:76:8e:d3:b0:9f:f4:43:30:ca:1e:d1:98:
61:38:3d:d1:dd:3d:c8:3f:54:bf:15:a9:78:b8:15:
97:f6:37:27:db:45:b1:ae:c2:04:6f:6d:64:47:d4:
17:f5:05:df:79:3c:1c:9c:86:ad:b2:fa:74:a7:9e:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:0C:12:D0:01:02:D9:F5:68:17:32:3B:03:4D:05:90:22:D3:F5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C0C88E8D97F11EFBD37D453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:10:74:d9:e4:98:20:de:cd:57:44:28:6a:52:f1:b9:20:8b:
51:e0:ad:95:db:24:4c:56:52:9f:ab:7d:bd:0f:f1:e8:af:f0:
25:8e:af:32:1e:75:f1:ca:c0:1a:f2:e4:c4:69:b9:d5:c2:e9:
f3:14:ca:b5:b9:5a:64:71:ee:96:a8:2a:f1:91:70:14:c9:49:
01:10:43:33:8c:d7:19:b2:35:ac:ff:27:9f:25:a2:71:90:24:
3f:de:57:c0:c1:f9:df:a7:56:22:29:c8:a1:5c:50:e3:c5:02:
da:fe:77:cf:d0:cc:3b:ad:51:04:ec:9b:91:28:f2:9d:17:77:
14:04:03:19:93:6c:fb:29:fb:57:5b:52:31:60:5d:e8:08:6c:
9a:8e:9e:24:3a:1f:6e:7f:81:53:d4:be:b5:4a:cd:30:a8:99:
9e:6a:ac:ce:c9:42:ad:35:a4:39:55:a5:bc:dd:c1:7a:54:db:
10:28:ad:15:4d:83:42:4b:89:ac:9d:1e:a0:99:d0:20:8d:e8:
ae:77:3d:a6:d3:d6:5c:44:3f:a0:4c:19:d0:7c:e7:18:7d:b3:
69:c9:1a:0a:26:c2:a4:ce:e0:ed:51:a8:9e:50:39:db:26:a2:
1b:e9:fc:ee:8a:43:40:f4:7a:7f:10:2a:f1:eb:89:9f:31:09:
41:73:5e:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE4QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTAxMjMxMTQ1NTRaFw0yNzAxMjMxMTQ1NTRaMBgxFjAU
BgNVBAMTDTY3OTIyYmY1LTc0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXlwlHFxske0rl7qHjF9cB8eqf3BDUGJdSZJKyXYs2aUBFCm0ZZLXoSve4
pn3bEt4WUpfDOKn0gs4FjZozKNGI7njpCBt57FLQzTtyun24PJZCh74qRkbx7Ram
V7W5omtO0PtkuQ0QQw2IpLNO+Gs5+JQf5QnoDQ+8xKOdiliQGVHIQCtySUqVl3W6
jhjDPAWcK6B463eEFxyY/DNohAT3q2cBV9L0TKKSglZ/uFrQXSGKKyCvmW756LnM
MK1u4x7R53NkyXaO07Cf9EMwyh7RmGE4PdHdPcg/VL8VqXi4FZf2NyfbRbGuwgRv
bWRH1Bf1Bd95PBychq2y+nSnntV5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEoYM
EtABAtn1aBcyOwNNBZAi0/UwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzlDMEM4OEU4RDk3RjExRUZCRDM3RDQ1Mzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdgwDQYJKoZIhvcNAQEL
BQADggEBALIQdNnkmCDezVdEKGpS8bkgi1HgrZXbJExWUp+rfb0P8eiv8CWOrzIe
dfHKwBry5MRpudXC6fMUyrW5WmRx7paoKvGRcBTJSQEQQzOM1xmyNaz/J58lonGQ
JD/eV8DB+d+nViIpyKFcUOPFAtr+d8/QzDutUQTsm5Eo8p0XdxQEAxmTbPsp+1db
UjFgXegIbJqOniQ6H25/gVPUvrVKzTComZ5qrM7JQq01pDlVpbzdwXpU2xAorRVN
g0JLiaydHqCZ0CCN6K53PabT1lxEP6BMGdB85xh9s2nJGgomwqTO4O1RqJ5QOdsm
ohvp/O6KQ0D0en8QKvHriZ8xCUFzXkc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:15:01 2025 by rpki-client