Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/70D05A28B63A11EFB6628F96762E951A.roa
File: 70D05A28B63A11EFB6628F96762E951A.roa (raw, json)
Hash identifier: GM+NUK5xH5MoV85NHpTVB5nTlQrbtSN16c4cgvYgfRM=
Subject key identifier: 02:91:25:9D:05:E4:97:B4:C0:F2:6D:2E:1D:4F:4E:CD:EC:D9:1B:A2
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0743
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/70D05A28B63A11EFB6628F96762E951A.roa
Signing time: Mon 09 Dec 2024 14:32:39 +0000
ROA not before: Mon 09 Dec 2024 14:32:35 +0000
ROA not after: Sat 30 Jul 2033 14:32:35 +0000
asID: 37119
IP address blocks: 2c0f:f888:a840::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:32:35 2024 GMT
Not After : Jul 30 14:32:35 2033 GMT
Subject: CN=6756ff87-019d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:f7:50:1c:6f:0b:ee:7d:ba:38:5e:31:cf:
c1:94:91:c9:6c:e2:f2:5a:21:e8:89:1e:37:1a:11:
4a:88:f4:23:e4:8b:03:86:de:b8:c1:aa:88:ef:f8:
44:02:8d:a8:bd:42:04:82:e1:f6:e9:fd:38:6c:33:
ac:68:a3:ca:6c:55:a7:31:ae:69:eb:7e:4d:0c:0e:
79:91:58:db:74:46:fe:b8:6a:43:78:7a:44:67:de:
d0:e1:e9:90:ba:ad:36:a4:c2:5e:74:c1:9b:2f:38:
8a:17:b5:16:8c:1f:19:85:eb:5a:9c:62:5c:9d:35:
1a:86:01:48:ad:dc:d8:15:41:27:c9:4d:04:87:4e:
d6:20:a9:c7:24:d5:3f:ba:eb:56:93:35:14:b7:ca:
34:12:58:3e:44:a8:45:fb:0a:11:8f:7b:cb:30:9d:
4f:b3:99:f9:5c:3c:2c:34:ad:96:c8:c8:61:56:0d:
1b:70:1e:2e:ab:dd:43:1f:4c:4e:2d:74:38:fe:a3:
a4:1d:90:53:b9:9b:8c:eb:29:05:f1:0d:9b:55:0d:
b1:82:a0:45:a0:b2:e8:23:80:03:c4:dd:63:ae:01:
d6:4d:40:6a:72:3f:44:85:9f:26:cd:fa:c3:16:bc:
64:18:90:a7:aa:98:d0:db:a5:f4:3d:2f:b7:43:2f:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:91:25:9D:05:E4:97:B4:C0:F2:6D:2E:1D:4F:4E:CD:EC:D9:1B:A2
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/70D05A28B63A11EFB6628F96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a840::/44
Signature Algorithm: sha256WithRSAEncryption
ba:b5:fa:3b:7d:82:88:c0:5c:ad:b3:64:da:70:cb:28:cd:fe:
7c:18:3e:aa:8b:fe:43:a7:26:6d:85:73:81:09:55:32:97:74:
6e:dd:9e:b3:48:1b:48:8a:f5:85:c5:9e:2b:82:67:fe:2f:35:
5e:9e:f7:6b:b7:67:0b:74:14:c0:c5:ea:09:63:8f:75:c5:b4:
51:a4:c0:9b:10:c9:a9:b2:91:30:67:bb:1a:8d:b6:24:e3:b4:
8f:12:0a:65:50:92:a6:cb:91:2f:ff:14:fd:65:e6:52:bd:c5:
32:64:07:72:48:ba:56:a4:bb:21:ad:3d:94:29:44:7b:5f:7c:
11:77:63:bf:64:a7:f5:76:a5:9f:c4:2f:48:02:bf:fe:64:3a:
9a:6c:1a:6a:e2:f9:f7:8c:64:e0:86:53:15:db:93:22:74:41:
48:89:1e:c8:ff:40:54:2d:70:28:f2:d3:45:6c:cb:4a:b6:47:
14:23:50:de:85:69:b0:0b:26:99:a4:77:bd:90:49:b3:76:0d:
e1:09:80:1e:7b:1b:ec:e6:3b:81:1d:5b:bd:83:1c:08:b8:f6:
f3:20:cc:5e:38:aa:0d:2b:71:aa:6c:03:d8:14:4a:1c:d3:fd:
69:7e:21:01:c0:cb:48:25:1a:c3:69:c6:99:18:a9:e1:36:5e:
07:40:ef:5e
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNDEyMDkxNDMyMzVaFw0zMzA3MzAxNDMyMzVaMBgxFjAU
BgNVBAMTDTY3NTZmZjg3LTAxOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIzfdQHG8L7n26OF4xz8GUkcls4vJaIeiJHjcaEUqI9CPkiwOG3rjBqojv
+EQCjai9QgSC4fbp/ThsM6xoo8psVacxrmnrfk0MDnmRWNt0Rv64akN4ekRn3tDh
6ZC6rTakwl50wZsvOIoXtRaMHxmF61qcYlydNRqGAUit3NgVQSfJTQSHTtYgqcck
1T+661aTNRS3yjQSWD5EqEX7ChGPe8swnU+zmflcPCw0rZbIyGFWDRtwHi6r3UMf
TE4tdDj+o6QdkFO5m4zrKQXxDZtVDbGCoEWgsugjgAPE3WOuAdZNQGpyP0SFnybN
+sMWvGQYkKeqmNDbpfQ9L7dDL4qZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUApEl
nQXkl7TA8m0uHU9OzezZG6IwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzcwRDA1QTI4QjYzQTExRUZCNjYyOEY5Njc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD/iIqEAwDQYJKoZIhvcN
AQELBQADggEBALq1+jt9gojAXK2zZNpwyyjN/nwYPqqL/kOnJm2Fc4EJVTKXdG7d
nrNIG0iK9YXFniuCZ/4vNV6e92u3Zwt0FMDF6gljj3XFtFGkwJsQyamykTBnuxqN
tiTjtI8SCmVQkqbLkS//FP1l5lK9xTJkB3JIulakuyGtPZQpRHtffBF3Y79kp/V2
pZ/EL0gCv/5kOppsGmri+feMZOCGUxXbkyJ0QUiJHsj/QFQtcCjy00Vsy0q2RxQj
UN6FabALJpmkd72QSbN2DeEJgB57G+zmO4EdW72DHAi49vMgzF44qg0rcapsA9gU
ShzT/Wl+IQHAy0glGsNpxpkYqeE2XgdA714=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:43 2025 by rpki-client