Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF27A58232FF11F0A75FC1AFDAE4EC9C.roa
File: FF27A58232FF11F0A75FC1AFDAE4EC9C.roa (raw, json)
Hash identifier: Mw/A5oqkcPaOmc6q+O+60x1ngk8H+6VENK01uccVGyw=
Subject key identifier: 30:4C:A6:B7:D8:5C:7E:4B:FD:B7:96:AF:1F:2C:4A:48:0D:05:98:62
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14A7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF27A58232FF11F0A75FC1AFDAE4EC9C.roa
Signing time: Sat 17 May 2025 09:19:13 +0000
ROA not before: Sat 17 May 2025 09:19:08 +0000
ROA not after: Wed 17 May 2028 09:19:08 +0000
asID: 211192
IP address blocks: 102.129.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5287 (0x14a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 17 09:19:08 2025 GMT
Not After : May 17 09:19:08 2028 GMT
Subject: CN=68285491-1f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:24:22:34:46:da:55:57:58:92:e2:21:00:
53:e7:f5:f4:83:8f:7f:ad:d5:b2:58:1d:f4:8a:45:
a7:81:d2:f4:ad:dd:0e:9c:56:ba:e4:64:24:ef:3c:
85:8f:d3:16:98:40:47:ad:a5:92:3a:b9:cc:15:68:
01:f2:a0:cf:5d:d9:3f:81:57:27:cd:90:9a:f3:e4:
e8:f9:2d:f5:e4:e8:b7:aa:77:3d:06:70:75:2f:41:
9c:95:0a:5c:88:f3:70:31:ab:c7:a1:a6:46:ea:b4:
a2:e4:86:f1:86:d1:ff:b0:d6:c1:05:b7:39:50:2b:
52:f1:0b:d3:4f:d0:20:6d:6a:82:e9:63:b9:8d:0c:
41:75:e2:89:bd:3a:a5:56:c0:84:e6:76:da:93:f5:
16:f1:f3:41:e6:18:9f:9e:a3:df:05:94:f5:8f:da:
57:40:c5:5a:9e:71:39:3b:c5:1a:ec:51:58:73:7f:
b9:2c:f6:18:c4:9e:1a:ff:03:73:4b:21:d3:13:5e:
b0:e5:07:1b:71:b5:d7:d4:2c:51:95:67:f5:b5:e1:
64:1a:a1:fd:74:ee:03:6b:f0:5c:3b:2f:dc:22:cd:
e5:67:6e:13:9d:f1:97:d7:38:9f:18:aa:35:33:6d:
b3:ce:b6:5e:57:ee:94:f7:67:43:6c:dd:7c:2e:71:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:A6:B7:D8:5C:7E:4B:FD:B7:96:AF:1F:2C:4A:48:0D:05:98:62
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF27A58232FF11F0A75FC1AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.215.0/24
Signature Algorithm: sha256WithRSAEncryption
38:80:da:60:02:cf:a0:3c:30:47:ef:e8:32:ca:ff:07:d1:24:
2d:95:05:8d:a7:b5:b4:33:e2:ca:83:6d:c2:66:08:cf:c4:f6:
0a:12:01:c9:22:ad:af:ab:37:a3:53:a9:d0:72:b7:6a:1b:9c:
3a:cd:b3:f3:de:71:29:19:64:88:89:0d:87:58:b3:ab:44:df:
aa:cb:b7:f9:38:6d:50:34:20:7c:6d:61:c3:6c:82:44:fe:b8:
b9:31:cf:19:bf:4f:9b:cd:aa:dd:ef:26:36:99:2f:86:18:cc:
e8:23:1b:93:5c:40:41:3c:1a:06:ec:fc:31:70:76:ea:fc:cf:
bb:3e:e1:d3:be:ec:bd:3e:48:61:aa:b7:c2:66:2a:49:a7:ef:
8d:3c:48:7c:2f:2b:e8:9b:ae:ce:23:b4:d1:72:66:39:41:39:
e1:28:36:fe:e4:e3:cc:81:43:f0:bd:4a:a3:2b:0e:f2:74:c5:
78:91:95:44:13:c7:4b:37:0e:cc:ef:b6:a5:96:0f:2e:2d:aa:
c2:85:89:65:f7:8e:4d:1f:6b:6b:5e:69:eb:bd:1b:44:94:b2:
15:61:85:d8:30:d4:e3:1b:92:4d:a7:ee:34:30:d8:34:99:63:
28:70:4b:77:19:a1:9c:be:f8:37:51:a3:21:ee:77:41:4e:d1:
f6:e0:8d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:09 2025 by rpki-client