Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D9689C215E411F096DA911C6EB8BCC6.roa
File: 1D9689C215E411F096DA911C6EB8BCC6.roa (raw, json)
Hash identifier: My8eczw0fXZs7qkDVBe4CM6eOyiBiKpEfcAH9L0MXbw=
Subject key identifier: E4:16:B2:BB:FC:0D:1A:98:B9:39:AB:82:4F:D6:8F:06:F2:75:33:D2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 143F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D9689C215E411F096DA911C6EB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:16:34 +0000
ROA not before: Thu 10 Apr 2025 08:16:30 +0000
ROA not after: Mon 10 Apr 2028 08:16:30 +0000
asID: 7018
IP address blocks: 102.129.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5183 (0x143f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 10 08:16:30 2025 GMT
Not After : Apr 10 08:16:30 2028 GMT
Subject: CN=67f77e62-c42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:93:91:3a:72:a9:a5:ca:20:45:30:0c:28:
f1:4f:3f:ed:0b:61:24:e8:11:93:a4:bc:d0:d4:be:
2f:43:ad:ba:9f:f8:87:7d:33:d6:18:bd:79:a3:ab:
de:e3:2c:d5:ed:c7:da:9e:e2:81:c5:1b:64:28:ee:
9c:ea:b5:f8:21:2a:70:9e:5e:5e:d3:a2:4c:58:b2:
61:5c:51:fc:17:11:ee:28:1d:49:09:5e:26:f9:66:
ef:9b:5b:71:51:84:43:19:3f:1f:c2:d4:d0:ae:f5:
28:b5:89:35:c2:f6:40:87:e8:68:a7:39:76:83:42:
ad:17:e3:1b:fe:61:0c:19:8a:ad:6d:41:ba:cc:60:
8c:88:93:1c:7b:64:64:61:75:6e:77:be:13:24:d1:
80:11:75:b9:da:04:0b:04:b3:5d:93:df:f7:62:ba:
f7:a3:d7:24:1a:c5:8d:df:e9:7c:fd:e7:be:f9:9b:
d2:d3:a4:d6:69:5b:69:88:33:14:5f:5f:60:d9:a1:
51:fc:fa:ef:ea:ce:85:90:7e:78:1b:75:10:13:31:
67:fe:de:ef:41:b7:6d:92:8e:34:50:07:9f:84:cb:
d0:1d:a8:32:fc:4b:2f:8f:5b:1a:4d:7e:ab:19:f0:
a4:24:0c:27:80:aa:70:a3:a5:aa:49:28:dd:a2:c1:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:16:B2:BB:FC:0D:1A:98:B9:39:AB:82:4F:D6:8F:06:F2:75:33:D2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D9689C215E411F096DA911C6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.170.0/24
Signature Algorithm: sha256WithRSAEncryption
26:de:1a:6c:19:20:19:53:4e:3f:c3:69:86:f5:c0:9f:f4:3c:
93:84:ce:ad:f6:b0:05:45:6a:19:18:11:bd:19:af:8f:c2:4b:
a0:7b:55:5c:f8:9f:37:a8:ef:59:25:f6:c9:cd:7c:a0:d8:2d:
53:22:fd:51:2e:ce:e6:f9:92:5f:4e:00:b4:71:b5:d0:58:84:
64:7a:e1:2d:02:66:02:25:96:f5:28:26:a1:79:5c:8a:5c:6e:
84:6e:94:57:da:f9:0c:40:2e:9a:5d:2c:90:35:f4:ef:05:05:
4a:07:17:b5:de:65:20:65:78:57:15:fc:2f:17:90:1c:69:d3:
45:b6:9e:93:8d:c9:74:79:b0:ee:a7:66:01:a2:dc:66:db:9a:
4b:7d:af:f1:ca:a7:3c:b2:74:2e:ff:c2:a8:1c:41:7e:eb:bc:
a2:da:29:95:c5:02:8b:89:28:5f:72:3e:ad:cd:5d:9b:d7:1d:
70:78:2a:45:6f:bc:88:6c:87:98:44:69:25:fb:16:84:06:96:
9c:15:83:0a:7b:d3:37:b7:e4:cd:e6:1e:ed:30:da:3b:fd:1e:
ad:4f:62:d0:32:4a:2e:65:e0:6a:ae:95:54:ba:d8:a9:df:2b:
0f:28:7e:9a:bf:94:29:29:e6:c0:9c:94:5b:33:11:4c:8b:f2:
8e:e6:de:15
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFD8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTA0MTAwODE2MzBaFw0yODA0MTAwODE2MzBaMBgxFjAU
BgNVBAMTDTY3Zjc3ZTYyLWM0MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRnZOROnKppcogRTAMKPFPP+0LYSToEZOkvNDUvi9Drbqf+Id9M9YYvXmj
q97jLNXtx9qe4oHFG2Qo7pzqtfghKnCeXl7TokxYsmFcUfwXEe4oHUkJXib5Zu+b
W3FRhEMZPx/C1NCu9Si1iTXC9kCH6GinOXaDQq0X4xv+YQwZiq1tQbrMYIyIkxx7
ZGRhdW53vhMk0YARdbnaBAsEs12T3/diuvej1yQaxY3f6Xz95775m9LTpNZpW2mI
MxRfX2DZoVH8+u/qzoWQfngbdRATMWf+3u9Bt22SjjRQB5+Ey9AdqDL8Sy+PWxpN
fqsZ8KQkDCeAqnCjpapJKN2iwUHXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5Bay
u/wNGpi5OauCT9aPBvJ1M9IwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzFEOTY4OUMyMTVFNDExRjA5NkRBOTExQzZFQjhCQ0M2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaowDQYJKoZIhvcNAQEL
BQADggEBACbeGmwZIBlTTj/DaYb1wJ/0PJOEzq32sAVFahkYEb0Zr4/CS6B7VVz4
nzeo71kl9snNfKDYLVMi/VEuzub5kl9OALRxtdBYhGR64S0CZgIllvUoJqF5XIpc
boRulFfa+QxALppdLJA19O8FBUoHF7XeZSBleFcV/C8XkBxp00W2npONyXR5sO6n
ZgGi3Gbbmkt9r/HKpzyydC7/wqgcQX7rvKLaKZXFAouJKF9yPq3NXZvXHXB4KkVv
vIhsh5hEaSX7FoQGlpwVgwp70ze35M3mHu0w2jv9Hq1PYtAySi5l4GqulVS62Knf
Kw8ofpq/lCkp5sCclFszEUyL8o7m3hU=
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:38:29 2025 by rpki-client on console.sobornost.net