Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/55A68CF2E48111EF945D579B762E951A.roa
File: 55A68CF2E48111EF945D579B762E951A.roa (raw, json)
Hash identifier: b5fnYnX+QuPEwRVqMglDvZYtLn+U98zwdMBupBuM4I0=
Subject key identifier: 83:6D:F4:56:7E:35:C2:B3:96:6B:C6:32:53:A1:B1:96:FC:8E:18:67
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13A5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/55A68CF2E48111EF945D579B762E951A.roa
Signing time: Thu 06 Feb 2025 11:56:01 +0000
ROA not before: Thu 06 Feb 2025 11:55:57 +0000
ROA not after: Sat 06 Feb 2027 11:55:57 +0000
asID: 4637
IP address blocks: 102.129.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5029 (0x13a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 6 11:55:57 2025 GMT
Not After : Feb 6 11:55:57 2027 GMT
Subject: CN=67a4a351-ddb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:c1:c6:ae:2b:42:09:a6:df:98:b8:63:4c:
eb:36:2e:16:36:75:1d:5a:03:23:f0:2e:83:ad:ef:
2a:13:79:e7:d2:b5:8a:93:d7:b2:37:8b:ac:7e:fe:
76:0e:21:9f:06:26:7e:84:7d:f3:9a:d2:6c:bc:b2:
a6:b3:5b:77:20:2d:4d:b4:e2:3b:18:e8:0e:46:5c:
9a:64:49:7a:53:30:af:77:4c:bb:66:4e:d5:cb:c1:
2a:f4:97:5b:1c:c1:f3:14:ce:7f:a2:0f:67:de:b0:
b3:f3:82:92:b8:76:90:63:97:3c:f0:c3:e9:38:3a:
e0:aa:6b:67:2a:23:f1:60:90:28:c9:51:9d:0c:7a:
48:c0:40:2b:8b:16:fe:50:1e:29:4b:f2:01:7e:7f:
02:66:f2:04:22:0d:15:92:8c:13:3a:db:4e:9d:5f:
25:2b:00:a1:bf:ca:48:d2:a2:f2:70:ef:15:ab:2f:
8f:7e:66:d7:c6:89:b7:a5:00:56:a5:3a:57:63:99:
95:ef:62:c3:eb:3f:9e:1f:d3:89:db:b3:8f:df:d7:
af:16:e3:ee:f2:3b:21:43:ea:b2:27:cc:09:ce:20:
51:56:b2:1d:b9:0e:a5:a9:1a:55:35:68:74:2a:d7:
6b:a8:c8:f5:e1:40:32:ef:ab:fb:1e:8c:b1:96:ae:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6D:F4:56:7E:35:C2:B3:96:6B:C6:32:53:A1:B1:96:FC:8E:18:67
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/55A68CF2E48111EF945D579B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7c:d9:a8:7b:b6:d9:2c:ef:1c:c8:18:2a:4b:f3:2a:43:6b:
23:bc:fd:7b:67:3f:f5:eb:b8:2d:b3:94:30:fd:2f:e7:39:76:
11:ba:88:1b:ea:42:ed:ff:e9:db:67:ba:19:5b:60:8f:3d:f2:
26:12:19:1f:22:ac:32:bb:49:b2:dd:0f:43:ed:25:ac:57:ed:
e4:60:3c:d0:a9:10:71:01:f2:d9:7b:eb:f3:a4:b8:fd:c3:69:
39:f8:00:54:55:b4:fb:d0:ad:b7:4d:4e:42:da:0e:20:0a:71:
10:19:e6:ee:b5:c7:8e:29:2f:70:8e:ff:0a:9a:f7:c0:bf:d6:
4b:b6:76:c2:83:6f:90:1e:77:18:af:43:f7:82:39:14:91:3a:
ce:16:14:6a:8b:82:47:d3:fb:66:f2:46:4a:59:56:f0:3f:ad:
f1:5f:67:ee:32:2b:b3:8e:fc:dc:fc:27:cf:44:4e:63:55:84:
94:1e:39:a1:63:eb:8d:da:0c:41:cc:c0:78:c3:83:4f:b1:ab:
d9:57:02:82:77:63:bc:35:be:09:2a:8d:5e:49:18:93:e9:3c:
0d:0b:84:cc:44:d1:e7:fd:97:e3:a3:4e:1b:9c:a4:cc:bd:d6:
48:c1:08:5c:1f:b4:8a:81:6e:c0:4f:e7:4c:55:0f:8f:51:b7:
73:34:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:04:11 2025 by rpki-client