Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DEBC850016711F0B730B67C762E951A.roa
File: 2DEBC850016711F0B730B67C762E951A.roa (raw, json)
Hash identifier: Jxd6Uq43yl1FyIYMavUIv3MUw9bxGuMQdr8wLXSokXo=
Subject key identifier: 7B:53:C7:60:44:68:8F:28:A4:44:92:45:D3:42:B8:9D:3F:96:98:1A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 140A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DEBC850016711F0B730B67C762E951A.roa
Signing time: Sat 15 Mar 2025 06:31:51 +0000
ROA not before: Sat 15 Mar 2025 06:31:47 +0000
ROA not after: Mon 15 Mar 2027 06:31:47 +0000
asID: 834
IP address blocks: 102.129.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5130 (0x140a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Mar 15 06:31:47 2025 GMT
Not After : Mar 15 06:31:47 2027 GMT
Subject: CN=67d51ed7-424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:0e:c4:ad:b6:61:a4:ab:b9:48:52:91:09:
78:75:af:6c:a2:df:b7:fd:00:29:bb:bb:6f:c5:41:
80:e4:82:9a:e1:4b:82:a7:bf:22:74:9d:a0:96:0f:
2a:fb:1d:d2:0c:7e:1e:5a:26:6f:34:d5:dd:38:e5:
c1:6c:03:6d:f8:40:0c:da:dd:66:b9:5a:04:e5:59:
32:23:70:bd:7d:a0:06:56:d7:df:c8:49:41:d7:38:
ce:47:cc:2a:56:45:b4:0a:01:e3:47:17:d7:84:0f:
38:b1:bc:98:16:17:07:1f:0c:95:33:7f:bc:ca:da:
6a:50:86:35:9c:b2:9e:7e:db:e9:73:4d:10:e5:16:
96:4d:5c:d6:d1:3a:57:e1:fe:ca:a7:b8:d8:05:fa:
c4:18:84:fd:a9:e9:18:70:39:41:77:39:01:98:a7:
e9:64:6c:01:05:38:12:6b:b2:84:fa:e9:2f:31:01:
7b:2d:19:55:a6:5a:08:61:a3:5a:ba:3c:66:e6:0b:
ef:7b:17:ec:da:2c:92:c5:c5:23:c2:b4:1e:47:3c:
78:bb:8f:6b:e9:6f:fe:0f:33:42:7c:69:b6:9e:05:
17:a9:59:ac:5f:1b:d0:98:e1:12:8c:99:07:a5:dd:
e5:ef:f2:bd:9b:2c:63:40:c3:6a:de:c0:86:79:49:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:C7:60:44:68:8F:28:A4:44:92:45:D3:42:B8:9D:3F:96:98:1A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DEBC850016711F0B730B67C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:cc:65:89:55:e8:04:71:71:49:a8:c3:18:b9:1b:8d:06:4d:
5b:d0:68:ee:ec:5c:bc:ca:ab:a4:b6:95:c2:62:43:27:f5:55:
2f:d5:47:a2:39:3a:11:bd:cb:31:f6:88:b5:70:75:f3:f0:9e:
c3:5b:2d:15:2b:46:3b:27:fd:bc:8f:a9:82:9e:7a:a8:ef:d3:
64:44:63:71:78:10:0b:93:94:10:ae:0c:6d:3d:52:15:fc:f3:
ef:76:62:bc:ba:1d:32:68:ea:83:5f:aa:d6:96:16:de:08:9a:
57:1c:1c:68:df:ec:1e:80:02:5b:4b:c4:5a:8b:5c:20:e1:f0:
93:3c:01:2a:da:89:20:15:eb:45:47:18:01:b9:10:62:98:d1:
85:7a:8b:66:b2:6c:f5:73:7d:c0:5e:0c:02:b9:35:7f:75:ec:
9a:68:51:8f:83:2f:43:61:0e:1f:e4:3a:f2:30:ae:27:a3:1d:
f2:83:ec:7a:8b:32:92:cd:bb:98:5e:a7:60:97:34:2d:00:60:
e0:23:3f:f0:85:f5:1c:fa:3c:e5:25:b6:31:1c:77:d7:28:92:
6b:3e:72:82:f4:88:7d:31:be:c1:03:38:4f:bf:c6:23:7c:8a:
f7:c4:7c:b5:2d:52:5a:99:7a:59:20:8c:56:5b:a9:0e:5e:f1:
be:13:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:49 2025 by rpki-client