Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/23C75FD2114E11F096716753762E951A.roa
File: 23C75FD2114E11F096716753762E951A.roa (raw, json)
Hash identifier: HronqzA8u7pgcf2yTBTSIXAuIG0H4XHI632DcimDTOo=
Subject key identifier: 91:C4:96:4E:80:6B:E7:17:3E:A0:83:2B:51:73:DF:14:D7:53:0A:D0
Certificate issuer: /CN=F36FD195AF/serialNumber=4FD424B1E7C1D26104916A2764CE8ECE4522BD5E
Certificate serial: 0431
Authority key identifier: 4F:D4:24:B1:E7:C1:D2:61:04:91:6A:27:64:CE:8E:CE:45:22:BD:5E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/23C75FD2114E11F096716753762E951A.roa
Signing time: Fri 04 Apr 2025 12:12:55 +0000
ROA not before: Fri 04 Apr 2025 12:12:51 +0000
ROA not after: Tue 04 Dec 2035 12:12:51 +0000
asID: 329184
IP address blocks: 102.68.96.0/24 maxlen: 24
102.68.97.0/24 maxlen: 24
102.68.98.0/24 maxlen: 24
102.68.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073 (0x431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FD195AF, serialNumber=4FD424B1E7C1D26104916A2764CE8ECE4522BD5E
Validity
Not Before: Apr 4 12:12:51 2025 GMT
Not After : Dec 4 12:12:51 2035 GMT
Subject: CN=67efccc7-2296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:26:a1:c8:8f:8d:77:70:20:38:bc:5d:a0:
bf:3e:7f:17:4e:c1:b5:e3:d6:f2:d6:bb:a2:1d:1d:
bf:7a:c3:90:8d:3c:4d:04:30:41:86:f7:64:d0:f2:
a1:51:18:22:87:31:77:57:93:c2:32:36:6a:c5:f7:
e0:99:75:12:a6:bf:c7:d3:1e:b6:62:c2:20:5b:46:
ae:f2:0e:b0:99:4f:19:22:ef:04:0e:ba:72:58:2e:
56:01:2d:12:3f:6e:79:fc:c2:a0:6e:08:90:d8:35:
f2:be:7e:5a:b6:03:68:eb:25:96:2d:9d:67:9c:39:
b7:73:a2:20:95:6a:41:36:4a:3b:48:0c:05:f6:b7:
1e:5c:86:b7:e5:da:1a:58:6c:19:16:7a:38:b1:f1:
cf:2a:44:7a:dc:d1:89:33:32:a7:00:6d:63:5c:72:
de:2e:65:85:19:f1:cf:48:9c:4e:5b:4d:cf:6e:0f:
e6:25:20:65:e9:e8:8c:ab:6e:a0:81:f9:78:f4:f4:
88:f4:7c:3a:73:4b:47:c6:9e:70:77:18:d4:31:d9:
2b:ae:95:ce:3a:1a:52:57:47:4f:31:cc:96:fd:12:
28:c8:fe:6b:e5:94:4b:47:bf:45:8d:b4:38:4a:80:
2b:0e:e4:25:a8:b0:ce:35:81:1d:fc:57:f8:ab:ff:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C4:96:4E:80:6B:E7:17:3E:A0:83:2B:51:73:DF:14:D7:53:0A:D0
X509v3 Authority Key Identifier:
keyid:4F:D4:24:B1:E7:C1:D2:61:04:91:6A:27:64:CE:8E:CE:45:22:BD:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/23C75FD2114E11F096716753762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.96.0/22
Signature Algorithm: sha256WithRSAEncryption
23:9c:f1:a8:80:22:34:6c:d7:a1:1f:7e:02:2f:1e:25:c8:31:
