Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8BF4C4CC23F111F09230D3EFDAE4EC9C.roa
File: 8BF4C4CC23F111F09230D3EFDAE4EC9C.roa (raw, json)
Hash identifier: OwAA5ano0aj9V4upugt7TyhODxL6COsagXKzLIYB45Y=
Subject key identifier: 8E:E8:8C:86:80:D4:3F:D3:12:AA:D9:78:B4:BE:98:6B:A4:6E:9F:1B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1480
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8BF4C4CC23F111F09230D3EFDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 05:27:59 +0000
ROA not before: Mon 28 Apr 2025 05:27:54 +0000
ROA not after: Fri 28 Apr 2028 05:27:54 +0000
asID: 834
IP address blocks: 102.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5248 (0x1480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 28 05:27:54 2025 GMT
Not After : Apr 28 05:27:54 2028 GMT
Subject: CN=680f11df-27d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:3c:59:63:7b:29:ef:42:1e:11:a8:3f:5e:
66:68:7f:d3:70:e6:dd:81:e6:ee:e1:00:2b:1f:da:
ca:c8:ce:df:e4:14:4c:99:be:81:0f:b5:37:ec:f2:
63:44:18:42:4c:fa:27:bb:fe:fb:06:86:9d:65:17:
6f:80:f7:f2:3a:ef:4f:a4:bf:fc:3f:eb:af:eb:24:
cc:14:4d:a5:c4:42:2d:77:8f:38:2b:48:01:44:af:
6b:8d:80:9b:65:79:71:b5:84:14:95:74:7a:87:be:
0a:72:38:0d:a3:f1:3f:8b:0d:ae:71:07:f8:73:a8:
b8:9d:6d:30:b1:85:dd:a4:7f:2c:ab:4e:7a:7a:c1:
20:af:57:9a:46:bd:d4:6d:66:99:9f:b4:80:49:7b:
be:71:89:c0:41:b4:6e:29:7a:e5:cb:8d:2c:e8:97:
bd:40:b6:a0:05:3b:39:9d:8f:fe:f6:02:42:65:b7:
b2:f1:85:20:74:1d:6e:41:45:d0:1f:c4:1f:da:79:
39:2e:83:bb:4f:e2:39:e1:f9:d4:52:da:9d:c9:b4:
c7:24:4d:d6:61:66:76:04:00:2f:f4:e4:74:84:f0:
1c:06:0c:86:82:df:04:1a:d1:85:bc:49:4b:e0:0d:
5a:68:c7:40:ad:d3:ac:cf:ec:24:f3:6e:22:d5:8a:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:8C:86:80:D4:3F:D3:12:AA:D9:78:B4:BE:98:6B:A4:6E:9F:1B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8BF4C4CC23F111F09230D3EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:7f:11:6f:bb:0e:d5:b8:68:ee:10:8c:e7:d5:cf:3c:b3:7f:
5d:ab:a2:5b:f0:6c:9a:12:78:61:c1:d2:d7:0b:3c:a5:a1:d0:
e3:43:85:5b:71:44:d4:2e:94:71:ab:8e:94:17:f3:8e:02:73:
66:93:41:f7:88:1d:50:cf:12:ce:f7:4c:2a:2c:78:ae:48:88:
92:af:82:03:d2:7b:af:c8:85:4d:11:e7:a4:92:d1:a7:7f:fe:
0e:16:e6:08:1d:0a:7b:7f:0b:f8:1b:f7:f8:32:90:29:76:e1:
08:33:9e:9b:f5:8d:7e:d2:ad:66:8e:58:fa:af:c8:af:3e:82:
f2:b5:27:10:df:4e:cb:f7:83:0d:7e:b0:29:77:82:2c:2d:f8:
57:16:1f:bf:bf:44:41:b8:b1:cb:01:96:34:16:f3:f6:3a:dc:
12:07:bd:8a:87:ef:28:85:4f:02:51:06:45:d1:f3:e0:3e:f5:
be:fc:cd:de:5c:1a:ee:33:55:a6:29:b4:32:a5:7a:58:02:1e:
71:7e:f3:44:25:08:4a:c4:7c:0c:4c:b7:2c:a6:97:07:db:a2:
78:03:a4:3b:1c:10:96:84:8d:04:32:1d:fd:62:96:e9:b8:f6:
95:bb:90:aa:74:fc:65:a1:48:c1:a5:8d:2f:8c:41:87:ea:aa:
c9:3e:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:04 2025 by rpki-client