Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/040B3ABE3FE911F08F9741DDDAE4EC9C.roa
File: 040B3ABE3FE911F08F9741DDDAE4EC9C.roa (raw, json)
Hash identifier: c4CqeYP4IFqEZg2B9THN3IhaC6lGUr0Wp4tc3YM6b88=
Subject key identifier: 5B:3F:69:9E:48:B3:A8:B0:0A:98:0C:53:03:B5:5C:E3:D4:08:67:E9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14E4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/040B3ABE3FE911F08F9741DDDAE4EC9C.roa
Signing time: Mon 02 Jun 2025 19:37:28 +0000
ROA not before: Mon 02 Jun 2025 19:37:23 +0000
ROA not after: Wed 02 Jun 2027 19:37:23 +0000
asID: 9304
IP address blocks: 102.165.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5348 (0x14e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 2 19:37:23 2025 GMT
Not After : Jun 2 19:37:23 2027 GMT
Subject: CN=683dfd78-6576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:17:05:49:97:4a:21:d7:17:c9:c8:98:6d:
b4:4f:c9:1d:73:e2:7b:09:fa:0c:50:98:52:bc:57:
c9:36:42:12:f1:01:01:ac:4c:70:2b:14:e8:e7:7c:
6d:79:c8:b3:de:45:5d:06:59:06:16:35:2e:d4:47:
69:d5:a8:6f:2c:a4:38:77:96:b0:31:d7:27:ee:2e:
2a:d0:f2:86:db:e6:2e:a7:11:6f:4a:6c:07:88:62:
c1:fc:96:32:5d:0e:76:f8:30:61:70:60:6c:7d:17:
24:9a:85:36:da:52:0f:7f:21:60:ff:ba:67:de:a9:
a4:be:ac:1c:a8:60:3b:64:6f:67:aa:cb:f6:ff:e8:
3b:7c:89:1e:82:cd:a1:41:cd:ed:37:2f:1b:51:60:
9e:8b:e8:ed:22:c1:bd:b4:65:b1:61:d1:c9:30:3f:
e3:8d:ae:6b:5c:a1:1e:0c:fa:dd:43:5d:38:4c:4a:
e6:cc:70:28:3b:4d:19:31:dc:e0:a1:b4:73:e6:7d:
87:05:7b:72:e3:77:b5:c2:c9:90:dc:af:6f:60:91:
a4:6a:ae:2b:84:4f:75:8c:86:1e:0c:e3:53:be:76:
c9:dc:a3:4f:40:f0:ac:ca:cb:2b:51:76:56:3f:17:
b1:a3:56:34:4b:12:ce:14:5b:68:46:30:47:58:55:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:69:9E:48:B3:A8:B0:0A:98:0C:53:03:B5:5C:E3:D4:08:67:E9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/040B3ABE3FE911F08F9741DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:62:04:b9:29:3b:84:c8:f3:67:1d:a2:74:af:a1:36:fe:3c:
7b:41:37:7a:d2:bb:ea:07:61:fb:7f:3f:81:5a:40:43:28:1c:
08:61:c8:4c:fd:bb:38:6f:68:30:4d:9f:72:74:e2:f7:cc:f5:
f7:f2:52:2e:4b:62:e1:91:8e:80:ba:39:73:12:45:b1:fc:32:
f1:6b:b2:92:02:87:34:69:9b:59:53:ed:a7:74:37:b1:78:23:
37:b4:63:9a:4f:b7:7b:ff:15:b5:a2:1e:a1:33:53:91:98:80:
d6:c6:1c:71:b2:ad:d7:5a:ed:08:9a:dd:f2:a8:a2:da:03:ed:
e3:fe:7e:c6:6b:20:89:37:8a:b6:0f:f2:64:4e:dc:23:05:d5:
e4:db:03:bc:bf:62:d7:b9:d1:df:4f:2c:29:aa:d5:26:98:29:
09:05:e7:4f:80:9c:6b:c5:fb:63:26:03:04:37:73:58:30:1a:
26:7a:b4:00:d5:c2:02:0c:5f:a0:e5:dd:65:56:ba:f0:66:67:
eb:60:cf:6b:31:1a:b7:89:0c:15:2c:88:26:1b:27:71:3f:be:
0c:b2:23:17:b0:a8:9e:9c:5a:6c:93:39:a0:27:db:67:48:63:
4c:90:56:be:34:1d:f2:50:40:c7:0a:88:91:52:06:73:c6:54:
1e:9d:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:34 2025 by rpki-client