Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/135197B43D7A11F0A606E890DAE4EC9C.roa
File: 135197B43D7A11F0A606E890DAE4EC9C.roa (raw, json)
Hash identifier: OzJegZaa9094L8k1+DdWYafFkALFoLsZXL2GOgbUUuQ=
Subject key identifier: FF:D0:24:7E:38:0E:7E:DC:5B:CB:B3:8A:10:91:08:51:76:62:BB:CF
Certificate issuer: /CN=F36C29E6AR/serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Certificate serial: 0C
Authority key identifier: 26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
Authority info access: rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/135197B43D7A11F0A606E890DAE4EC9C.roa
Signing time: Fri 30 May 2025 17:18:17 +0000
ROA not before: Fri 30 May 2025 17:18:12 +0000
ROA not after: Fri 29 May 2026 17:18:12 +0000
asID: 327947
IP address blocks: 129.122.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft
rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C29E6AR, serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Validity
Not Before: May 30 17:18:12 2025 GMT
Not After : May 29 17:18:12 2026 GMT
Subject: CN=6839e859-fa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:09:68:9e:b4:f4:99:99:45:69:67:c5:ca:
2b:da:0b:7f:bc:d2:ac:bc:c9:c0:3c:0d:7c:de:c1:
74:c2:ca:01:fc:94:63:92:4c:e7:e2:9c:59:12:62:
de:c1:7c:f8:5e:c0:a9:0e:36:bd:bb:41:87:a6:f7:
e8:9c:6a:b9:95:45:a3:4a:6d:9e:05:18:01:c5:ad:
e2:d7:0c:8b:11:c3:1f:4d:47:d6:f9:a8:3b:38:84:
7e:9c:42:07:42:ff:bb:f4:5c:ca:15:68:2b:c4:57:
9c:94:7c:d2:cf:b5:52:59:72:0a:ca:53:47:12:53:
c3:16:1e:af:53:59:fe:a1:7f:a6:25:d7:4d:a7:bc:
8a:e5:5d:ac:a9:db:bc:f1:5e:95:b0:b5:b8:61:13:
26:72:5a:ce:74:89:61:4e:d7:50:64:ba:df:87:05:
24:d7:62:56:d8:cc:40:3d:2a:df:12:8e:51:85:fd:
bb:a4:0e:97:2e:17:5f:99:1d:98:2a:cb:c0:12:80:
b6:c5:6e:36:c8:75:16:56:b5:45:cf:0f:a1:8d:35:
c8:0f:4e:fb:50:1f:f3:f3:68:27:b9:fa:00:22:c4:
48:6c:b6:3c:d5:ef:34:e8:38:8c:08:59:b3:75:f7:
76:7e:3a:4d:0c:b8:fa:2c:70:95:55:48:b4:35:98:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:24:7E:38:0E:7E:DC:5B:CB:B3:8A:10:91:08:51:76:62:BB:CF
X509v3 Authority Key Identifier:
keyid:26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/135197B43D7A11F0A606E890DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.122.48.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:4b:c3:93:7e:99:45:08:c3:bf:4e:04:ae:c3:7d:20:fc:b3:
b7:fc:7f:4a:b3:7e:50:d6:7a:b6:98:19:29:ba:91:8c:9f:71:
6e:d5:a0:01:d5:30:a4:0e:6c:5e:8d:b6:8c:ad:3b:90:76:16:
f2:ea:fb:23:8b:81:1f:42:ac:3b:b0:89:c9:e3:c7:36:80:4b:
61:66:f4:d3:46:21:06:2a:5b:27:94:40:d9:f0:18:59:c0:7d:
56:b5:21:21:57:6b:33:c9:4d:59:29:2c:57:bd:c7:13:60:50:
17:4e:fa:98:a8:e5:30:a6:5a:c6:a9:c7:ce:65:ad:6f:05:48:
19:4a:51:6d:7b:85:bb:4d:a9:11:7b:2b:5d:fe:23:e9:68:e6:
f6:63:19:e0:dc:83:78:6e:38:7e:ce:c5:33:5a:5e:a8:22:37:
32:a2:ba:37:d8:00:dd:fa:b2:d4:09:3f:72:16:87:83:cd:94:
2b:03:fe:c5:5d:9b:81:03:26:8f:ad:12:1f:ac:68:2e:67:60:
31:6e:a2:cc:3a:f2:90:45:d7:a8:89:ec:50:52:b5:bd:33:43:
ac:cb:f7:5e:cb:1d:c4:b6:99:27:12:9d:61:27:4c:32:9e:e6:
34:71:71:01:3a:8e:29:19:dd:8d:e2:89:9c:dc:1f:8f:2d:c6:
17:fa:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:13 2025 by rpki-client