Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/54D05E10041C11F0979A4344762E951A.roa
File: 54D05E10041C11F0979A4344762E951A.roa (raw, json)
Hash identifier: byK3fG/jdldhmqIxQMCJYi+uxojNh82to5VQALRT6bA=
Subject key identifier: 43:66:97:1E:6A:F1:7D:AC:74:9F:EB:1A:D5:97:AB:BD:4B:70:F0:55
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 141B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/54D05E10041C11F0979A4344762E951A.roa
Signing time: Tue 18 Mar 2025 17:13:38 +0000
ROA not before: Tue 18 Mar 2025 17:13:34 +0000
ROA not after: Thu 18 Mar 2027 17:13:34 +0000
asID: 212609
IP address blocks: 102.129.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5147 (0x141b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Mar 18 17:13:34 2025 GMT
Not After : Mar 18 17:13:34 2027 GMT
Subject: CN=67d9a9c2-796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e1:6b:60:ac:1a:dd:ac:b7:ab:5e:6f:fe:e5:
4b:25:61:c5:c9:ae:7b:04:5b:9f:54:18:19:01:bb:
f5:b8:c2:2b:ac:09:35:74:f7:d3:8c:b8:1c:ff:e4:
ac:70:79:a3:78:c5:44:f5:ae:c2:bf:74:f7:af:ae:
ff:69:a4:38:44:1f:8b:24:73:e1:ae:92:be:a5:2e:
e2:17:81:aa:7b:e4:d2:e4:9a:2d:9b:0f:d3:01:f3:
60:d8:e0:63:aa:7b:7d:41:ba:c1:92:75:ee:a7:f1:
a9:e1:69:d6:3b:0f:50:a2:11:11:bd:55:d2:a1:b8:
4f:5e:34:6c:a0:af:75:1c:a3:36:93:d6:cc:24:7d:
f1:3b:2f:d1:ce:57:2f:88:bf:01:89:7c:80:4f:be:
21:54:af:75:9f:1f:d4:6f:62:a5:1d:46:b5:44:f5:
c3:9d:b3:b6:6b:ba:5b:87:76:e2:b1:ef:6c:c4:eb:
8b:ff:35:c4:1e:e5:08:b6:88:a6:b6:0d:88:50:ef:
88:48:83:e1:9a:b5:d9:bb:3b:8a:84:27:c1:2d:fe:
d2:6c:a8:a6:ad:88:40:65:c7:d5:71:a3:91:80:7a:
07:61:00:b9:3b:7d:7b:f6:af:1c:b5:bc:1b:ee:ef:
1b:c4:93:12:74:e0:00:9b:78:34:af:84:84:98:b0:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:97:1E:6A:F1:7D:AC:74:9F:EB:1A:D5:97:AB:BD:4B:70:F0:55
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/54D05E10041C11F0979A4344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c5:12:3e:0a:1b:a6:10:26:b0:7a:da:95:4f:a2:ff:05:25:
91:8f:bb:76:ee:4e:19:fd:12:2b:af:88:45:06:95:9d:8a:a8:
fe:19:36:be:53:20:00:80:39:40:12:62:34:54:26:8f:10:b4:
3e:c7:fe:43:03:f1:8e:78:83:1c:43:b3:88:1c:88:fa:89:f3:
7a:2c:43:20:11:cf:53:ab:5f:f8:e0:5c:52:ca:2f:54:81:cf:
d0:96:94:33:16:94:5c:9a:7d:9c:fb:38:04:8d:91:ab:05:56:
a2:30:9f:02:bf:ea:a6:04:1b:88:a3:5e:eb:2f:cd:b8:1d:ea:
c3:1f:2f:8b:c1:14:61:8b:cc:c9:41:eb:0b:5f:41:52:d4:d6:
bf:c5:64:f4:e0:ce:23:1a:50:a3:ca:fd:30:db:eb:4d:e3:39:
8c:8d:16:12:69:6a:65:f2:56:28:d0:48:6b:70:c3:35:dd:e4:
6d:fc:c1:1e:db:8e:86:b7:77:dc:6e:f0:d7:d2:21:09:3a:fc:
37:24:52:ee:8e:0b:04:55:05:a8:bd:cd:b1:59:93:a9:f4:a3:
0c:9e:e4:e8:f7:42:6f:c4:0f:45:70:b5:89:11:bc:85:fb:ac:
3d:49:c9:a5:2e:89:97:9d:c1:fc:e4:22:f2:6e:93:84:f1:c3:
c5:3b:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:06 2025 by rpki-client