Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BD85E1E19BE11F089DFD1DF6DB8BCC6.roa
File: 3BD85E1E19BE11F089DFD1DF6DB8BCC6.roa (raw, json)
Hash identifier: E2Gy6q66kuu/MU9cRmEVPAMzDLyZAKKSGq/hHb3jXxk=
Subject key identifier: 5A:7D:0B:E1:87:90:1E:17:4A:F5:A3:E2:69:47:00:75:65:AA:8B:2B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1465
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BD85E1E19BE11F089DFD1DF6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 05:55:29 +0000
ROA not before: Tue 15 Apr 2025 05:55:24 +0000
ROA not after: Thu 15 Apr 2027 05:55:24 +0000
asID: 61317
IP address blocks: 102.165.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5221 (0x1465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 15 05:55:24 2025 GMT
Not After : Apr 15 05:55:24 2027 GMT
Subject: CN=67fdf4d1-bd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:ba:b1:ac:bb:35:12:9e:04:91:f0:2d:7d:
cb:68:42:eb:43:ae:fd:7f:e2:96:07:9d:99:93:b8:
3b:8e:56:c5:05:dc:f7:9e:c4:ce:d1:bf:48:30:cd:
34:ab:e4:25:eb:f7:d9:a3:52:a8:14:06:26:ed:6b:
da:7f:42:41:ea:da:6f:18:4f:ca:c2:60:c8:7e:bb:
ee:e3:66:73:ff:2f:b8:a2:8f:c5:8e:59:09:82:21:
49:ab:ea:cc:17:8c:f4:79:5c:0d:bc:d8:da:6f:40:
c7:50:e3:b5:50:db:cd:4c:f4:4e:34:d2:28:c1:3a:
9b:54:d9:f2:6d:8a:fd:78:31:f1:e5:5b:20:4b:dc:
2f:14:ce:73:30:82:58:22:6c:e5:61:df:c1:4b:92:
f9:98:c4:10:d8:c9:14:86:98:ef:36:49:77:d7:92:
e4:72:60:fb:ee:9d:50:00:aa:12:2b:d1:e4:59:df:
b7:87:51:96:fa:f2:a4:15:71:52:59:d3:fd:28:7a:
84:f3:2a:22:6a:59:20:b3:6b:74:fa:3b:c4:31:d2:
f7:39:08:dc:5a:5e:84:3f:89:59:e5:de:30:64:cf:
07:c6:a3:04:92:e3:28:ea:0b:98:04:14:83:ba:95:
23:3d:9d:6c:6f:e1:ff:4e:02:81:92:59:de:f9:fb:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:0B:E1:87:90:1E:17:4A:F5:A3:E2:69:47:00:75:65:AA:8B:2B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BD85E1E19BE11F089DFD1DF6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.10.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fc:ae:90:54:c7:6f:fd:b0:cc:c2:23:b6:8e:2b:1f:eb:0c:
dc:28:09:64:ad:29:0f:5f:18:ae:4f:2f:f1:72:91:87:14:66:
88:a7:ac:2e:0a:86:b0:8f:f9:d3:2b:19:ea:5a:cd:0a:11:96:
ff:9c:11:ef:30:01:58:0b:50:4f:c9:1e:63:83:0e:6c:88:f1:
4d:61:ae:94:26:2f:df:88:f4:12:01:ac:d9:5a:20:60:90:06:
19:ce:50:10:51:3f:6d:ff:a3:10:a3:a6:c4:2c:cd:b3:4b:c0:
7c:d1:d5:96:5f:aa:68:24:5d:43:62:51:63:53:5e:e5:8e:db:
38:0c:1f:9e:4d:f8:08:28:31:9e:c0:4d:c7:3d:e8:7f:29:85:
df:6e:76:d5:14:4c:96:ea:09:94:d3:0c:3c:48:26:f6:3d:34:
4e:22:2e:09:ea:b6:37:b8:e9:1a:04:08:04:8a:13:df:51:5b:
df:df:aa:27:56:8b:73:d6:19:2d:9b:7a:ac:96:55:60:43:0b:
aa:54:38:c4:c3:4c:91:36:94:b1:b2:9b:87:90:49:76:d8:a2:
fb:25:bb:00:42:9d:68:44:24:9f:76:13:91:2f:f3:83:b4:b4:
76:58:3d:0c:95:8f:d5:41:8c:20:36:10:92:a6:81:a5:24:0c:
71:7f:03:d1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFGUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTA0MTUwNTU1MjRaFw0yNzA0MTUwNTU1MjRaMBgxFjAU
BgNVBAMTDTY3ZmRmNGQxLWJkOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCaobqxrLs1Ep4EkfAtfctoQutDrv1/4pYHnZmTuDuOVsUF3PeexM7Rv0gw
zTSr5CXr99mjUqgUBibta9p/QkHq2m8YT8rCYMh+u+7jZnP/L7iij8WOWQmCIUmr
6swXjPR5XA282NpvQMdQ47VQ281M9E400ijBOptU2fJtiv14MfHlWyBL3C8UznMw
glgibOVh38FLkvmYxBDYyRSGmO82SXfXkuRyYPvunVAAqhIr0eRZ37eHUZb68qQV
cVJZ0/0oeoTzKiJqWSCza3T6O8Qx0vc5CNxaXoQ/iVnl3jBkzwfGowSS4yjqC5gE
FIO6lSM9nWxv4f9OAoGSWd75+8CjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWn0L
4YeQHhdK9aPiaUcAdWWqiyswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzNCRDg1RTFFMTlCRTExRjA4OURGRDFERjZEQjhCQ0M2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpQowDQYJKoZIhvcNAQEL
BQADggEBAJb8rpBUx2/9sMzCI7aOKx/rDNwoCWStKQ9fGK5PL/FykYcUZoinrC4K
hrCP+dMrGepazQoRlv+cEe8wAVgLUE/JHmODDmyI8U1hrpQmL9+I9BIBrNlaIGCQ
BhnOUBBRP23/oxCjpsQszbNLwHzR1ZZfqmgkXUNiUWNTXuWO2zgMH55N+AgoMZ7A
Tcc96H8phd9udtUUTJbqCZTTDDxIJvY9NE4iLgnqtje46RoECASKE99RW9/fqidW
i3PWGS2beqyWVWBDC6pUOMTDTJE2lLGym4eQSXbYovsluwBCnWhEJJ92E5Ev84O0
tHZYPQyVj9VBjCA2EJKmgaUkDHF/A9E=
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:38:30 2025 by rpki-client on console.sobornost.net