Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EE11F76CB63A11EF82AAC19A762E951A.roa
File: EE11F76CB63A11EF82AAC19A762E951A.roa (raw, json)
Hash identifier: NanLCur3JVvVZrhqXvUNA/NTElExKk4DrX5T7g0dc4k=
Subject key identifier: D9:84:E7:BB:C1:A4:0A:67:F2:6E:9D:DA:DC:3E:26:65:9F:B3:3B:B4
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0749
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EE11F76CB63A11EF82AAC19A762E951A.roa
Signing time: Mon 09 Dec 2024 14:36:09 +0000
ROA not before: Mon 09 Dec 2024 14:36:05 +0000
ROA not after: Sat 30 Jul 2033 14:36:05 +0000
asID: 37119
IP address blocks: 2c0f:f888:a870::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865 (0x749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:36:05 2024 GMT
Not After : Jul 30 14:36:05 2033 GMT
Subject: CN=67570059-a9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:7f:20:3b:ea:ec:ac:0b:26:4d:23:9f:a4:
bb:c3:1e:0f:de:ba:49:54:8f:c3:6f:5e:c7:94:97:
70:23:25:2e:0e:49:4c:86:bc:65:12:da:97:08:03:
4c:e3:70:62:61:58:3b:73:08:fc:7c:b7:ce:9d:45:
56:f0:9c:6e:16:ba:21:cb:90:7b:e4:85:c7:cf:a5:
e3:c8:ab:ec:d5:67:6e:1a:33:70:2d:ae:79:55:22:
f4:0d:e2:10:75:6d:ec:4a:31:d7:ee:1b:51:40:11:
ae:3f:37:e9:7f:dc:72:99:27:9a:d0:e4:e4:51:4a:
0d:0d:8b:be:1a:f8:05:b6:0e:b5:aa:b6:a5:f1:a9:
9c:d8:66:78:54:68:18:50:b7:9f:24:84:bf:62:b6:
12:64:03:94:eb:c4:d1:93:55:52:f7:c9:a3:8b:c4:
3f:df:6f:d5:63:a4:4a:0b:c4:0f:b0:99:32:af:8c:
4a:50:09:99:af:f1:de:76:e8:20:41:74:ca:f8:98:
92:f0:29:f0:83:5f:7a:d1:63:02:78:a2:ec:43:22:
27:1c:83:f8:9d:54:74:02:13:1f:9a:59:48:db:92:
48:b7:fc:34:be:79:92:0d:f4:57:0f:67:d6:c7:b5:
cf:a5:cc:24:8a:8a:7d:1a:a0:94:70:b1:0c:76:72:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:E7:BB:C1:A4:0A:67:F2:6E:9D:DA:DC:3E:26:65:9F:B3:3B:B4
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EE11F76CB63A11EF82AAC19A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a870::/44
Signature Algorithm: sha256WithRSAEncryption
48:0f:52:f4:ea:ec:dc:a0:1e:ef:1f:e3:9a:77:17:f1:a9:11:
1b:7b:dd:1b:f0:2d:e9:b7:14:85:2b:2f:bf:95:79:ef:0d:eb:
2c:a7:b2:5c:e3:2e:44:31:70:6a:6d:45:67:9a:b0:1a:61:0c:
d4:4b:65:d7:8b:3b:23:74:8a:ff:8f:4d:9e:dd:f3:51:46:3b:
c9:23:ba:fd:4d:4c:a4:3f:e6:2b:a6:19:0c:9f:98:7c:5d:67:
38:74:bf:70:a0:16:4c:57:01:b2:c6:16:3a:29:62:10:11:c2:
b0:55:bf:42:7c:cb:3b:61:03:82:33:d1:cd:06:c3:06:43:34:
c6:60:a1:2e:02:1a:eb:48:39:93:d4:d6:c3:fd:5c:60:fb:76:
a1:15:3c:49:61:c6:ce:d8:4e:69:49:6b:7d:38:9c:9b:6d:85:
f0:06:b6:25:dd:2d:f1:40:cd:d0:3f:b4:c6:e3:36:23:49:2e:
d4:a5:81:88:7a:b7:e8:aa:1f:83:c2:19:be:1a:15:88:03:f0:
04:49:16:2a:67:bc:52:63:81:05:7e:e0:7e:b3:b2:cd:84:49:
ad:cb:43:9a:81:9f:f7:3f:d2:5c:40:ac:b8:83:30:f9:d4:24:
a9:77:55:17:dc:46:56:ff:b0:e8:9c:e4:9e:7e:63:ef:58:bc:
74:28:3f:4b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNDEyMDkxNDM2MDVaFw0zMzA3MzAxNDM2MDVaMBgxFjAU
BgNVBAMTDTY3NTcwMDU5LWE5YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgqn8gO+rsrAsmTSOfpLvDHg/euklUj8NvXseUl3AjJS4OSUyGvGUS2pcI
A0zjcGJhWDtzCPx8t86dRVbwnG4WuiHLkHvkhcfPpePIq+zVZ24aM3AtrnlVIvQN
4hB1bexKMdfuG1FAEa4/N+l/3HKZJ5rQ5ORRSg0Ni74a+AW2DrWqtqXxqZzYZnhU
aBhQt58khL9ithJkA5TrxNGTVVL3yaOLxD/fb9VjpEoLxA+wmTKvjEpQCZmv8d52
6CBBdMr4mJLwKfCDX3rRYwJ4ouxDIiccg/idVHQCEx+aWUjbkki3/DS+eZIN9FcP
Z9bHtc+lzCSKin0aoJRwsQx2clj5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2YTn
u8GkCmfybp3a3D4mZZ+zO7QwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4L0VFMTFGNzZDQjYzQTExRUY4MkFBQzE5QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD/iIqHAwDQYJKoZIhvcN
AQELBQADggEBAEgPUvTq7NygHu8f45p3F/GpERt73RvwLem3FIUrL7+Vee8N6yyn
slzjLkQxcGptRWeasBphDNRLZdeLOyN0iv+PTZ7d81FGO8kjuv1NTKQ/5iumGQyf
mHxdZzh0v3CgFkxXAbLGFjopYhARwrBVv0J8yzthA4Iz0c0GwwZDNMZgoS4CGutI
OZPU1sP9XGD7dqEVPElhxs7YTmlJa304nJtthfAGtiXdLfFAzdA/tMbjNiNJLtSl
gYh6t+iqH4PCGb4aFYgD8ARJFipnvFJjgQV+4H6zss2ESa3LQ5qBn/c/0lxArLiD
MPnUJKl3VRfcRlb/sOic5J5+Y+9YvHQoP0s=
-----END CERTIFICATE-----
Generated at Thu Apr 10 09:11:14 2025 by rpki-client