Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69D8E930E86011EFAF566C7E762E951A.roa
File: 69D8E930E86011EFAF566C7E762E951A.roa (raw, json)
Hash identifier: CCyPo9CGRSRno+BmXM9oGONsT6u2XS3ErlP38pLBdVw=
Subject key identifier: C5:32:E8:DF:BC:2B:F0:E8:ED:51:6B:39:BF:C2:AE:C9:FB:28:CA:71
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13C0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69D8E930E86011EFAF566C7E762E951A.roa
Signing time: Tue 11 Feb 2025 10:10:26 +0000
ROA not before: Tue 11 Feb 2025 10:10:23 +0000
ROA not after: Sat 13 Feb 2027 10:10:23 +0000
asID: 61317
IP address blocks: 102.129.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5056 (0x13c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 10:10:23 2025 GMT
Not After : Feb 13 10:10:23 2027 GMT
Subject: CN=67ab2212-3d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:4b:2a:a8:f9:5b:5c:f0:fd:db:f8:d4:5d:
c2:38:d9:4e:9a:b2:e9:c3:b1:58:7e:2a:de:86:9e:
dd:a5:33:f8:2c:ca:92:5a:db:3a:d8:68:21:29:6a:
02:5d:ef:25:dd:5a:02:9e:7f:84:f4:a0:06:0e:d8:
63:4a:4a:14:1f:58:45:0f:cb:2b:08:ba:3b:1f:ab:
90:ab:28:3b:4e:b5:71:8f:a2:d6:81:6c:2a:17:ab:
a6:72:94:bc:55:d4:12:c2:85:16:c3:58:1f:2a:7c:
33:24:f5:ac:21:50:5a:0c:ee:aa:31:e4:39:3a:ad:
2d:e4:e4:1e:09:5f:c7:8d:cc:00:73:63:c8:39:d0:
59:1d:e2:d6:6d:ce:f6:cb:86:24:53:02:8b:1e:0d:
aa:8c:6e:54:1d:fc:a0:67:29:30:d9:90:f0:34:71:
d5:0e:d9:88:b0:20:72:46:9e:8c:b7:dc:b1:28:41:
aa:23:8b:ae:ce:b5:b5:61:b9:d3:aa:39:54:d8:ed:
83:93:70:9f:39:cc:30:37:90:76:2e:a5:41:fc:59:
da:e1:b1:a6:b3:6c:5f:46:93:9c:a0:98:89:9f:05:
fe:d1:93:8f:da:41:6b:e3:68:1e:cd:8c:8b:ef:fc:
38:d5:b7:e7:4b:d0:d4:81:3b:a6:56:a5:d5:33:f0:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:E8:DF:BC:2B:F0:E8:ED:51:6B:39:BF:C2:AE:C9:FB:28:CA:71
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69D8E930E86011EFAF566C7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.221.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d6:2b:f3:2b:5f:c9:97:2f:7a:66:86:d7:09:b9:9f:8d:e4:
07:f1:da:37:d8:44:38:de:91:63:f3:9d:0b:ce:5c:29:f8:05:
3a:38:b3:ab:09:f4:97:dc:fc:c7:1f:50:e7:88:d6:ae:d7:16:
c5:b7:c0:ed:e6:f6:7d:9c:ac:49:08:b0:19:cd:19:50:ef:bd:
39:03:17:06:65:cd:bc:53:90:5a:64:7a:65:74:6f:13:56:d6:
1d:64:7b:fd:cd:3d:66:33:d8:b0:da:12:ed:24:36:99:0d:15:
75:33:de:c9:d1:59:da:9a:17:9b:b7:3e:6f:9d:7b:80:b5:b3:
27:b2:55:18:75:09:24:2c:58:73:72:82:bf:0e:3e:e0:08:ec:
67:2a:64:1d:e4:c2:d1:ca:62:81:e0:ef:d8:e6:b8:e5:d0:01:
cc:d5:e9:29:04:c4:ca:a9:4a:44:21:de:0c:96:6b:13:b2:0d:
99:5b:93:28:62:15:18:d4:a3:ff:bc:c4:0a:a8:fa:fe:86:bb:
f3:c1:4c:7e:f4:c2:d6:e6:19:04:a0:ac:27:5b:07:47:92:d4:
57:88:9e:19:98:8c:c6:80:2c:2e:15:ce:4f:8a:19:88:db:e6:
c9:fb:6a:63:94:94:14:42:7f:73:49:80:0f:34:d8:ab:01:7e:
22:25:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:38:11 2025 by rpki-client