Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F0B954850F311F09822D6D6DAE4EC9C.roa
File: 4F0B954850F311F09822D6D6DAE4EC9C.roa (raw, json)
Hash identifier: qspwuvxaWT4cyn5zEzAyX9P8TpjjR+cg1D9o0T8bsuA=
Subject key identifier: 70:C1:84:CF:C3:34:CC:EA:8C:D5:9D:18:FB:F2:17:8E:39:23:1F:43
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 151F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F0B954850F311F09822D6D6DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 12:03:58 +0000
ROA not before: Tue 24 Jun 2025 12:03:53 +0000
ROA not after: Thu 24 Jun 2027 12:03:53 +0000
asID: 834
IP address blocks: 102.129.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5407 (0x151f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 24 12:03:53 2025 GMT
Not After : Jun 24 12:03:53 2027 GMT
Subject: CN=685a942e-c45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:1d:38:38:d7:d3:e6:73:ef:bc:c3:f2:85:
ca:52:8f:49:97:4c:d7:a2:0d:05:f4:fe:ce:3a:7e:
5e:6f:66:e6:ff:c0:3d:a7:9d:a8:85:75:f9:96:89:
a1:3b:d3:f7:53:7e:67:66:99:39:e3:d9:52:19:e4:
50:f1:47:96:29:7d:b0:b7:f1:4b:dc:7c:50:ca:e7:
a0:b9:26:10:59:8c:96:f3:16:15:22:30:1d:9a:80:
ed:f9:29:e4:1e:59:53:9a:61:b7:15:00:e0:34:dc:
72:f3:11:cc:ea:0e:c6:4b:1b:52:e8:7c:b2:da:e7:
0e:bf:83:91:99:bb:fe:53:be:5a:6e:45:08:1c:f3:
fe:e7:db:00:52:0f:f1:ad:08:5f:b7:f4:14:fa:f1:
d2:02:23:17:50:7c:cb:1b:c6:c8:8f:6c:1a:4b:01:
5c:13:d6:3d:fe:6d:86:b1:14:26:99:a7:91:55:b2:
56:86:73:85:2c:4b:db:46:e0:7d:7d:bf:1c:99:a4:
f2:49:6d:eb:4d:ec:67:af:36:b2:00:ab:e6:fc:65:
19:67:cb:85:56:20:59:39:8c:81:62:c4:62:88:77:
0c:95:1f:df:cd:80:bc:49:29:57:ed:0a:d7:48:11:
d0:71:d0:20:dc:e8:03:66:a7:89:25:01:48:9b:8e:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C1:84:CF:C3:34:CC:EA:8C:D5:9D:18:FB:F2:17:8E:39:23:1F:43
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F0B954850F311F09822D6D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.141.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4c:62:3c:20:cb:5e:b1:df:9f:67:9e:98:c5:ae:3e:fb:ee:
5c:94:d2:ed:b6:de:92:12:d2:40:ec:0e:1c:08:09:b8:2b:5c:
79:4a:57:50:01:de:24:9c:a2:d0:9c:56:4a:06:f0:4b:45:ca:
71:2d:11:d4:b1:ef:86:99:02:94:be:c0:fb:54:83:46:4d:5f:
33:1b:94:1e:4f:c4:30:49:76:2e:06:83:b5:37:11:7e:18:6f:
af:94:e9:23:c6:7d:0a:e1:8d:90:4e:2d:13:a5:83:ca:15:b5:
6f:44:b8:8f:f1:e6:a3:15:6b:4f:02:46:5c:27:c1:5c:36:63:
e7:5f:4a:c2:38:99:0f:ce:75:26:03:53:ee:a9:b7:a2:f3:b1:
f6:c5:07:02:56:16:72:7d:20:48:e1:9e:2a:d4:e9:04:a7:27:
0b:9c:b4:eb:2d:31:21:03:a7:c7:1a:fc:58:12:ec:e2:b3:19:
f0:2f:85:49:1a:ac:9f:a3:95:e1:ef:fe:61:47:81:4a:20:e1:
ff:e8:cd:73:af:d1:0d:d6:20:c1:1b:31:dc:90:fc:95:a1:27:
88:9c:e8:63:ea:51:39:fa:67:71:71:6b:fd:5c:4d:e5:2f:b6:
d4:69:27:90:a3:9b:7d:8c:e8:13:29:b9:3b:62:6b:7a:b1:5e:
ba:81:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:46 2025 by rpki-client