Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/DF18A1E640CF11F09299DFB6DAE4EC9C.roa
File: DF18A1E640CF11F09299DFB6DAE4EC9C.roa (raw, json)
Hash identifier: ztjI0ZwpfaRw5ubRwQgZNSs1wBiMAXUEL6HQoRKIjlI=
Subject key identifier: C8:79:8F:64:79:BD:35:06:35:48:9B:80:AD:6C:78:60:45:5F:FE:08
Certificate issuer: /CN=F36BC6CCAF/serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Certificate serial: 8C
Authority key identifier: 31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/DF18A1E640CF11F09299DFB6DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 23:10:00 +0000
ROA not before: Wed 04 Jun 2025 23:09:55 +0000
ROA not after: Fri 04 Jun 2032 23:09:55 +0000
asID: 37563
IP address blocks: 102.128.128.0/24 maxlen: 24
102.128.129.0/24 maxlen: 24
102.128.130.0/24 maxlen: 24
102.128.131.0/24 maxlen: 24
102.128.132.0/24 maxlen: 24
102.128.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 05:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC6CCAF, serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Validity
Not Before: Jun 4 23:09:55 2025 GMT
Not After : Jun 4 23:09:55 2032 GMT
Subject: CN=683f80c8-e15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:03:81:3e:77:0f:19:a6:f3:32:2d:70:c9:
d3:d7:71:94:71:8c:d3:a6:da:91:8f:5d:25:d0:08:
18:b9:ee:75:89:09:23:52:51:e4:6f:cf:86:c4:93:
19:e2:75:47:52:5b:fa:b8:37:f5:9c:8f:a9:64:55:
36:6a:74:a4:e3:fb:40:93:f6:39:03:11:e5:e5:19:
4d:9a:24:65:ed:20:0f:2d:33:bf:89:48:99:29:d1:
ec:ce:26:f5:29:f6:34:83:86:4e:46:6b:25:b1:f0:
07:07:83:6b:08:fb:99:01:56:10:cc:06:6e:12:41:
93:45:8f:bb:14:9f:5a:b7:99:67:53:d3:71:dd:71:
3d:fb:7e:bc:be:1b:cd:75:da:8f:8b:54:c4:21:1b:
aa:5f:d2:90:70:e5:41:6d:dc:ea:ae:b1:af:18:e2:
5a:13:72:54:e7:91:24:47:c4:7d:8b:21:36:ad:dc:
d1:7b:1c:49:66:d9:43:74:c5:82:d1:d3:a6:b8:2d:
e1:ea:65:df:61:54:e7:cc:a9:38:ad:aa:ea:fb:b7:
33:d2:1a:8d:92:76:06:c9:70:ef:3f:90:9d:60:26:
4c:5e:f6:95:97:0e:5a:e4:a3:c7:e8:aa:ab:b0:81:
50:32:6d:f8:c6:24:2c:8a:16:b4:47:c7:94:10:ba:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:79:8F:64:79:BD:35:06:35:48:9B:80:AD:6C:78:60:45:5F:FE:08
X509v3 Authority Key Identifier:
keyid:31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/DF18A1E640CF11F09299DFB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.128.0-102.128.133.255
Signature Algorithm: sha256WithRSAEncryption
58:fa:ff:26:1e:2d:59:78:9c:0b:01:d8:6e:05:78:ea:3e:ce:
a0:7f:f5:69:a7:6d:d9:ae:ea:ea:3c:b6:a9:06:38:b4:cf:cd:
c2:4c:3e:c8:2b:5f:c9:8a:ca:77:78:6b:60:ab:16:25:e8:82:
39:2d:0d:a0:54:5e:a2:28:4f:43:6e:7b:6b:c3:a1:a4:35:4c:
d0:b8:c4:16:2f:b9:0d:ca:cc:39:00:df:ac:57:63:c5:19:0b:
55:c7:93:8e:b9:c6:62:86:cc:6f:16:ab:1d:19:f9:21:39:82:
1e:75:3a:9b:a0:38:1c:af:ee:fe:71:0b:a8:3f:07:08:3c:6e:
2b:0c:3a:8a:c4:45:04:7a:fb:d0:10:b5:4a:ca:96:a9:1f:35:
26:48:02:38:b8:c8:3c:88:be:ae:e7:03:93:45:09:d7:fc:5e:
11:21:c0:fe:11:1f:3d:cb:0c:78:e1:ba:7d:f8:34:61:af:ab:
f2:74:3e:ea:72:b1:68:31:f8:0f:c0:1a:8c:b0:b2:3b:06:35:
bf:dc:68:19:1f:9e:bd:7e:57:7d:ed:13:0e:f1:2e:41:2d:10:
b2:3d:27:56:75:45:b7:9f:18:99:4e:04:46:d6:4e:ba:8c:d3:
2a:e1:21:7a:68:dd:76:3d:cc:5c:7e:d4:f9:10:42:b8:cb:05:
c0:e0:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:20:35 2025 by rpki-client