Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7A00F540F34C11EFB310B141762E951A.roa
File: 7A00F540F34C11EFB310B141762E951A.roa (raw, json)
Hash identifier: a3SUK3D7n74cvyEbYyE2iNXw6T3pFt59cI4y/S2uX90=
Subject key identifier: 23:3C:8D:09:53:1F:39:5D:69:E8:32:3E:46:A0:1D:29:9B:0C:C2:B9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13E8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7A00F540F34C11EFB310B141762E951A.roa
Signing time: Tue 25 Feb 2025 07:45:26 +0000
ROA not before: Tue 25 Feb 2025 07:45:22 +0000
ROA not after: Thu 25 Feb 2027 07:45:22 +0000
asID: 266400
IP address blocks: 102.165.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5096 (0x13e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 25 07:45:22 2025 GMT
Not After : Feb 25 07:45:22 2027 GMT
Subject: CN=67bd7516-b80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:d1:35:e7:b7:99:c9:9d:c5:7f:27:09:a4:
42:c6:f9:a7:ba:67:a7:1a:95:9f:5f:3a:e7:36:12:
9e:e2:63:ab:b7:e4:32:bf:27:65:c2:5a:20:02:4a:
03:96:94:84:90:6d:59:40:d5:c6:9c:4c:61:ed:c0:
de:17:52:b8:d5:46:77:59:12:b5:1d:67:c7:39:f8:
f4:9c:e3:1d:16:17:23:bc:e2:49:99:9d:ea:3c:61:
5b:75:24:93:dd:fb:3a:b6:5c:8d:00:77:c0:9f:a4:
ce:0c:df:25:40:21:86:76:12:d1:8b:cb:fe:f9:62:
23:82:92:e7:24:bd:5e:4d:24:4e:30:12:0f:01:ab:
18:47:4e:a4:7f:4d:fc:53:4e:6f:e6:e7:4e:b3:40:
49:e5:fd:78:50:a9:80:b1:95:96:81:a8:c7:1c:be:
dd:15:03:8d:1c:52:ad:e0:85:b3:a2:24:aa:c9:96:
8a:f5:38:4b:f9:43:f8:b0:69:fd:3b:7f:c2:f8:58:
5a:06:29:69:10:94:99:97:fb:2f:32:6e:0e:79:8e:
54:99:c8:07:97:27:13:54:e5:6d:3a:a4:25:1c:a9:
3b:c7:49:38:b3:9c:22:0a:1a:ab:a7:65:fb:30:3b:
d3:17:82:0d:be:51:30:5e:aa:b8:5a:44:95:4b:fe:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:8D:09:53:1F:39:5D:69:E8:32:3E:46:A0:1D:29:9B:0C:C2:B9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7A00F540F34C11EFB310B141762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a4:73:7b:8f:04:f9:bb:79:72:fc:da:c5:ff:42:13:d3:85:
c9:8d:12:2a:95:8f:9e:a6:6e:07:a0:4c:bd:be:78:18:62:2d:
d2:a8:74:3b:dd:0d:08:b9:62:4e:ac:00:e6:98:a5:40:35:21:
73:35:46:66:7c:23:44:5b:28:28:bf:71:f0:d6:02:8d:99:eb:
4f:e9:be:38:c6:80:61:f7:4a:38:8f:d9:f0:5f:bc:df:a5:04:
94:a8:15:37:44:60:ce:c6:21:16:72:fa:ae:e4:d9:b0:d8:0f:
ed:6e:10:26:ec:2f:70:db:e5:f0:97:0b:4c:2b:c4:8f:07:e5:
0c:81:1c:c8:ed:81:ab:4b:bb:a8:e1:91:17:06:15:14:50:03:
3a:bc:8f:92:24:72:8f:cb:0f:de:e8:94:2d:c5:af:b1:58:1b:
2d:e1:d6:8c:b9:00:fa:6d:35:19:e9:5f:70:09:ff:47:9b:65:
ae:0e:46:4f:3a:fa:7a:63:78:cb:52:1c:70:41:0f:d8:eb:3b:
d3:16:d8:a9:3f:66:28:15:c8:9c:42:1e:ee:5a:d2:70:45:fe:
66:55:d7:ee:04:f1:57:bf:20:cd:3f:fc:3f:2f:ec:e6:04:ff:
a0:49:0c:f3:56:22:00:e5:28:b4:1a:bf:42:3d:91:6b:e8:df:
f3:e3:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:22:46 2025 by rpki-client