Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DE5B6684B7C11F0A9B0A6B5DAE4EC9C.roa
File: 2DE5B6684B7C11F0A9B0A6B5DAE4EC9C.roa (raw, json)
Hash identifier: kO9McIKPxG3j/Fz6urVhe5uyw9fHQaT0DKon6TBnOEc=
Subject key identifier: 22:44:6F:70:25:03:66:35:65:3B:3C:D9:C7:69:4C:CC:38:9E:36:BD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1506
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DE5B6684B7C11F0A9B0A6B5DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 13:08:38 +0000
ROA not before: Tue 17 Jun 2025 13:08:32 +0000
ROA not after: Thu 17 Jun 2027 13:08:32 +0000
asID: 22516
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 05:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5382 (0x1506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 17 13:08:32 2025 GMT
Not After : Jun 17 13:08:32 2027 GMT
Subject: CN=685168d6-26df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:8a:ba:2d:82:84:f8:53:b3:15:c5:90:9b:
08:3a:5e:02:4d:14:be:68:38:31:47:05:8d:a1:f8:
7e:fe:14:df:7a:b9:55:31:eb:6b:b7:a4:0a:94:42:
a5:95:7f:ea:57:e6:4a:38:e1:8a:43:f2:e8:73:82:
9a:75:b6:9a:6b:54:aa:ec:e3:77:a5:ce:94:f2:ce:
d2:d6:de:03:f3:c4:64:d7:26:dd:52:22:7d:e3:23:
a7:61:8f:de:db:3d:c7:56:71:70:a7:d3:3e:3c:47:
3c:9d:57:74:a2:b4:89:eb:be:56:ab:74:10:3f:fc:
1b:70:b6:9a:02:f1:e8:30:68:42:bd:fc:91:26:87:
55:20:24:b9:52:35:7e:02:e1:40:c4:97:db:1b:be:
4e:78:f3:3e:6f:6b:1b:03:df:ab:7f:a3:fe:48:06:
db:82:ce:f6:8c:20:a8:c6:03:f3:23:b2:32:bd:05:
98:3a:b6:68:4e:9b:30:63:51:61:d0:24:2a:c1:8d:
31:a7:43:dd:1a:db:c0:dd:5e:4c:87:b4:32:22:84:
3d:fe:c1:77:67:b1:55:1f:a0:1b:a4:42:99:41:07:
82:f5:09:25:34:cf:ec:79:15:08:74:9c:9c:1f:3b:
7a:0b:ec:2c:e3:82:6d:23:7b:6c:48:1b:76:bd:81:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:44:6F:70:25:03:66:35:65:3B:3C:D9:C7:69:4C:CC:38:9E:36:BD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DE5B6684B7C11F0A9B0A6B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3c:8e:e7:83:2e:e8:1e:94:38:d8:75:2e:22:d9:25:48:38:
82:e2:bc:90:40:3c:2d:e2:77:d0:a4:2e:a9:23:af:aa:db:2c:
14:cb:5a:2a:8f:28:5e:0d:e9:8c:3b:18:19:bb:7c:0a:c2:d8:
03:57:20:28:53:5b:86:28:19:2a:ae:dd:ee:2b:72:1b:58:0a:
75:fc:ba:e1:30:b3:77:22:5a:60:88:01:29:78:70:d2:74:4d:
12:f7:aa:b8:d4:38:18:0e:f0:44:0d:9a:d6:1b:f8:1d:d3:36:
32:8e:81:ad:d4:be:fc:40:24:b8:4c:a8:aa:ec:0f:00:20:13:
cf:e6:41:fb:14:0c:52:ef:5b:78:4b:aa:a7:c5:e8:ee:d2:18:
26:9f:2c:15:b9:09:ea:09:cb:e3:a7:c2:fb:51:de:e8:af:70:
b1:e4:29:a3:a8:f8:eb:2b:15:be:17:57:b8:37:26:6d:4d:dc:
05:f0:98:85:c5:ea:ea:22:1d:50:fb:15:b9:22:a6:6b:fe:29:
c4:8a:4f:5e:c5:d5:90:79:3e:3e:8e:9a:2f:84:0a:f6:d4:2d:
17:a5:55:57:e3:80:fb:1a:56:59:56:2b:22:1c:f2:f6:3f:73:
9a:4e:02:2f:54:78:18:a9:82:19:61:fa:2d:38:3f:86:b6:57:
93:ff:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:27:58 2025 by rpki-client