Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BE2AAF36F40A11EF8E57FB55762E951A.roa
File: BE2AAF36F40A11EF8E57FB55762E951A.roa (raw, json)
Hash identifier: sJTwwzZHJVI3kRoOe5oAlktCVRwJk4cL/bru0u2YsJo=
Subject key identifier: 40:C5:AF:C9:06:80:FD:18:02:6D:BA:81:20:90:61:95:93:F0:24:2D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13F0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BE2AAF36F40A11EF8E57FB55762E951A.roa
Signing time: Wed 26 Feb 2025 06:27:25 +0000
ROA not before: Wed 26 Feb 2025 06:27:21 +0000
ROA not after: Fri 26 Feb 2027 06:27:21 +0000
asID: 834
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5104 (0x13f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 26 06:27:21 2025 GMT
Not After : Feb 26 06:27:21 2027 GMT
Subject: CN=67beb44d-85ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:f5:1e:8c:29:55:01:c9:b0:42:a7:dc:cc:
50:b3:47:63:50:51:38:5c:1b:64:cf:66:c9:3e:9a:
1e:1a:49:52:30:d4:5c:93:9b:55:01:0e:c3:b9:f7:
48:79:f0:79:e0:85:0b:d3:6f:59:73:08:10:36:c5:
00:d9:e3:3a:6f:69:ee:03:d4:7e:37:02:c0:87:88:
a9:90:c1:21:37:66:21:7a:bd:d9:06:7c:f8:eb:bf:
64:23:2c:fa:59:30:ba:3b:45:1a:76:61:e2:a9:2f:
42:04:31:55:13:35:21:d5:c6:83:13:97:ae:12:ab:
b9:11:f2:78:fb:8a:a6:ae:2d:be:54:97:be:f3:af:
a6:f3:ba:73:82:b7:0c:5f:39:77:d5:45:01:58:f3:
52:52:47:bf:bb:5a:5f:6e:ec:8d:c0:31:7e:45:f8:
87:45:f7:9a:bb:42:6b:2d:e8:07:b4:30:cc:4e:34:
0b:7c:4c:a1:fa:dc:3d:c6:5a:70:13:e7:20:21:57:
ee:22:be:56:3d:df:a9:75:c9:8b:eb:07:e9:34:5e:
07:1c:c3:b5:9a:0d:82:01:57:62:9c:92:65:bd:70:
7e:7c:b4:86:f9:18:2a:1a:67:92:9a:98:67:a3:90:
b4:0d:ca:a4:af:35:17:c1:a1:44:37:b7:12:59:b0:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C5:AF:C9:06:80:FD:18:02:6D:BA:81:20:90:61:95:93:F0:24:2D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BE2AAF36F40A11EF8E57FB55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d2:01:c0:a6:94:99:b2:71:a2:fb:e8:ff:71:70:33:a3:9e:
23:af:af:1d:bd:68:d0:b7:77:4e:7c:7a:13:c5:48:ad:b9:b1:
69:4a:14:d6:97:c7:8d:e9:99:58:db:dc:e8:61:ff:1d:52:4f:
7c:ca:27:6a:b9:d2:35:f7:e8:52:d7:5d:46:f4:ae:e8:10:78:
df:7c:7f:9b:56:aa:95:cf:b7:64:d2:13:20:3b:fd:67:f6:4f:
22:40:4f:66:b7:ab:88:ff:a5:8a:da:83:d6:34:63:e2:a1:36:
b4:2a:ac:96:f0:77:06:b9:b5:56:88:0e:cd:c2:23:a2:12:c1:
1d:75:5e:00:d4:a8:1b:7f:09:b1:64:4c:0b:5c:7c:0b:46:55:
06:8d:f3:59:2e:0e:0b:2d:cc:2e:54:30:b8:64:b7:61:69:30:
61:dc:61:6e:dd:3a:80:27:c7:a8:91:75:62:d5:2d:0c:86:1d:
87:db:92:f0:d7:28:b8:09:26:91:81:c9:ee:b2:d3:d9:93:19:
d6:cf:8b:3d:4b:97:e1:fe:43:b1:f8:c9:26:ab:ce:19:97:a2:
73:4c:ff:bd:91:bb:ac:74:0a:17:fd:d1:e3:f7:20:75:89:da:
94:7f:14:08:2c:51:09:4d:f0:2c:c3:e1:99:d8:c4:b0:d2:80:
47:16:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:28 2025 by rpki-client