Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/29BFE46AB61B11EFBD8A2B57762E951A.roa
File: 29BFE46AB61B11EFBD8A2B57762E951A.roa (raw, json)
Hash identifier: iXv/7EKGHwGkAoMeDkTxdQ3IX6YxqS3LKLiwEeR0oZo=
Subject key identifier: 6B:DA:CA:7F:C5:14:DD:B6:C3:00:3F:11:31:8A:06:D6:05:8B:5F:A2
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0725
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/29BFE46AB61B11EFBD8A2B57762E951A.roa
Signing time: Mon 09 Dec 2024 10:48:45 +0000
ROA not before: Mon 09 Dec 2024 10:48:41 +0000
ROA not after: Sat 30 Jul 2033 10:48:41 +0000
asID: 37119
IP address blocks: 2c0f:f888:a050::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 01:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 10:48:41 2024 GMT
Not After : Jul 30 10:48:41 2033 GMT
Subject: CN=6756cb0d-df10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ce:cb:79:27:74:31:35:3f:ed:81:dc:a2:4a:
f6:e5:53:53:10:e0:b2:8d:e5:2a:58:43:88:4f:ab:
ed:7d:8f:90:80:a5:ae:e4:5e:e6:00:4b:27:d8:98:
7b:3e:e1:27:62:36:49:4b:e2:92:a0:68:4d:d2:57:
f8:7b:fa:95:16:1a:5c:a2:c4:87:a1:7e:01:c8:16:
32:13:8e:5a:13:70:ef:ab:f8:92:5c:5d:35:d2:5f:
14:35:97:73:15:cf:76:df:f7:99:22:58:a3:e1:2b:
9a:25:e8:c3:87:c2:61:f7:69:b6:c1:43:b3:f8:fd:
63:52:ef:69:2b:9b:e6:03:a3:3c:f3:52:7b:76:93:
9f:3b:4e:f2:a6:12:04:09:97:a3:dc:fe:1f:6b:ee:
a2:6d:92:b4:54:91:82:a0:68:c7:70:02:fd:aa:fd:
38:29:8b:10:16:ce:0c:06:62:c5:ba:4d:5d:54:31:
40:2a:8c:48:e9:39:31:ea:0a:43:d1:6c:25:65:b6:
fe:bc:9f:68:72:25:d8:9c:5b:bf:e3:3f:2a:74:91:
7d:67:cc:fb:5d:26:b9:c1:48:98:13:89:12:c6:e0:
bb:04:0e:0e:74:ac:aa:c5:c9:5a:35:5b:2c:5a:d4:
04:28:e1:fc:ae:34:33:96:cb:f5:ff:f4:b4:8e:d1:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:CA:7F:C5:14:DD:B6:C3:00:3F:11:31:8A:06:D6:05:8B:5F:A2
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/29BFE46AB61B11EFBD8A2B57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a050::/44
Signature Algorithm: sha256WithRSAEncryption
cd:36:6f:29:0c:06:01:4a:67:c5:02:d7:1d:55:c3:d4:b9:72:
93:2f:68:a7:7b:12:af:9e:ea:cd:f5:bf:be:94:69:85:ef:2d:
5a:d0:5c:c1:b0:9a:eb:6b:e8:5e:9a:c1:79:54:a1:61:fd:61:
d9:e3:ce:8d:6e:1e:86:f1:90:7d:4c:83:c8:39:00:74:17:2e:
28:fa:9d:f6:4c:8e:03:4e:60:93:7c:d9:90:7c:3d:0e:59:eb:
aa:27:f3:5b:96:14:12:f6:d1:a6:15:6b:b6:9a:72:9b:cc:1c:
33:88:45:0c:83:7b:ae:32:43:26:7b:23:6c:e0:f6:e1:74:dc:
b5:80:7a:dd:35:d3:87:db:d6:98:73:78:16:63:c0:53:4a:93:
32:32:02:19:1e:a6:e1:18:d0:d8:b9:74:81:7c:c5:8d:5c:aa:
2f:a4:75:48:b6:92:d7:6f:f6:84:ec:64:d8:7b:5c:d2:87:66:
1d:f7:00:b7:90:9a:9b:22:f5:e3:03:b4:b3:d1:17:dd:8b:bc:
70:92:fb:48:be:1a:a2:eb:f4:74:61:61:5f:c3:63:7f:ba:29:
45:76:3c:e0:6a:3a:c0:44:bf:00:8e:3b:f0:f8:64:df:c8:f4:
e5:e0:b0:81:72:42:a2:0e:50:56:bf:aa:27:57:d5:77:9c:32:
65:b6:cf:a8
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICByUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNDEyMDkxMDQ4NDFaFw0zMzA3MzAxMDQ4NDFaMBgxFjAU
BgNVBAMTDTY3NTZjYjBkLWRmMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD9zst5J3QxNT/tgdyiSvblU1MQ4LKN5SpYQ4hPq+19j5CApa7kXuYASyfY
mHs+4SdiNklL4pKgaE3SV/h7+pUWGlyixIehfgHIFjITjloTcO+r+JJcXTXSXxQ1
l3MVz3bf95kiWKPhK5ol6MOHwmH3abbBQ7P4/WNS72krm+YDozzzUnt2k587TvKm
EgQJl6Pc/h9r7qJtkrRUkYKgaMdwAv2q/TgpixAWzgwGYsW6TV1UMUAqjEjpOTHq
CkPRbCVltv68n2hyJdicW7/jPyp0kX1nzPtdJrnBSJgTiRLG4LsEDg50rKrFyVo1
Wyxa1AQo4fyuNDOWy/X/9LSO0QNJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa9rK
f8UU3bbDAD8RMYoG1gWLX6IwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzI5QkZFNDZBQjYxQjExRUZCRDhBMkI1Nzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD/iIoFAwDQYJKoZIhvcN
AQELBQADggEBAM02bykMBgFKZ8UC1x1Vw9S5cpMvaKd7Eq+e6s31v76UaYXvLVrQ
XMGwmutr6F6awXlUoWH9Ydnjzo1uHobxkH1Mg8g5AHQXLij6nfZMjgNOYJN82ZB8
PQ5Z66on81uWFBL20aYVa7aacpvMHDOIRQyDe64yQyZ7I2zg9uF03LWAet0104fb
1phzeBZjwFNKkzIyAhkepuEY0Ni5dIF8xY1cqi+kdUi2ktdv9oTsZNh7XNKHZh33
ALeQmpsi9eMDtLPRF92LvHCS+0i+GqLr9HRhYV/DY3+6KUV2POBqOsBEvwCOO/D4
ZN/I9OXgsIFyQqIOUFa/qidX1XecMmW2z6g=
-----END CERTIFICATE-----
Generated at Thu Apr 10 03:09:36 2025 by rpki-client