Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/757FBC9E00FE11F09FD2814F762E951A.roa
File: 757FBC9E00FE11F09FD2814F762E951A.roa (raw, json)
Hash identifier: EvgXQ2+bYrpvbT5SdmQqkWbZtstkOLea0uSJxlihUBU=
Subject key identifier: E5:44:31:FE:81:2D:2D:1D:18:95:21:6F:B7:EC:5E:72:A8:EA:41:41
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 02FC
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/757FBC9E00FE11F09FD2814F762E951A.roa
Signing time: Fri 14 Mar 2025 18:02:14 +0000
ROA not before: Fri 14 Mar 2025 18:02:10 +0000
ROA not after: Thu 14 Mar 2030 18:02:10 +0000
asID: 20473
IP address blocks: 102.212.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764 (0x2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Mar 14 18:02:10 2025 GMT
Not After : Mar 14 18:02:10 2030 GMT
Subject: CN=67d46f26-7de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:23:da:72:56:48:ea:55:99:8f:b8:b3:03:
0c:b0:fe:f7:e9:52:cc:09:02:a5:15:27:79:69:3f:
86:25:d7:b6:a3:4d:8e:4d:60:5b:8a:7f:c6:fa:7a:
e2:91:b8:3e:f1:37:11:3b:bf:5d:49:e8:97:bc:08:
12:59:64:6f:60:4f:8a:d1:97:a0:24:0a:56:c4:ff:
25:b2:e3:67:f8:78:8e:13:61:dc:1d:09:8c:07:0e:
df:d2:79:4e:0b:c5:78:a8:d8:67:94:1f:55:4c:3e:
b3:15:c5:c4:79:0c:6e:2d:13:7e:56:e0:cc:97:16:
90:11:24:67:0a:5b:90:83:08:40:2e:1d:55:58:55:
9d:0b:2f:ca:2e:b2:12:73:d2:e7:b3:b8:14:74:2f:
e9:61:f8:c7:09:9a:51:93:3c:50:73:22:20:c0:09:
ae:6d:6c:68:2c:4f:69:c5:7c:7c:ab:23:79:02:04:
42:38:ca:2c:93:ce:35:30:80:1d:0a:3a:ae:c8:19:
ee:b2:0d:06:3d:f2:29:2d:76:bd:78:65:3d:86:aa:
ce:11:6d:36:76:c3:60:24:3c:51:b0:ae:41:ef:e3:
3a:ce:7e:9c:05:f1:db:7b:20:21:c6:51:7d:9c:5d:
6e:80:ae:5e:22:4e:f8:44:f3:38:49:80:8a:b2:19:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:31:FE:81:2D:2D:1D:18:95:21:6F:B7:EC:5E:72:A8:EA:41:41
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/757FBC9E00FE11F09FD2814F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ba:e1:d4:05:dc:97:98:2a:bf:02:1b:84:97:0f:ae:3f:b7:
4c:eb:f7:a8:a7:d7:6f:bc:dd:8b:39:65:5b:41:c7:cb:63:84:
14:73:98:e0:cb:36:47:21:65:e4:cd:04:9d:44:91:07:88:c8:
0e:9f:7e:19:93:85:a2:3b:c7:46:4c:c6:45:81:a7:42:e9:b6:
93:6c:5a:30:9e:55:65:8f:19:b5:62:df:52:ee:79:f2:90:6d:
07:95:a9:43:b1:3e:81:2b:ea:05:f1:35:4e:46:ce:b5:d7:d9:
bd:8c:83:e0:af:d0:98:fe:15:35:f3:38:9e:9b:55:69:1d:d2:
41:15:3b:70:9f:1c:03:76:7a:41:7d:67:6e:12:53:40:b2:92:
86:f8:b7:0a:21:1b:72:b2:d5:d4:e9:1e:6d:01:30:a5:f0:2f:
3b:40:21:4d:55:a1:09:42:c6:de:77:4c:2e:23:ad:a0:93:b9:
98:85:e2:93:dd:f0:ca:11:43:3a:bb:93:d7:62:29:05:c3:d0:
34:38:ef:76:dd:0a:8c:bc:51:44:d7:16:a2:a0:d4:ab:18:29:
01:5f:2f:0e:53:74:f4:fe:47:1e:99:04:88:95:da:ee:18:d8:
cf:e9:0b:9b:58:e8:cc:f3:7a:a8:09:38:23:13:a4:78:d6:9b:
4d:fd:ea:33
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNTAzMTQxODAyMTBaFw0zMDAzMTQxODAyMTBaMBgxFjAU
BgNVBAMTDTY3ZDQ2ZjI2LTdkZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeGiPaclZI6lWZj7izAwyw/vfpUswJAqUVJ3lpP4Yl17ajTY5NYFuKf8b6
euKRuD7xNxE7v11J6Je8CBJZZG9gT4rRl6AkClbE/yWy42f4eI4TYdwdCYwHDt/S
eU4LxXio2GeUH1VMPrMVxcR5DG4tE35W4MyXFpARJGcKW5CDCEAuHVVYVZ0LL8ou
shJz0uezuBR0L+lh+McJmlGTPFBzIiDACa5tbGgsT2nFfHyrI3kCBEI4yiyTzjUw
gB0KOq7IGe6yDQY98iktdr14ZT2Gqs4RbTZ2w2AkPFGwrkHv4zrOfpwF8dt7ICHG
UX2cXW6Arl4iTvhE8zhJgIqyGb5lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5UQx
/oEtLR0YlSFvt+xecqjqQUEwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRB
RDlFNkZDLzc1N0ZCQzlFMDBGRTExRjA5RkQyODE0Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1AcwDQYJKoZIhvcNAQEL
BQADggEBACW64dQF3JeYKr8CG4SXD64/t0zr96in12+83Ys5ZVtBx8tjhBRzmODL
NkchZeTNBJ1EkQeIyA6ffhmThaI7x0ZMxkWBp0LptpNsWjCeVWWPGbVi31LuefKQ
bQeVqUOxPoEr6gXxNU5GzrXX2b2Mg+Cv0Jj+FTXzOJ6bVWkd0kEVO3CfHAN2ekF9
Z24SU0Cykob4twohG3Ky1dTpHm0BMKXwLztAIU1VoQlCxt53TC4jraCTuZiF4pPd
8MoRQzq7k9diKQXD0DQ473bdCoy8UUTXFqKg1KsYKQFfLw5TdPT+Rx6ZBIiV2u4Y
2M/pC5tY6MzzeqgJOCMTpHjWm0396jM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:58 2025 by rpki-client