Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D7A388D6B61E11EFAEEFB46D762E951A.roa
File: D7A388D6B61E11EFAEEFB46D762E951A.roa (raw, json)
Hash identifier: bYr7kL7shEvLCs87e03hJ7p+U6oDKodKkvh7DEp7Glc=
Subject key identifier: 89:CD:96:B2:4A:5C:FB:5F:6F:C0:43:CA:C7:14:F0:59:41:79:2E:1A
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0735
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D7A388D6B61E11EFAEEFB46D762E951A.roa
Signing time: Mon 09 Dec 2024 11:15:06 +0000
ROA not before: Mon 09 Dec 2024 11:15:02 +0000
ROA not after: Sat 30 Jul 2033 11:15:02 +0000
asID: 37119
IP address blocks: 2c0f:f888:a190::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 11:15:02 2024 GMT
Not After : Jul 30 11:15:02 2033 GMT
Subject: CN=6756d139-f431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:c5:69:21:2c:39:dd:1f:fe:8d:01:39:1e:
c1:17:ed:a4:1f:76:e2:a0:cc:44:a9:b9:83:43:4b:
8a:64:63:97:10:f1:c2:a7:9b:fb:5a:c5:e6:17:fc:
56:a7:02:a6:fd:fb:86:29:fb:08:bf:3b:41:88:7c:
f3:03:9c:ed:7b:c7:41:ff:99:7b:8f:49:38:06:f6:
98:68:76:78:14:1f:9e:b0:16:dc:53:57:47:6a:ac:
26:e7:33:66:f7:ca:5b:5e:42:59:96:22:e1:51:4d:
35:f2:da:0d:fc:8c:23:dc:eb:eb:9e:ab:c2:0a:8b:
96:5a:6c:d2:ba:00:26:63:a2:89:b9:ba:12:8d:56:
55:8e:93:23:db:9b:09:b3:44:f0:a6:c3:6f:f6:dd:
e6:64:4b:4e:85:5c:49:ef:42:7e:72:50:19:a8:65:
a6:66:d6:7d:41:67:2c:94:75:b7:18:9f:e4:92:92:
6a:05:ff:f5:fa:c4:7e:18:63:d7:9e:1f:e9:bc:21:
04:46:fb:5b:24:c3:ee:22:6b:6a:fc:14:34:49:fd:
e5:53:52:29:42:d8:df:c2:af:e9:e6:91:a1:d2:d6:
0e:00:b0:6b:08:f2:be:4c:a5:13:3c:e9:1a:84:3e:
7c:55:21:aa:47:76:cd:40:42:68:3f:e7:2a:75:36:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CD:96:B2:4A:5C:FB:5F:6F:C0:43:CA:C7:14:F0:59:41:79:2E:1A
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D7A388D6B61E11EFAEEFB46D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a190::/44
Signature Algorithm: sha256WithRSAEncryption
7c:3b:b5:5b:83:c8:f2:8e:77:58:20:27:28:72:d0:4c:60:82:
1e:fb:fc:ad:a5:f7:43:57:0e:2e:c5:fd:11:1c:63:e9:7a:f3:
7e:16:79:56:6a:fa:23:94:36:7e:22:3b:cf:1f:ce:17:a8:9f:
3b:ed:1e:56:52:bb:9d:e0:01:a0:ef:84:83:17:85:d3:f9:e2:
30:ef:b4:df:54:63:56:7f:ef:c9:a2:ef:3f:13:93:50:2d:75:
22:91:a5:e4:14:17:e9:b4:55:f3:4a:65:63:9d:f2:ff:3c:7f:
74:f8:31:6e:04:31:3d:ef:a6:30:3d:33:bb:03:56:e0:75:54:
c4:5f:c5:a3:12:44:97:b6:1f:b5:b9:0b:af:e3:c4:6b:fa:bc:
65:52:65:0e:8e:1d:64:96:48:7f:54:a4:e4:a4:f9:57:36:38:
5f:45:b3:14:c1:9f:a3:de:d9:05:dd:77:59:75:7d:96:31:ea:
53:dd:f2:b8:c2:ab:fb:5c:b8:d4:57:0a:25:f3:61:2f:be:e8:
22:da:9b:98:26:b1:f5:27:bc:e2:c4:d4:4b:43:a5:ac:ee:2e:
ab:b1:6e:c9:19:c5:d2:29:e7:55:44:94:79:48:e1:1a:68:36:
14:e2:99:f1:73:14:9b:64:30:ef:99:5e:3f:07:7c:46:dd:47:
08:a6:2b:3a
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNDEyMDkxMTE1MDJaFw0zMzA3MzAxMTE1MDJaMBgxFjAU
BgNVBAMTDTY3NTZkMTM5LWY0MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDoksVpISw53R/+jQE5HsEX7aQfduKgzESpuYNDS4pkY5cQ8cKnm/taxeYX
/FanAqb9+4Yp+wi/O0GIfPMDnO17x0H/mXuPSTgG9phodngUH56wFtxTV0dqrCbn
M2b3ylteQlmWIuFRTTXy2g38jCPc6+ueq8IKi5ZabNK6ACZjoom5uhKNVlWOkyPb
mwmzRPCmw2/23eZkS06FXEnvQn5yUBmoZaZm1n1BZyyUdbcYn+SSkmoF//X6xH4Y
Y9eeH+m8IQRG+1skw+4ia2r8FDRJ/eVTUilC2N/Cr+nmkaHS1g4AsGsI8r5MpRM8
6RqEPnxVIapHds1AQmg/5yp1NpkxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUic2W
skpc+19vwEPKxxTwWUF5LhowHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4L0Q3QTM4OEQ2QjYxRTExRUZBRUVGQjQ2RDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD/iIoZAwDQYJKoZIhvcN
AQELBQADggEBAHw7tVuDyPKOd1ggJyhy0Exggh77/K2l90NXDi7F/REcY+l6834W
eVZq+iOUNn4iO88fzheonzvtHlZSu53gAaDvhIMXhdP54jDvtN9UY1Z/78mi7z8T
k1AtdSKRpeQUF+m0VfNKZWOd8v88f3T4MW4EMT3vpjA9M7sDVuB1VMRfxaMSRJe2
H7W5C6/jxGv6vGVSZQ6OHWSWSH9UpOSk+Vc2OF9FsxTBn6Pe2QXdd1l1fZYx6lPd
8rjCq/tcuNRXCiXzYS++6CLam5gmsfUnvOLE1EtDpazuLquxbskZxdIp51VElHlI
4RpoNhTimfFzFJtkMO+ZXj8HfEbdRwimKzo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:38 2025 by rpki-client