83:8f:c2:d8:05:12:51:a7:79:c3:6c:14:e4:17:33:36:1e:0d:
ea:9f:d9:a3:22:51:21:d2:47:bc:90:cc:cf:10:69:1d:1b:7b:
21:9f:0f:a2:93:91:72:95:24:af:4d:4e:5e:36:0b:9a:b8:13:
8a:ae:cf:3a:87:06:0f:19:60:25:e9:72:22:d9:d0:44:31:07:
35:60:f4:7f:9f:03:49:98:d2:6e:57:b8:f1:00:f2:78:96:ea:
c3:40:77:78:e6:bc:6d:7f:60:2c:62:8c:e1:19:33:88:be:ea:
4e:72:ff:39:e9:a3:11:c5:01:46:58:8a:7e:3f:d7:2d:eb:c1:
6c:f2:96:13:2d:67:9f:d1:b5:08:a4:55:45:9f:5e:fb:e8:77:
93:21:a5:40:c2:ca:d6:8c:29:cf:1c:64:dc:b1:62:99:b5:8b:
b7:e6:ec:ad:7a:c4:e1:94:44:19:92:fc:e8:4d:32:d4:c9:27:
bf:cd:4c:e8:60:55:61:c1:9e:99:28:06:36:47:3d:82:bb:03:
44:34:7d:48:6c:2b:f5:29:d0:16:88:67:57:24:af:b8:08:f1:
2b:d5:b1:ab:ea:85:6b:97:f3:87:fe:27:e2:cd:8a:fa:f8:7b:
2a:ca:05:de
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkQxOTVBRjExMC8GA1UEBRMoNEZENDI0QjFFN0MxRDI2MTA0OTE2QTI3NjRDRThF
Q0U0NTIyQkQ1RTAeFw0yNTA0MDQxMjEyNTFaFw0zNTEyMDQxMjEyNTFaMBgxFjAU
BgNVBAMTDTY3ZWZjY2M3LTIyOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDI3SahyI+Nd3AgOLxdoL8+fxdOwbXj1vLWu6IdHb96w5CNPE0EMEGG92TQ
8qFRGCKHMXdXk8IyNmrF9+CZdRKmv8fTHrZiwiBbRq7yDrCZTxki7wQOunJYLlYB
LRI/bnn8wqBuCJDYNfK+flq2A2jrJZYtnWecObdzoiCVakE2SjtIDAX2tx5chrfl
2hpYbBkWejix8c8qRHrc0YkzMqcAbWNcct4uZYUZ8c9InE5bTc9uD+YlIGXp6Iyr
bqCB+Xj09Ij0fDpzS0fGnnB3GNQx2Suulc46GlJXR08xzJb9EijI/mvllEtHv0WN
tDhKgCsO5CWosM41gR38V/ir/0R1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUkcSW
ToBr5xc+oIMrUXPfFNdTCtAwHwYDVR0jBBgwFoAUT9QksefB0mEEkWonZM6OzkUi
vV4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZEMTk1L0VBMjY0RUI2RTdFQjExRUNBOTE2MUNBNkYxMjIyNDY4L1Q5UWtz
ZWZCMG1FRWtXb25aTTZPemtVaXZWNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Q5UWtzZWZCMG1FRWtXb25aTTZPemtVaXZWNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZEMTk1L0VBMjY0RUI2RTdFQjExRUNBOTE2MUNBNkYx
MjIyNDY4LzIzQzc1RkQyMTE0RTExRjA5NjcxNjc1Mzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmRGAwDQYJKoZIhvcNAQEL
BQADggEBACOc8aiAIjRs16EffgIvHiXIMYOPwtgFElGnecNsFOQXMzYeDeqf2aMi
USHSR7yQzM8QaR0beyGfD6KTkXKVJK9NTl42C5q4E4quzzqHBg8ZYCXpciLZ0EQx
BzVg9H+fA0mY0m5XuPEA8niW6sNAd3jmvG1/YCxijOEZM4i+6k5y/znpoxHFAUZY
in4/1y3rwWzylhMtZ5/RtQikVUWfXvvod5MhpUDCytaMKc8cZNyxYpm1i7fm7K16
xOGURBmS/OhNMtTJJ7/NTOhgVWHBnpkoBjZHPYK7A0Q0fUhsK/Up0BaIZ1ckr7gI
8SvVsavqhWuX84f+J+LNivr4eyrKBd4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:12 2025 by rpki-client on console.sobornost.net