Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/98E0696AB61F11EF97BCD273762E951A.roa
File: 98E0696AB61F11EF97BCD273762E951A.roa (raw, json)
Hash identifier: lW3v++pn+STLSqPspifFI49VI/u8TFmrG/B334tuxvk=
Subject key identifier: 58:26:CB:45:D7:F4:E3:F4:1D:AF:6A:0B:09:C8:B2:DC:12:CD:07:88
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0739
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/98E0696AB61F11EF97BCD273762E951A.roa
Signing time: Mon 09 Dec 2024 11:20:30 +0000
ROA not before: Mon 09 Dec 2024 11:20:20 +0000
ROA not after: Sat 30 Jul 2033 11:20:20 +0000
asID: 37119
IP address blocks: 2c0f:f888:a1b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 11:20:20 2024 GMT
Not After : Jul 30 11:20:20 2033 GMT
Subject: CN=6756d27e-b542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:ab:1e:39:3b:96:74:36:95:f6:9c:45:b4:
44:10:cd:eb:4d:b5:84:59:8a:7d:75:60:b5:7b:48:
4f:36:97:e4:c8:0f:0c:b7:72:5d:4c:72:85:1b:71:
0a:a3:bb:17:37:78:b9:8f:79:c9:84:b5:48:2c:d7:
8a:31:67:32:d6:d7:02:65:b7:a5:61:f4:ef:5b:42:
d4:9b:a8:02:34:45:79:60:3b:b9:cb:39:93:2f:44:
d4:df:f0:9f:a9:93:42:91:1f:cb:ea:74:99:65:4f:
99:e1:a9:0c:05:02:6d:c3:22:d1:96:9a:cf:3d:ea:
99:36:9d:a8:14:f2:c0:cd:48:62:90:26:45:b9:6d:
7c:7e:ce:42:bf:8c:43:60:91:82:b0:81:9e:81:40:
49:13:a6:1f:11:61:51:13:bb:8a:78:f7:f8:e1:52:
64:68:1a:8b:b1:a1:df:08:04:f3:95:07:d3:86:83:
e2:42:4a:f0:82:18:aa:23:3b:fd:8f:29:70:97:89:
7d:9b:bf:8c:7a:80:0b:40:7b:4e:ba:62:87:38:11:
68:a8:69:55:a4:11:6f:e4:e7:51:af:76:9b:e2:c6:
af:cd:7e:de:1b:63:4d:8e:54:ed:e1:a7:c4:47:8c:
df:c7:9d:b9:4a:da:d1:91:1c:5a:b8:11:bd:18:7d:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:CB:45:D7:F4:E3:F4:1D:AF:6A:0B:09:C8:B2:DC:12:CD:07:88
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/98E0696AB61F11EF97BCD273762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a1b0::/44
Signature Algorithm: sha256WithRSAEncryption
a5:6e:81:5b:08:73:23:51:7d:bc:30:f2:de:86:df:9c:e9:fb:
e7:55:80:45:90:3b:c9:24:cb:6a:45:bf:31:80:78:b1:9b:60:
25:63:d5:7d:90:6c:83:cd:39:48:46:cf:f5:34:fc:4e:89:06:
a2:4f:ef:7c:55:84:6a:81:7d:0a:86:e8:e5:58:4f:74:5c:54:
7a:d7:66:b2:75:f1:7c:e6:67:f5:00:f5:e6:d1:98:a0:51:db:
ba:fd:a4:73:0d:50:69:d7:fd:14:1b:ac:69:8a:6b:7e:79:be:
bc:99:bb:a5:da:7d:ad:1b:ea:59:be:83:50:9e:2c:6c:bf:17:
9f:fe:5c:88:d9:df:d0:d8:43:0f:39:05:e9:ce:7f:da:d8:e2:
b9:66:30:4b:55:d4:f0:94:e4:e6:24:74:29:0a:4e:39:18:b4:
02:5f:a3:73:24:7d:5a:be:f5:24:a7:a6:d6:a4:fb:d1:ac:f8:
33:d5:fe:0c:c2:62:b8:21:a7:01:35:b8:97:e9:41:94:4a:48:
8b:6c:c0:07:57:75:e3:d9:79:03:c4:c6:6a:7b:4c:fc:97:99:
cc:bb:d1:2e:39:ae:58:12:46:a7:cf:2a:20:81:87:2a:52:ad:
c1:98:19:9d:70:4f:35:06:1f:26:b1:ea:c8:d0:9c:d4:62:b3:
3b:2c:93:d0
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNDEyMDkxMTIwMjBaFw0zMzA3MzAxMTIwMjBaMBgxFjAU
BgNVBAMTDTY3NTZkMjdlLWI1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXgqseOTuWdDaV9pxFtEQQzetNtYRZin11YLV7SE82l+TIDwy3cl1McoUb
cQqjuxc3eLmPecmEtUgs14oxZzLW1wJlt6Vh9O9bQtSbqAI0RXlgO7nLOZMvRNTf
8J+pk0KRH8vqdJllT5nhqQwFAm3DItGWms896pk2nagU8sDNSGKQJkW5bXx+zkK/
jENgkYKwgZ6BQEkTph8RYVETu4p49/jhUmRoGouxod8IBPOVB9OGg+JCSvCCGKoj
O/2PKXCXiX2bv4x6gAtAe066Yoc4EWioaVWkEW/k51Gvdpvixq/Nft4bY02OVO3h
p8RHjN/HnblK2tGRHFq4Eb0YfZTjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWCbL
Rdf04/Qdr2oLCciy3BLNB4gwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4Lzk4RTA2OTZBQjYxRjExRUY5N0JDRDI3Mzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD/iIobAwDQYJKoZIhvcN
AQELBQADggEBAKVugVsIcyNRfbww8t6G35zp++dVgEWQO8kky2pFvzGAeLGbYCVj
1X2QbIPNOUhGz/U0/E6JBqJP73xVhGqBfQqG6OVYT3RcVHrXZrJ18XzmZ/UA9ebR
mKBR27r9pHMNUGnX/RQbrGmKa355vryZu6Xafa0b6lm+g1CeLGy/F5/+XIjZ39DY
Qw85BenOf9rY4rlmMEtV1PCU5OYkdCkKTjkYtAJfo3MkfVq+9SSnptak+9Gs+DPV
/gzCYrghpwE1uJfpQZRKSItswAdXdePZeQPExmp7TPyXmcy70S45rlgSRqfPKiCB
hypSrcGYGZ1wTzUGHyax6sjQnNRiszssk9A=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:16 2025 by rpki-client