Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DB1D926E86011EFA97CB87D762E951A.roa
File: 2DB1D926E86011EFA97CB87D762E951A.roa (raw, json)
Hash identifier: tvUmdJBZNUWbl2njMRJnxbvyZr4Ryz4QSHqOMGBdyBA=
Subject key identifier: D9:4B:51:A8:BC:E9:5A:8D:35:D7:05:C3:8C:B3:83:F4:E6:6E:4E:16
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13BE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DB1D926E86011EFA97CB87D762E951A.roa
Signing time: Tue 11 Feb 2025 10:08:45 +0000
ROA not before: Tue 11 Feb 2025 10:08:42 +0000
ROA not after: Sat 13 Feb 2027 10:08:42 +0000
asID: 61317
IP address blocks: 102.129.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5054 (0x13be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 10:08:42 2025 GMT
Not After : Feb 13 10:08:42 2027 GMT
Subject: CN=67ab21ad-af95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:2b:c3:d3:78:2c:b9:1e:7e:58:6b:5a:65:
09:e8:c0:3f:9f:a1:b1:55:45:3d:9e:fa:9b:3a:65:
4c:75:f6:15:69:14:30:48:b3:1f:09:34:77:05:e8:
6a:04:03:fb:ca:42:25:7b:ae:65:55:eb:58:1d:c0:
b4:ad:3a:35:92:07:cc:23:aa:8b:49:b8:31:0e:c8:
01:dc:a5:2b:4a:ff:5c:28:bd:65:65:c4:d5:bb:19:
71:d8:48:f6:44:9c:4a:cd:0d:ef:cf:d4:92:50:9e:
fd:23:1f:c1:18:d6:55:27:6c:73:78:2d:7b:c6:cf:
fb:3c:57:54:a5:ac:f0:28:f1:3a:51:56:f8:a8:d2:
4e:dd:ca:22:9d:ce:ed:4f:0c:76:9d:3a:06:1d:d3:
ef:04:f1:37:90:31:af:01:82:e7:ed:1e:63:56:2e:
28:26:86:2b:98:ce:64:d6:d6:40:48:fb:ca:a1:c2:
b1:d1:04:5b:f0:55:3b:5b:29:cc:3b:6b:28:57:b9:
66:10:d5:48:b2:85:d2:5c:d5:87:3f:15:c8:f5:8f:
13:65:42:ab:97:be:a5:97:15:84:73:9d:3c:0b:6b:
4e:a4:36:b1:37:6a:05:15:7c:e1:f6:87:55:b3:86:
aa:e7:fd:ef:77:c3:0a:f8:ca:1e:bb:4a:60:49:85:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:51:A8:BC:E9:5A:8D:35:D7:05:C3:8C:B3:83:F4:E6:6E:4E:16
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DB1D926E86011EFA97CB87D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d8:93:35:81:1f:d5:4e:8d:b3:21:5d:9c:90:1d:88:dc:d7:
e7:63:84:b3:3c:92:16:2a:07:7b:f2:93:57:0a:da:48:0a:5f:
f5:20:b4:57:df:a9:e0:47:98:d2:d9:d7:cd:64:43:60:21:e2:
a0:3c:93:43:db:cc:5c:51:f1:84:05:1a:d1:62:84:ce:22:89:
08:30:89:b1:19:11:aa:24:57:63:18:e8:b7:23:73:0b:e5:eb:
98:4d:d5:3a:d5:82:17:3d:86:65:b5:ad:67:df:cc:02:62:7b:
9e:2d:dc:1d:64:ee:85:bc:ff:03:8c:cb:fd:91:d6:b9:e5:d3:
05:1a:01:71:b6:ac:69:da:40:4e:c8:2d:19:27:ad:c1:a3:82:
a0:2d:cf:e4:f4:4f:83:25:5c:c3:fe:3d:a6:c6:3d:eb:46:9a:
e2:29:c2:4a:d5:f3:25:80:c9:47:a9:82:09:86:ab:a0:2b:93:
e6:e8:c2:2a:e3:89:8a:f3:09:57:1e:36:65:59:1d:74:bb:a1:
ef:52:83:9a:b3:9e:2d:69:bd:18:ec:0c:06:f6:f3:87:bd:7e:
b8:db:f2:c2:93:23:8a:e1:5d:85:e7:57:7f:bb:54:00:e4:fb:
4b:55:c1:2f:b1:94:f7:9e:54:95:a9:56:8d:3c:55:97:71:b1:
72:eb:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:31 2025 by rpki-client