Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/30B2F0DAD7E711EFA7B9DEB5762E951A.roa
File: 30B2F0DAD7E711EFA7B9DEB5762E951A.roa (raw, json)
Hash identifier: gWaVQig+GmXGJqLbU5n/X7PMHe/LVmklXThiBi6XOhE=
Subject key identifier: 1E:C8:64:20:DE:12:19:0C:02:69:67:37:F8:75:6A:B2:9F:A4:7A:F1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1373
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/30B2F0DAD7E711EFA7B9DEB5762E951A.roa
Signing time: Tue 21 Jan 2025 11:02:23 +0000
ROA not before: Tue 21 Jan 2025 11:02:19 +0000
ROA not after: Thu 21 Jan 2027 11:02:19 +0000
asID: 834
IP address blocks: 102.129.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4979 (0x1373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 21 11:02:19 2025 GMT
Not After : Jan 21 11:02:19 2027 GMT
Subject: CN=678f7ebe-61e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:e7:e8:7b:7c:91:2e:43:23:c9:36:9c:2f:
c0:5e:de:d7:24:82:35:94:39:eb:60:bd:cf:5b:ad:
c0:7e:4a:9c:34:56:9b:45:2e:1b:24:43:31:64:7b:
7a:73:16:61:70:a7:b1:8b:66:d3:46:07:72:af:61:
24:e1:cc:64:b6:9b:fb:5c:95:d8:da:7f:41:89:ca:
8f:2a:18:8a:7e:b0:cc:e7:0b:10:5b:fc:92:bb:d7:
28:5e:4e:2d:54:1d:09:2d:8b:ab:da:9d:04:85:5a:
72:df:f5:4d:64:8e:e1:bf:7b:c2:74:5c:a6:35:d8:
d2:8e:c5:39:aa:86:65:99:29:a7:65:1a:a1:73:be:
0d:c7:4f:1f:8f:12:a9:6d:35:37:22:fa:13:f6:8b:
68:4a:3e:ec:ad:8d:de:c2:f0:20:2a:4e:e9:05:f4:
fe:b5:51:09:46:33:ff:cb:38:9c:6c:57:3c:35:a7:
08:0f:9a:15:06:dd:28:03:c0:61:b3:31:07:52:c4:
f7:2a:ea:61:5d:2b:a0:6c:f2:2a:26:6b:e1:78:99:
8c:47:23:00:15:ec:13:14:a9:72:88:c7:93:db:73:
35:57:a3:cb:1a:e6:21:6f:21:79:65:bc:25:37:95:
85:57:b9:77:83:5e:80:e6:64:41:c0:39:e0:9e:0c:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C8:64:20:DE:12:19:0C:02:69:67:37:F8:75:6A:B2:9F:A4:7A:F1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/30B2F0DAD7E711EFA7B9DEB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:30:d1:66:9d:22:9d:da:f0:23:19:2e:e7:18:f9:2e:7c:13:
63:b9:87:99:2d:65:e1:b8:a5:ca:80:0d:a1:12:6b:f0:c9:a5:
a7:9c:ab:35:8a:b7:08:69:05:97:23:bf:eb:ef:d7:04:7f:cf:
96:5d:9e:c6:2c:d6:98:d6:97:04:75:bc:16:1a:3e:cb:a3:ba:
c1:44:9a:c8:7a:ac:09:5f:e4:b2:f9:f7:a1:fc:8b:98:28:98:
f6:ed:c1:4a:8e:dd:cb:05:24:ee:22:9d:85:f7:0c:49:74:2c:
59:77:f1:d8:47:95:85:48:33:89:61:53:f9:61:46:a7:75:05:
d8:01:c9:c5:25:5c:70:22:9b:5d:36:48:ef:2f:f1:3b:4c:2f:
e5:e5:b3:19:af:e9:22:30:be:d9:6b:6d:11:a8:5a:1e:ee:f4:
a1:ec:c8:17:d2:f3:3e:e2:88:54:c3:b3:5a:2a:ff:a2:ee:e7:
ff:8e:7b:bb:f2:11:e5:a9:52:bd:15:e0:e2:9d:e0:17:19:06:
7d:ff:c9:cc:eb:ee:3f:05:ba:83:00:08:68:29:46:1c:08:75:
db:92:24:5b:55:7a:e2:d4:dc:e5:85:f5:f9:92:9e:9d:6e:1f:
86:4f:74:9a:8a:b9:e8:8f:e1:5a:35:c7:c6:f7:ca:b8:66:6b:
d2:a2:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:25:22 2025 by rpki-client