Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0326B8E436E811F0BC5624D4DAE4EC9C.roa
File: 0326B8E436E811F0BC5624D4DAE4EC9C.roa (raw, json)
Hash identifier: kJETNSoHPyg8Xa5+mEnwS9Ulsfjz4dlbGp6GmOZeAL8=
Subject key identifier: 42:14:19:75:52:AD:4D:66:78:FD:6D:0B:95:71:1E:C0:AD:C7:2B:6A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14BE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0326B8E436E811F0BC5624D4DAE4EC9C.roa
Signing time: Thu 22 May 2025 08:37:36 +0000
ROA not before: Thu 22 May 2025 08:37:32 +0000
ROA not after: Mon 22 May 2028 08:37:32 +0000
asID: 213734
IP address blocks: 102.129.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5310 (0x14be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 22 08:37:32 2025 GMT
Not After : May 22 08:37:32 2028 GMT
Subject: CN=682ee250-d816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:ca:35:16:63:29:b5:78:6f:b2:b6:b5:03:
5f:47:42:7d:17:40:61:c6:37:0c:85:5b:78:f0:da:
d0:33:d9:bc:03:bf:a8:e2:f9:51:63:b7:06:8c:63:
09:27:e8:26:bb:f0:58:d6:e5:f3:f4:d0:8a:e2:3d:
ad:ce:07:fe:7a:cb:26:ba:34:8e:5a:62:05:de:1a:
48:03:f6:49:30:c5:0b:54:91:6b:ee:28:25:17:f5:
2c:16:bb:4f:6c:5f:ab:70:96:f1:a9:0a:5c:f3:c8:
fa:c7:4b:4d:89:a9:e5:ff:cc:b9:2b:2f:c4:ae:48:
f2:4f:10:93:59:b3:24:a6:95:3a:2c:21:2b:46:bb:
a9:32:68:f5:17:4c:66:d2:81:05:be:9a:e9:82:ef:
b7:0e:09:14:52:c1:87:f4:3c:b7:c1:0c:61:1a:57:
26:fa:ce:f8:72:56:28:f4:fa:ff:9a:2b:3d:a7:2b:
cd:94:4c:2b:a1:62:ac:48:92:4e:c8:01:cc:e3:ad:
68:0c:fe:39:5e:0a:d5:c8:d5:b1:09:fa:e0:aa:55:
c8:fe:48:70:0a:5c:ee:08:1f:e4:ad:7c:a9:e4:ef:
f9:17:6a:4f:9e:f8:d3:4c:20:0d:79:f5:8c:c9:82:
63:b5:1f:17:ed:a2:94:a2:0d:b5:66:d2:8e:2c:df:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:19:75:52:AD:4D:66:78:FD:6D:0B:95:71:1E:C0:AD:C7:2B:6A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0326B8E436E811F0BC5624D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:aa:21:3d:87:23:99:58:20:c2:f0:2b:67:cf:51:4a:a3:9f:
8e:83:4c:5a:46:c6:e2:0d:0e:25:97:76:e7:b1:91:14:64:90:
4d:c0:50:72:22:97:82:70:f3:b2:55:c2:6f:d8:9e:a8:96:19:
8e:85:9f:ad:73:88:d1:91:b1:b0:3a:a9:7d:1a:3a:7e:a9:27:
7b:96:1d:49:30:74:5e:74:c0:6b:20:b4:ce:29:f4:32:0a:01:
5f:05:02:52:f1:30:39:91:c1:3d:b4:b7:1f:2c:ca:e3:ed:a4:
f4:ba:9f:67:52:3d:a0:f6:5d:f6:95:cf:fc:c9:46:31:91:5a:
2b:6e:aa:ad:bf:fa:5f:a8:db:a4:2a:8b:09:b5:87:3a:28:d5:
fc:c5:46:86:1f:59:ed:57:bd:92:eb:b8:05:6a:14:c4:98:76:
8e:0e:32:27:b7:36:c1:38:f0:e5:1d:2d:9a:57:91:03:90:a2:
96:e0:81:73:5e:e9:7a:6a:05:b5:d3:c5:bc:60:38:0d:a8:5d:
14:45:b8:01:7c:01:c5:8d:59:90:8d:14:43:5c:da:1c:0e:7b:
39:00:d2:48:1f:68:15:88:83:1b:0a:f0:a1:dc:84:a1:da:36:
a1:38:85:a8:90:36:db:d3:5e:b8:59:44:19:e4:8f:13:d3:d2:
67:a1:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:22 2025 by rpki-client