Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/42620676DCE811EFAEFA6952762E951A.roa
File: 42620676DCE811EFAEFA6952762E951A.roa (raw, json)
Hash identifier: H3x3decKqrqFJ9a5yZPpfP+1byxiJWBltNTQbq0WcgA=
Subject key identifier: 0A:73:11:39:C0:CB:5B:05:FD:FD:48:B6:42:4F:A4:CC:74:62:36:36
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1397
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/42620676DCE811EFAEFA6952762E951A.roa
Signing time: Mon 27 Jan 2025 19:52:38 +0000
ROA not before: Mon 27 Jan 2025 19:52:33 +0000
ROA not after: Wed 27 Jan 2027 19:52:33 +0000
asID: 199959
IP address blocks: 102.129.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 13 Mar 2025 01:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5015 (0x1397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 27 19:52:33 2025 GMT
Not After : Jan 27 19:52:33 2027 GMT
Subject: CN=6797e405-e14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:96:62:2f:6a:4a:83:42:14:03:7c:73:5b:
11:f4:0e:64:2a:f8:14:5c:a8:51:d8:ea:f4:42:1d:
d7:8a:23:64:c1:73:e0:c0:f7:86:09:df:ff:10:82:
19:23:af:da:d4:6e:d4:05:cd:78:2f:2e:3a:88:c1:
d1:d2:e7:d8:60:91:e0:5d:75:67:62:7b:d5:74:e9:
05:4b:fd:41:da:08:0c:ee:ff:66:9e:35:9e:15:fe:
2a:9c:98:a7:35:2d:d5:bb:6f:00:49:4f:77:8e:6d:
77:30:22:96:ff:49:06:4e:0f:4d:c1:99:56:03:c5:
38:76:b0:58:93:2d:d2:38:9b:e9:ab:0b:82:5a:d7:
ce:26:22:88:6e:f4:69:9f:c3:47:48:8a:ff:60:f1:
a3:0f:19:a7:29:c8:a6:c6:0e:df:57:de:cb:5c:a9:
ab:50:20:d1:9d:c4:ab:e1:3a:f4:a5:bd:bc:98:90:
d3:16:c6:bc:fb:ef:31:f2:f3:84:7a:4f:60:a7:36:
df:f3:11:58:be:0a:4d:71:11:a3:73:17:30:bb:20:
ce:9a:8e:c1:43:47:8d:c2:11:cb:c4:d5:e8:87:c4:
07:4b:5e:26:1e:b8:07:88:78:b0:cd:52:40:5e:36:
45:c9:4a:5b:76:f3:36:ba:5a:a0:e3:6c:96:56:7d:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:73:11:39:C0:CB:5B:05:FD:FD:48:B6:42:4F:A4:CC:74:62:36:36
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/42620676DCE811EFAEFA6952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f1:e7:49:52:cb:4a:3b:7b:8c:5f:06:93:a4:bf:25:91:5a:
8a:c5:51:14:52:07:34:d9:08:9d:fc:d1:86:18:b0:92:1d:60:
bf:e2:50:a5:65:0e:df:75:22:96:39:cf:2c:85:43:3d:b1:87:
a0:7c:68:37:b7:5d:24:4d:9c:b2:e2:6d:ff:78:ab:4f:3b:31:
cc:1a:74:be:60:8a:cf:28:22:ec:51:1f:8f:1e:bf:fb:62:16:
cf:4b:86:a1:7d:4c:4a:4c:e6:c0:3a:06:51:2f:9f:3a:71:f8:
39:c9:8f:e9:bb:4c:44:f5:a4:fc:3d:d9:3b:5c:79:44:2e:41:
55:c6:95:33:3f:92:b5:a9:49:52:c7:c5:0a:db:cd:e5:b4:35:
cc:5d:08:32:6c:b4:e7:83:65:36:f5:0a:f8:0e:a7:fe:3a:f6:
01:31:d1:4f:12:70:61:f0:08:e4:4a:55:fe:f0:4d:ae:c1:6e:
f4:12:20:96:49:30:ae:40:6e:63:47:0d:f8:dd:84:c4:45:a8:
66:1b:a0:07:b6:9d:69:b0:6e:ab:33:84:8e:ef:b9:e7:98:b2:
97:75:b9:65:a9:5b:7e:2a:51:e0:d4:08:4a:38:d5:23:b4:23:
0b:8f:52:3b:f2:a1:15:fe:49:72:52:17:1e:d2:27:31:01:14:
2d:e5:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:32:12 2025 by rpki-client