Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6053AF8436EA11F082A9AEE1DAE4EC9C.roa
File: 6053AF8436EA11F082A9AEE1DAE4EC9C.roa (raw, json)
Hash identifier: t284DzHyxZ6jb88tF84WPFl+FwiFz7NEAhr4CV/rUTQ=
Subject key identifier: 17:8E:E4:F7:43:B6:74:D9:D1:CF:D1:45:75:31:C9:99:85:24:32:FB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14CD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6053AF8436EA11F082A9AEE1DAE4EC9C.roa
Signing time: Thu 22 May 2025 08:54:32 +0000
ROA not before: Thu 22 May 2025 08:54:27 +0000
ROA not after: Mon 22 May 2028 08:54:27 +0000
asID: 135402
IP address blocks: 102.129.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5325 (0x14cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 22 08:54:27 2025 GMT
Not After : May 22 08:54:27 2028 GMT
Subject: CN=682ee648-4633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:50:62:ac:97:07:df:f4:28:94:29:1d:21:
8f:e0:41:e8:87:20:9d:0e:a8:15:ca:52:c6:00:16:
fe:19:a7:a0:da:97:1a:d8:f3:a1:27:72:a9:a3:77:
8b:63:21:2a:53:50:5e:24:ed:79:bc:67:9e:b3:ef:
b2:cf:23:66:3b:56:29:0a:e7:1c:3a:b8:ac:82:a6:
cc:87:db:d0:6d:ce:04:ae:20:2e:97:a0:6c:67:a3:
c3:4c:67:5a:a2:f7:c4:6f:db:7a:21:af:10:e7:46:
fb:e9:d5:ac:0f:fa:6c:93:12:32:54:ff:81:f4:fb:
87:ad:8e:f1:d8:4a:99:5d:fc:51:3f:59:55:39:ad:
5c:47:f2:a2:60:95:94:2a:b0:4a:16:42:97:45:c2:
5f:93:8e:12:98:60:22:a4:a4:a4:d1:e1:ee:a3:95:
71:bc:90:7a:3c:0e:fb:cb:98:ab:c3:b8:d6:f0:1d:
3e:d8:4b:98:ee:9d:25:e5:0b:77:c9:5c:7a:67:2c:
56:e8:65:f5:92:09:5e:76:81:5e:3f:15:52:f6:98:
51:8f:01:43:99:ee:58:12:97:0b:6d:8c:90:0e:19:
66:89:ad:b9:5a:06:b3:66:aa:24:de:62:10:28:e9:
83:38:b1:55:eb:d0:13:18:2d:00:4b:18:fa:22:a9:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:E4:F7:43:B6:74:D9:D1:CF:D1:45:75:31:C9:99:85:24:32:FB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6053AF8436EA11F082A9AEE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.140.0/24
Signature Algorithm: sha256WithRSAEncryption
24:fe:29:0e:8f:61:2e:07:3e:1c:2c:a0:85:a3:a9:9d:56:83:
52:95:8c:91:9c:6f:fe:38:d5:e5:84:f6:04:a9:7e:9d:c2:a4:
39:8e:a6:56:88:0e:22:6c:fb:d5:9f:cc:53:57:b8:b4:8f:ef:
38:37:a8:5d:22:16:5d:96:6d:2e:61:0b:45:fb:37:28:10:98:
8e:77:6a:04:d3:d9:cd:b0:4d:88:42:69:e8:6c:26:e2:83:5c:
de:d3:7c:e1:ff:97:3a:88:2a:ce:66:bf:54:d0:f5:c7:b9:c0:
3d:7c:ea:8f:da:a8:78:34:e7:20:57:ee:03:4c:ec:a2:7c:6a:
67:be:2c:5f:32:b5:47:d9:68:a3:34:d8:ce:ba:14:ee:8f:7c:
bd:42:00:7b:96:4a:e8:e8:f2:b4:8d:da:12:e3:a3:8b:15:61:
5d:ed:a9:58:cb:f3:11:6f:e6:40:b5:06:c0:24:61:e8:0a:f9:
d3:cd:fc:26:aa:fa:ce:d3:36:34:8f:76:4c:86:fb:81:78:26:
d6:46:b5:ac:83:8e:5b:bf:a3:03:aa:81:b3:50:b4:45:95:cc:
aa:65:44:22:a3:b6:34:48:00:28:ab:a9:90:33:bb:d1:4d:73:
de:34:99:71:e2:91:e3:38:40:c1:09:b2:27:29:d0:b9:c9:ea:
24:62:76:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:35 2025 by rpki-client