Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/34B0E512297611F0A664D8E1DAE4EC9C.roa
File: 34B0E512297611F0A664D8E1DAE4EC9C.roa (raw, json)
Hash identifier: sxZYf+WTtLtOiJSpjrfMSj7gYDC5XyFEX8Vwd5de6Zo=
Subject key identifier: 36:F7:F5:3E:91:A9:90:B8:9C:FF:05:CA:52:D7:14:D4:5E:AE:0D:20
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1493
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/34B0E512297611F0A664D8E1DAE4EC9C.roa
Signing time: Mon 05 May 2025 06:00:12 +0000
ROA not before: Mon 05 May 2025 06:00:07 +0000
ROA not after: Fri 05 May 2028 06:00:07 +0000
asID: 400810
IP address blocks: 102.129.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 01:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5267 (0x1493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 5 06:00:07 2025 GMT
Not After : May 5 06:00:07 2028 GMT
Subject: CN=681853ec-ec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:06:a5:2f:44:8e:d0:2c:00:a4:b2:a7:bb:
64:f5:2d:ac:47:1b:a2:21:56:bb:c8:f7:ba:77:df:
b9:cd:f2:e9:5a:66:80:0b:14:f4:21:40:31:d6:95:
ad:e5:b2:47:97:8a:30:82:d7:63:ec:f7:0c:b2:fc:
f0:1b:58:aa:9c:0e:29:f8:45:f0:d8:18:fd:7a:b0:
d2:95:65:37:79:85:24:b5:8c:b1:5c:56:7b:00:59:
24:d2:f0:ac:2c:32:7e:c9:2b:6d:22:38:ff:ce:0b:
c1:9b:51:33:12:42:0c:ba:73:f9:de:e5:74:0f:fc:
4e:28:aa:84:40:b2:db:ae:57:38:91:61:99:fd:33:
7b:3e:9c:49:a8:75:0f:94:63:8f:bc:95:a9:ec:51:
4e:ac:bc:bc:0b:d1:a3:dc:a1:8d:db:85:92:ad:d6:
d1:79:2a:95:5e:49:7b:d8:8c:c3:bb:66:7e:7f:af:
44:80:d2:9d:c3:9d:eb:6b:02:26:31:a9:22:05:03:
00:92:38:38:fc:a6:12:81:87:18:eb:fc:3c:7d:31:
af:59:14:bc:44:b4:d7:40:e5:b5:61:dc:e0:a3:b9:
a5:89:f8:19:5b:e5:62:f2:ca:3c:00:dd:ff:cc:cc:
8b:3c:c4:70:de:97:a2:46:21:e4:e1:90:d0:b5:77:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:F5:3E:91:A9:90:B8:9C:FF:05:CA:52:D7:14:D4:5E:AE:0D:20
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/34B0E512297611F0A664D8E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.185.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ad:24:0b:9b:74:5d:94:ba:55:42:4e:c1:aa:0c:1a:03:02:
1f:9a:11:26:1f:d6:84:ae:f3:80:51:b0:7a:27:a7:eb:2c:84:
0a:b6:81:68:3d:b0:3e:4a:1f:5d:f5:b5:ec:a2:54:71:ca:e4:
c0:e1:99:84:18:b2:44:74:0e:7b:61:08:38:46:b1:3a:ee:17:
1c:e1:fb:d9:a4:66:61:52:b1:51:7d:7b:54:75:2c:32:04:ae:
67:79:00:5e:ce:37:c9:dd:f4:bd:6e:59:69:7e:ea:79:38:ce:
f7:0d:0b:52:3f:7b:dd:4d:f2:6a:8b:ee:19:62:4b:5a:a6:f7:
ad:64:e8:75:d5:5f:ec:98:5c:b8:e2:cf:ec:05:08:34:48:35:
67:28:e7:be:91:ee:cd:ac:61:75:13:77:56:ef:e6:fb:a6:c4:
59:a0:96:48:30:31:50:f9:16:f1:81:ea:bc:1e:e1:95:78:56:
71:22:b4:8a:28:26:fe:4a:ac:54:99:c9:f8:9e:4b:26:54:56:
f8:e8:98:3a:c4:e6:df:c1:dd:69:a8:2b:b4:86:bb:e0:96:27:
b7:ff:f5:14:ef:19:af:8c:11:63:88:50:39:ee:4b:46:64:f2:
62:2b:b2:77:64:a1:75:c7:f7:ca:3b:39:93:bf:e0:75:10:00:
5b:49:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:04:29 2025 by rpki-client