Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/1B78052229B111F0A88218E6DAE4EC9C.roa
File: 1B78052229B111F0A88218E6DAE4EC9C.roa (raw, json)
Hash identifier: lTtW4+RgQEGUJjKPbZNiHvs7ergbcAvfTNYM91hQFPM=
Subject key identifier: 42:0B:0C:2A:DD:8A:66:37:22:3F:0B:12:EE:45:CA:86:FE:20:BE:C9
Certificate issuer: /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial: 13
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/1B78052229B111F0A88218E6DAE4EC9C.roa
Signing time: Mon 05 May 2025 13:01:50 +0000
ROA not before: Mon 05 May 2025 13:01:45 +0000
ROA not after: Tue 05 May 2026 13:01:45 +0000
asID: 328939
IP address blocks: 102.218.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 05:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Validity
Not Before: May 5 13:01:45 2025 GMT
Not After : May 5 13:01:45 2026 GMT
Subject: CN=6818b6be-cf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:8b:85:cf:51:05:3a:cf:ea:3d:f7:ad:c5:
dc:02:2d:59:0a:fd:5d:9d:ad:99:4a:22:c3:e5:94:
9b:60:94:7a:c8:0e:7b:3a:7c:ac:92:56:d3:57:f8:
c1:0f:00:d2:ab:c8:80:de:ed:9f:9f:ff:85:2b:a5:
58:82:45:18:73:44:87:7a:68:a7:a5:70:ee:47:80:
07:36:8b:8b:c2:69:7c:f7:e0:48:15:16:98:89:60:
f5:59:85:e9:b1:b9:e9:bb:99:dd:7e:8b:98:2f:65:
31:f3:04:38:eb:ce:86:48:56:34:f6:92:ff:b5:49:
9d:8e:91:df:cf:f6:3c:ac:3e:f1:77:59:b8:f5:0d:
0c:d6:4f:9c:5b:24:37:30:1b:c4:75:62:88:af:ed:
1f:5b:c0:ca:87:46:9d:f7:70:b7:5e:3a:7f:78:9b:
15:41:30:41:c8:47:37:ba:64:78:23:e5:bc:c6:ea:
8d:58:0f:60:68:64:ff:4c:6e:7b:40:5e:91:91:bd:
df:f0:19:80:b8:2a:f4:d7:3b:8e:9d:cc:3d:d8:2e:
f2:ca:a6:cb:22:12:bc:ec:a7:5c:4c:e8:e6:1f:f2:
06:90:3c:e3:74:80:0d:3f:81:36:e8:0a:cf:55:69:
bb:1d:52:3f:e9:86:03:bd:cb:d6:be:46:7c:2b:24:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:0C:2A:DD:8A:66:37:22:3F:0B:12:EE:45:CA:86:FE:20:BE:C9
X509v3 Authority Key Identifier:
keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/1B78052229B111F0A88218E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.88.0/24
Signature Algorithm: sha256WithRSAEncryption
27:55:84:1e:2b:33:0c:00:07:69:cd:26:ec:de:4e:a4:32:86:
3c:8b:84:5d:19:26:fd:77:56:eb:e9:a6:6d:bc:94:5f:a3:12:
82:b9:7a:fd:96:fd:07:95:ba:13:2f:6f:6f:8d:19:c1:99:11:
a4:49:7b:f6:2e:7c:b2:61:26:f8:02:01:53:51:28:b1:ec:ea:
05:d7:13:15:4b:ea:a5:a7:cd:9f:b0:61:12:89:81:be:9c:a4:
7e:e3:f0:8d:1e:8b:2b:2f:16:1e:c9:e9:a6:d7:20:d9:a7:77:
3b:fa:31:6d:24:2f:78:71:16:48:03:6d:d4:e4:44:e4:16:17:
9b:be:1d:8e:88:72:97:d0:9a:8a:82:e2:71:f2:f0:82:c7:1c:
be:7b:d9:7a:06:33:d2:6a:f4:99:74:d7:36:11:45:e2:5e:73:
fe:39:f0:45:d4:3c:0d:ff:a3:cf:c4:1f:c4:fb:69:bd:09:1a:
84:d4:b1:71:b0:96:e6:14:31:7d:8c:78:f3:f3:3e:2f:f1:de:
03:3b:69:65:a0:9f:06:5b:39:1f:04:0b:78:e7:66:d5:40:ef:
8c:8e:88:09:cd:2c:22:3c:3e:00:4c:e3:51:35:c8:b9:8a:a6:
24:30:b5:1e:7e:dc:71:db:9c:8c:02:8c:c9:e8:75:1b:1a:95:
eb:b9:f9:12
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBEzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
NEYxQkFGMTEwLwYDVQQFEyg0OUI0RDYxOTA5NUQ5NDMyQUY2NDYwODUzRTE0N0JF
RjVEMUM0OEIwMB4XDTI1MDUwNTEzMDE0NVoXDTI2MDUwNTEzMDE0NVowGDEWMBQG
A1UEAxMNNjgxOGI2YmUtY2YzYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFpi4XPUQU6z+o9963F3AItWQr9XZ2tmUoiw+WUm2CUesgOezp8rJJW01f4
wQ8A0qvIgN7tn5//hSulWIJFGHNEh3pop6Vw7keABzaLi8JpfPfgSBUWmIlg9VmF
6bG56buZ3X6LmC9lMfMEOOvOhkhWNPaS/7VJnY6R38/2PKw+8XdZuPUNDNZPnFsk
NzAbxHViiK/tH1vAyodGnfdwt146f3ibFUEwQchHN7pkeCPlvMbqjVgPYGhk/0xu
e0BekZG93/AZgLgq9Nc7jp3MPdgu8sqmyyISvOynXEzo5h/yBpA843SADT+BNugK
z1Vpux1SP+mGA73L1r5GfCsk3ikCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRCCwwq
3YpmNyI/CxLuRcqG/iC+yTAfBgNVHSMEGDAWgBRJtNYZCV2UMq9kYIU+FHvvXRxI
sDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzRGMUIvQTEzM0MzMkEyOTk1MTFGMEIyRjcxN0IyREFFNEVDOUMvU2JUV0dR
bGRsREt2WkdDRlBoUjc3MTBjU0xBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvU2JUV0dRbGRsREt2WkdDRlBoUjc3MTBjU0xBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzRGMUIvQTEzM0MzMkEyOTk1MTFGMEIyRjcxN0IyREFF
NEVDOUMvMUI3ODA1MjIyOUIxMTFGMEE4ODIxOEU2REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbaWDANBgkqhkiG9w0BAQsF
AAOCAQEAJ1WEHiszDAAHac0m7N5OpDKGPIuEXRkm/XdW6+mmbbyUX6MSgrl6/Zb9
B5W6Ey9vb40ZwZkRpEl79i58smEm+AIBU1EosezqBdcTFUvqpafNn7BhEomBvpyk
fuPwjR6LKy8WHsnpptcg2ad3O/oxbSQveHEWSANt1ORE5BYXm74djohyl9CaioLi
cfLwgsccvnvZegYz0mr0mXTXNhFF4l5z/jnwRdQ8Df+jz8QfxPtpvQkahNSxcbCW
5hQxfYx48/M+L/HeAztpZaCfBls5HwQLeOdm1UDvjI6ICc0sIjw+AEzjUTXIuYqm
JDC1Hn7ccducjAKMyeh1GxqV67n5Eg==
-----END CERTIFICATE-----
Generated at Sun May 11 02:00:08 2025 by rpki-client