Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/DBF0FB6E24F811F0968E8FD1DAE4EC9C.roa
File: DBF0FB6E24F811F0968E8FD1DAE4EC9C.roa (raw, json)
Hash identifier: r3Q8tJC2k16tqOUE3DHim88CpqkGJGsH8wKIs8GK6c8=
Subject key identifier: 1B:E2:65:FC:4B:27:4B:62:24:D5:C2:82:07:66:DD:30:B5:10:BB:DE
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 12
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/DBF0FB6E24F811F0968E8FD1DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 12:52:51 +0000
ROA not before: Tue 29 Apr 2025 12:52:46 +0000
ROA not after: Thu 30 Apr 2026 12:52:46 +0000
asID: 329489
IP address blocks: 102.207.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.mft
rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 04 May 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: Apr 29 12:52:46 2025 GMT
Not After : Apr 30 12:52:46 2026 GMT
Subject: CN=6810cba3-0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:5c:e0:1f:38:26:79:22:7e:d6:9f:df:14:
ae:0e:2a:93:2c:a1:3b:cb:20:c3:b6:39:4a:93:84:
f2:44:5f:a6:ab:7e:a3:e2:e0:b8:1b:47:8e:91:b4:
77:36:4b:06:a3:7f:7f:3e:fe:3c:23:17:f8:76:40:
78:df:d7:08:a5:7d:25:13:da:10:2e:0f:df:b5:bb:
e3:db:07:bd:15:51:30:ff:9c:33:83:74:cf:3f:45:
57:c2:86:c9:d7:b6:49:88:bb:30:03:97:c1:c8:c9:
dc:51:a6:09:b8:ff:cb:5e:71:de:b8:bd:77:6b:c5:
6b:e3:a2:e8:b6:ad:f5:3d:56:5f:f0:61:b6:5b:9e:
33:e8:24:0b:d3:c3:5c:cc:62:a0:0d:ef:fd:7f:21:
dd:f6:62:dd:e6:71:f2:1f:c9:aa:cf:41:95:97:6e:
9b:41:10:fd:f3:ea:c5:23:8f:a1:6c:d4:33:73:c6:
25:b1:7a:d7:cb:26:37:12:2f:16:d4:1e:54:b1:5c:
11:d3:51:0c:b0:20:1d:de:4f:ed:1a:1a:5b:67:cb:
f8:2a:18:de:78:11:11:eb:4f:c5:80:12:a8:6c:c3:
90:9a:e2:22:ce:ef:57:29:e9:ac:9e:56:99:5d:43:
a9:32:b5:1b:1d:2f:dd:a4:80:16:4c:b7:0d:ae:dc:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E2:65:FC:4B:27:4B:62:24:D5:C2:82:07:66:DD:30:B5:10:BB:DE
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/DBF0FB6E24F811F0968E8FD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.248.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c3:70:98:7a:68:11:63:4c:fd:15:2b:e6:2b:be:71:05:76:
98:fc:25:2d:b6:17:ba:5f:17:61:2c:52:61:dd:0e:d4:b5:59:
30:18:d6:72:32:7e:4d:06:5a:18:46:dc:1b:8b:5d:8c:7a:f3:
92:0a:72:80:9c:07:33:ec:b9:0f:7a:54:cf:cb:0c:27:33:a1:
5d:f7:95:f8:66:b9:ba:9a:af:8e:cf:a5:55:8e:64:00:c8:27:
b4:43:97:e4:02:6e:e0:95:0f:22:46:3b:29:08:2b:cb:51:ea:
58:34:4d:f9:66:25:cd:e7:27:7a:f4:c3:d3:45:8a:c4:db:e0:
02:8c:ae:3b:23:56:a4:72:5c:2d:bd:dd:e5:4a:a1:aa:ff:76:
3f:8e:e9:87:4d:9a:50:ab:7c:58:36:68:3f:f8:26:9a:c6:80:
f9:ba:f7:bd:64:08:9a:ca:1e:7b:6b:1d:d1:84:e6:a6:d5:bb:
b9:e5:22:49:6e:c8:ee:42:47:71:96:6d:7f:a4:f9:bd:dd:c8:
e6:b8:ca:3f:50:0e:c8:a4:f9:03:f9:7a:6f:7b:db:43:45:16:
c2:e7:8c:57:fc:43:c0:89:ff:66:cb:a6:e4:ea:13:d3:08:97:
13:9f:54:10:fb:d0:0e:65:12:af:52:e7:b5:a7:ce:8e:49:16:
9d:4f:28:b8
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NkQ1NEFGMTEwLwYDVQQFEyg0MDg5NTg4ODFCOTRFMzU2ODFFREMxRDFERjA4NTlG
NzcxMzZBMEE1MB4XDTI1MDQyOTEyNTI0NloXDTI2MDQzMDEyNTI0NlowGDEWMBQG
A1UEAxMNNjgxMGNiYTMtMDA4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALwqXOAfOCZ5In7Wn98Urg4qkyyhO8sgw7Y5SpOE8kRfpqt+o+LguBtHjpG0
dzZLBqN/fz7+PCMX+HZAeN/XCKV9JRPaEC4P37W749sHvRVRMP+cM4N0zz9FV8KG
yde2SYi7MAOXwcjJ3FGmCbj/y15x3ri9d2vFa+Oi6Lat9T1WX/BhtlueM+gkC9PD
XMxioA3v/X8h3fZi3eZx8h/Jqs9BlZdum0EQ/fPqxSOPoWzUM3PGJbF618smNxIv
FtQeVLFcEdNRDLAgHd5P7RoaW2fL+CoY3ngREetPxYASqGzDkJriIs7vVynprJ5W
mV1DqTK1Gx0v3aSAFky3Da7c/JECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQb4mX8
SydLYiTVwoIHZt0wtRC73jAfBgNVHSMEGDAWgBRAiViIG5TjVoHtwdHfCFn3cTag
pTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZENTQvRjQ2RDExODYyMjc0MTFGMEEwRkRGMjdFREFFNEVDOUMvUUlsWWlC
dVU0MWFCN2NIUjN3aFo5M0Uyb0tVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUUlsWWlCdVU0MWFCN2NIUjN3aFo5M0Uyb0tVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZENTQvRjQ2RDExODYyMjc0MTFGMEEwRkRGMjdFREFF
NEVDOUMvREJGMEZCNkUyNEY4MTFGMDk2OEU4RkQxREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbP+DANBgkqhkiG9w0BAQsF
AAOCAQEAAcNwmHpoEWNM/RUr5iu+cQV2mPwlLbYXul8XYSxSYd0O1LVZMBjWcjJ+
TQZaGEbcG4tdjHrzkgpygJwHM+y5D3pUz8sMJzOhXfeV+Ga5upqvjs+lVY5kAMgn
tEOX5AJu4JUPIkY7KQgry1HqWDRN+WYlzecnevTD00WKxNvgAoyuOyNWpHJcLb3d
5Uqhqv92P47ph02aUKt8WDZoP/gmmsaA+br3vWQImsoee2sd0YTmptW7ueUiSW7I
7kJHcZZtf6T5vd3I5rjKP1AOyKT5A/l6b3vbQ0UWwueMV/xDwIn/Zsum5OoT0wiX
E59UEPvQDmUSr1LntafOjkkWnU8ouA==
-----END CERTIFICATE-----
Generated at Fri May 2 12:02:21 2025 by rpki-client