Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97FD916A19BD11F098553ADB6DB8BCC6.roa
File: 97FD916A19BD11F098553ADB6DB8BCC6.roa (raw, json)
Hash identifier: Yius4FvGyTqZoWFDrGx2UgudCv5X8qG7gKvCrujHIiE=
Subject key identifier: 94:6F:35:50:54:69:F1:3F:28:EF:FE:E3:60:C2:64:B2:DA:93:62:32
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 145F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97FD916A19BD11F098553ADB6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 05:50:54 +0000
ROA not before: Tue 15 Apr 2025 05:50:49 +0000
ROA not after: Thu 15 Apr 2027 05:50:49 +0000
asID: 64267
IP address blocks: 102.129.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5215 (0x145f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 15 05:50:49 2025 GMT
Not After : Apr 15 05:50:49 2027 GMT
Subject: CN=67fdf3be-f06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:2d:ff:71:0d:3c:60:77:e2:dd:5d:19:17:
84:d7:01:6a:a5:67:00:5b:fa:dc:27:f6:ca:8f:1f:
30:68:96:19:0b:38:0e:fa:5c:62:6f:0a:bd:de:72:
fc:20:ee:ef:8f:8a:6c:33:5f:4d:c2:8f:f0:7e:2f:
12:e0:90:59:57:76:66:e0:aa:58:d3:c6:73:bc:bc:
33:aa:af:69:90:e7:85:c7:34:3d:fd:79:d0:14:95:
64:31:16:aa:ab:95:b3:33:a1:7b:04:6f:66:83:f7:
3e:a3:b4:45:2a:96:86:8f:9d:d0:e5:c0:89:dc:99:
a1:8e:69:14:e2:ba:ec:83:16:40:38:26:4a:ba:0c:
2d:69:4b:d4:e2:fd:f8:be:98:8e:21:f8:c5:d0:45:
a8:cb:e1:bc:d5:76:8d:23:a0:ea:73:27:84:01:1f:
b0:c5:32:37:18:5a:f1:88:9c:cd:a2:4b:52:63:a5:
d1:c0:8b:07:bf:ac:ce:55:f6:73:12:6f:9a:93:e2:
48:3b:17:23:4e:2a:1b:a3:33:28:1a:45:d7:e6:35:
65:8f:5e:94:c2:f1:23:36:57:22:ce:75:ba:a0:65:
d6:b3:11:e5:79:0a:46:0d:10:da:a4:25:0e:f6:55:
8a:0c:c4:45:dd:89:0e:f7:7b:03:f7:64:3d:ac:18:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:35:50:54:69:F1:3F:28:EF:FE:E3:60:C2:64:B2:DA:93:62:32
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97FD916A19BD11F098553ADB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.247.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1d:f7:93:24:ec:6c:d9:b9:02:fe:d2:2b:01:23:8c:8a:ef:
52:f7:58:f1:9a:2f:28:ed:93:67:ab:46:e9:30:f7:a0:8c:47:
82:ed:34:b1:5d:23:60:30:c3:c5:b4:10:61:5f:c9:06:bc:7f:
05:51:27:e0:41:98:23:98:72:6a:37:d2:1b:b6:33:ef:17:5e:
ec:23:f1:35:93:fb:f7:f0:d4:a3:79:a7:61:25:d8:96:a3:fb:
8b:45:3c:c9:3d:59:73:19:f1:ee:41:fd:ab:ef:e2:ed:a5:eb:
c1:3a:f1:92:06:8e:5b:8d:a6:b7:de:2c:a1:15:71:14:33:66:
7a:46:29:70:6e:51:a0:e7:34:9f:e5:d7:05:1e:b1:79:f8:3d:
ca:b9:bd:44:7a:b3:a1:a6:21:bd:fd:f7:81:bd:0f:1d:1d:e6:
0f:25:62:a9:59:93:52:8b:ff:3c:f8:58:a2:29:37:05:39:78:
e2:fd:16:7c:28:4e:f1:a0:e8:59:16:7a:02:b7:c2:21:bb:f7:
f3:92:51:55:9c:a7:55:af:b6:84:a9:8b:d1:03:a3:dd:40:c2:
c5:91:99:1f:01:c5:2b:cb:a6:f6:85:04:8d:48:58:a2:d1:92:
97:ba:81:d3:f9:c9:70:fa:97:ca:64:e0:8b:46:6e:47:0e:fb:
ca:1a:af:0e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFF8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTA0MTUwNTUwNDlaFw0yNzA0MTUwNTUwNDlaMBgxFjAU
BgNVBAMTDTY3ZmRmM2JlLWYwNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGoi3/cQ08YHfi3V0ZF4TXAWqlZwBb+twn9sqPHzBolhkLOA76XGJvCr3e
cvwg7u+PimwzX03Cj/B+LxLgkFlXdmbgqljTxnO8vDOqr2mQ54XHND39edAUlWQx
FqqrlbMzoXsEb2aD9z6jtEUqloaPndDlwIncmaGOaRTiuuyDFkA4Jkq6DC1pS9Ti
/fi+mI4h+MXQRajL4bzVdo0joOpzJ4QBH7DFMjcYWvGInM2iS1JjpdHAiwe/rM5V
9nMSb5qT4kg7FyNOKhujMygaRdfmNWWPXpTC8SM2VyLOdbqgZdazEeV5CkYNENqk
JQ72VYoMxEXdiQ73ewP3ZD2sGFrRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlG81
UFRp8T8o7/7jYMJkstqTYjIwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzk3RkQ5MTZBMTlCRDExRjA5ODU1M0FEQjZEQjhCQ0M2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfcwDQYJKoZIhvcNAQEL
BQADggEBAJEd95Mk7GzZuQL+0isBI4yK71L3WPGaLyjtk2erRukw96CMR4LtNLFd
I2Aww8W0EGFfyQa8fwVRJ+BBmCOYcmo30hu2M+8XXuwj8TWT+/fw1KN5p2El2Jaj
+4tFPMk9WXMZ8e5B/avv4u2l68E68ZIGjluNprfeLKEVcRQzZnpGKXBuUaDnNJ/l
1wUesXn4Pcq5vUR6s6GmIb3994G9Dx0d5g8lYqlZk1KL/zz4WKIpNwU5eOL9Fnwo
TvGg6FkWegK3wiG79/OSUVWcp1WvtoSpi9EDo91AwsWRmR8BxSvLpvaFBI1IWKLR
kpe6gdP5yXD6l8pk4ItGbkcO+8oarw4=
-----END CERTIFICATE-----
Generated at Thu May 8 17:22:30 2025 by rpki-client