Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6A9659D44B3911F08FEFAA8CDAE4EC9C.roa
File: 6A9659D44B3911F08FEFAA8CDAE4EC9C.roa (raw, json)
Hash identifier: F9HEbCK+kBJWLg5XXn8ksh1gxov7/m5VVcq+POFJBwU=
Subject key identifier: F9:90:BF:BE:F9:49:89:DB:D6:C4:27:C2:EC:01:58:83:87:30:35:06
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14FE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6A9659D44B3911F08FEFAA8CDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 05:10:43 +0000
ROA not before: Tue 17 Jun 2025 05:10:38 +0000
ROA not after: Thu 17 Jun 2027 05:10:38 +0000
asID: 834
IP address blocks: 102.129.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 17 05:10:38 2025 GMT
Not After : Jun 17 05:10:38 2027 GMT
Subject: CN=6850f8d2-de34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:e6:79:c7:0e:6c:88:b8:4d:63:5e:c2:72:
c2:e4:05:3c:72:8f:5b:25:86:d3:f8:54:63:b8:74:
60:56:56:10:b6:30:9a:64:b6:1e:e1:30:66:18:7a:
96:40:d6:c8:50:99:af:fb:b1:a0:dc:a7:b2:53:f1:
d2:dc:44:1b:c2:4c:7b:a9:8b:3a:ec:d6:c2:83:c7:
0d:f7:ab:38:13:00:78:0d:bb:9d:51:52:2c:3d:d7:
1f:46:b4:9f:10:1d:07:ef:2d:36:47:e3:dc:b1:23:
92:6d:c7:55:67:cc:9c:5d:b8:a8:cc:c1:32:a8:e7:
54:c8:4d:8e:f0:8b:61:b9:7a:da:80:07:57:4a:cf:
ed:ac:d0:1a:02:86:00:5e:a8:ae:c8:4e:71:d1:24:
bf:bf:c0:7d:18:62:93:c9:a3:6f:2e:41:ef:45:97:
d1:05:2a:b2:db:09:a9:78:eb:97:d0:42:86:77:2b:
3f:ec:99:0e:ee:fe:75:60:15:39:7a:b8:4c:4d:0a:
1d:52:85:85:35:b7:20:0a:c4:75:ec:39:3d:f9:d4:
7c:c6:97:87:da:3e:1f:fe:aa:c7:99:6b:b7:c3:ec:
85:a0:a5:0f:49:f3:0f:7a:7b:98:07:9a:76:41:87:
e4:a2:f8:a7:22:cb:1a:71:b2:b5:88:0b:e5:6e:fa:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:BF:BE:F9:49:89:DB:D6:C4:27:C2:EC:01:58:83:87:30:35:06
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6A9659D44B3911F08FEFAA8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b5:d0:19:71:59:ac:cb:6d:c9:6d:9b:48:95:22:ee:1e:07:
b4:f3:35:29:44:8e:f3:c2:70:1c:6d:29:ee:5e:7f:70:f9:ad:
e4:8a:d2:06:46:f9:3e:f8:1b:d2:d0:09:da:e5:f3:96:9e:77:
87:6c:2b:e4:72:19:6b:15:51:0f:e7:61:f8:8f:8a:3e:d9:6c:
fe:26:59:2e:3c:3c:8a:a4:83:c4:d5:2b:ad:60:4f:49:bc:9a:
49:f8:1d:96:7b:ed:b3:ea:9c:2c:a1:db:c1:ef:4d:17:a8:39:
da:51:7b:2b:97:0b:e0:3e:69:e2:7e:c6:28:45:9f:f3:08:61:
1b:e6:e6:2e:c7:52:75:ad:d1:9f:b9:d6:fa:58:3c:91:55:9f:
de:01:f1:2a:eb:3a:6c:a8:94:2f:79:8e:2c:cd:3a:97:1d:1f:
3e:83:cc:33:2a:f4:b5:d9:2b:db:58:97:a3:fd:ef:f6:34:ab:
b7:0c:27:1e:e4:89:eb:7c:68:a5:8b:b0:50:80:05:1a:0c:df:
4a:de:fc:94:bc:d6:c7:52:b0:77:e3:28:41:64:3e:e5:66:ec:
31:3f:ee:93:a4:67:e4:6e:de:ca:d3:28:d2:79:6d:90:8f:27:
3a:a5:db:42:12:8d:9f:6e:69:a0:11:41:d6:b5:fd:ad:4e:3a:
36:40:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:44:06 2025 by rpki-client