Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4A4DFAA236E811F0ABFD2BD6DAE4EC9C.roa
File: 4A4DFAA236E811F0ABFD2BD6DAE4EC9C.roa (raw, json)
Hash identifier: b5OU15Ardj4RsNdtYHRcl8Wxw3l7ScnxgIVpRZJH954=
Subject key identifier: 4D:0D:65:78:C4:0A:2A:D0:B0:7B:77:F1:50:41:AB:60:AA:AD:B8:C9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14C1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4A4DFAA236E811F0ABFD2BD6DAE4EC9C.roa
Signing time: Thu 22 May 2025 08:39:36 +0000
ROA not before: Thu 22 May 2025 08:39:31 +0000
ROA not after: Mon 22 May 2028 08:39:31 +0000
asID: 213734
IP address blocks: 102.129.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5313 (0x14c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 22 08:39:31 2025 GMT
Not After : May 22 08:39:31 2028 GMT
Subject: CN=682ee2c8-794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:ab:b2:eb:b0:02:91:95:a1:6e:0b:9d:64:
52:e6:d0:12:ce:47:33:d5:e3:61:d0:bb:f7:48:85:
d7:24:a5:6d:a7:bf:16:c7:4f:cd:59:85:49:76:2c:
a9:18:72:da:41:8d:04:20:12:6a:f7:8a:32:bb:48:
30:1c:7b:f0:28:0a:25:15:97:6a:96:ab:b8:71:c4:
ce:cf:d5:f3:fe:ca:41:55:e9:c5:b3:c4:01:40:85:
b5:67:5b:98:5e:cd:58:64:fc:0d:42:15:d8:de:bf:
0f:ed:d2:f1:e4:62:52:46:5e:f7:2a:57:82:df:c6:
12:e4:63:db:cf:12:20:14:02:1c:11:a4:91:19:c0:
5f:a0:19:61:9d:e3:4b:ed:7b:79:d0:f0:7d:99:c4:
aa:e7:78:78:44:c4:ba:b9:b3:2e:46:98:b8:f2:97:
48:c4:e0:bd:f9:03:57:3b:c4:c0:7b:7d:3a:45:1a:
e8:7f:d9:b4:c0:43:3a:8b:5e:35:b3:cb:81:0c:77:
f3:11:54:7f:90:76:54:4f:b9:41:dd:aa:ae:71:a8:
d8:57:2e:b8:db:00:8f:23:97:de:10:68:8c:44:c3:
e0:ed:5b:bc:66:fb:2b:72:f1:0a:33:f0:ac:d9:5c:
51:6a:b4:76:f6:a8:4f:77:9f:82:40:23:4a:e1:80:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0D:65:78:C4:0A:2A:D0:B0:7B:77:F1:50:41:AB:60:AA:AD:B8:C9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4A4DFAA236E811F0ABFD2BD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.199.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b5:19:d7:4f:e7:ba:45:ef:ef:32:2e:fd:3c:5f:cf:6f:1e:
6b:9e:17:93:b3:8b:0f:6c:ff:32:40:64:1b:fa:9e:94:55:41:
d2:ed:d9:a6:91:27:27:79:b5:27:1d:29:2e:20:23:d4:3b:e1:
84:38:b7:e2:db:1e:cb:3e:8a:4e:68:0b:87:dd:a9:d7:36:43:
77:58:88:f0:a9:28:2d:3e:75:3e:1b:11:81:fc:7b:1e:69:c6:
02:98:40:50:f3:03:3b:9e:db:44:f8:f5:24:84:b6:16:33:18:
5c:d0:a0:ff:41:7a:72:c3:8d:02:99:37:05:fa:67:d3:00:66:
92:ef:0f:16:c5:69:cc:fa:0e:36:9a:de:6c:db:16:c5:02:1b:
b2:ad:26:16:f6:ad:b9:36:1c:e3:55:a7:34:07:8b:3b:63:8d:
25:8e:4e:2b:d0:55:fa:37:b1:d4:4c:24:38:48:17:af:f0:c4:
b8:a8:b9:08:3a:93:cd:5d:96:e5:ff:04:db:62:f0:9a:17:2c:
8d:ea:de:df:67:6d:16:bd:8f:51:dc:62:09:e0:ab:12:e4:a8:
1b:fe:51:97:b6:85:8a:59:fa:aa:ce:31:8a:e2:70:b8:ed:0a:
54:8a:7c:32:9b:21:f4:36:99:ed:6e:73:3d:78:ca:68:62:f0:
7c:d6:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:45:22 2025 by rpki-client