Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6EB9B5BC563B11F09D5861B4DAE4EC9C.roa
File: 6EB9B5BC563B11F09D5861B4DAE4EC9C.roa (raw, json)
Hash identifier: daRfH3goHBx4f7TlsvH7JLZglcUUgvjsbzoLhcMt6mk=
Subject key identifier: D2:B8:75:2C:5D:A5:E4:6F:C7:8D:3D:32:CC:C7:19:2C:85:F5:44:03
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1529
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6EB9B5BC563B11F09D5861B4DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:22:51 +0000
ROA not before: Tue 01 Jul 2025 05:22:47 +0000
ROA not after: Thu 01 Jul 2027 05:22:47 +0000
asID: 834
IP address blocks: 102.129.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 05:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5417 (0x1529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 1 05:22:47 2025 GMT
Not After : Jul 1 05:22:47 2027 GMT
Subject: CN=686370ab-ae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:12:3d:83:9d:1c:ed:90:98:a2:eb:29:97:
4b:f3:32:d7:c4:35:4c:f3:c3:b6:0e:dc:32:6e:b9:
2d:48:8e:3a:6c:1a:90:71:d0:f1:1b:4d:c6:23:08:
13:b0:23:7c:31:bd:07:83:8e:86:43:5f:cb:21:11:
e9:5b:24:f7:3f:38:fc:71:c2:26:24:84:b4:9a:fb:
31:7b:46:5e:01:fd:d7:42:60:83:34:62:b8:e6:29:
ef:f0:ed:21:5c:cf:cc:28:94:f2:ba:7e:28:36:f0:
8a:0c:dc:ac:9d:10:84:80:79:a1:fd:83:99:c2:10:
90:f7:b4:df:f2:96:07:65:ac:ed:fe:ef:61:01:6a:
d0:2b:34:42:17:4e:c4:b3:76:1b:bd:f2:66:a3:4d:
aa:63:e8:e6:3a:17:a5:56:dc:94:65:7c:20:d3:82:
e2:4d:a9:84:10:bd:57:ea:6b:bf:bd:2d:a4:a9:e1:
77:e1:9a:21:f9:c5:ca:d0:7a:d9:19:62:4f:37:40:
3c:3b:22:83:09:8d:4d:fb:ca:7c:a4:fb:c2:4e:b1:
57:65:43:2f:a8:3c:e4:f4:59:b2:92:74:ed:68:47:
5b:bc:f8:1e:32:2c:b3:25:26:93:74:db:40:44:3b:
fe:e1:17:f8:e6:2a:a5:73:17:99:45:27:92:c3:3e:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:75:2C:5D:A5:E4:6F:C7:8D:3D:32:CC:C7:19:2C:85:F5:44:03
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6EB9B5BC563B11F09D5861B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c1:9c:96:60:da:5f:fd:28:b0:6d:af:92:fd:6c:4c:66:90:
35:07:7c:8d:aa:e1:01:02:29:7d:91:c1:f5:91:7a:0a:7d:dd:
54:45:e9:8c:32:06:75:75:a9:d6:e2:10:38:58:b7:5c:cc:0a:
af:7d:59:48:93:a3:83:5b:e9:c4:2b:37:0e:3b:57:c4:24:df:
d6:8a:ff:70:ec:5c:6a:f2:6c:89:0f:90:6f:1b:cc:20:ca:1e:
f9:23:7a:df:4f:38:0e:b6:61:bc:5b:f1:b2:88:8f:3a:89:b7:
22:c2:b4:55:b7:84:21:28:8a:3f:16:54:bf:f9:29:23:13:d9:
22:4b:0c:85:b2:97:92:18:71:ac:cc:a0:d1:75:dd:29:da:d5:
7d:67:58:e2:4c:4d:e3:9c:e5:ac:5a:97:2f:5f:e0:50:c6:da:
d7:5e:6a:11:d8:64:19:e5:56:ac:47:8b:f0:f5:46:ed:4e:20:
04:7d:9b:e0:ff:54:1d:f0:bf:2f:49:1c:30:89:44:73:98:ce:
03:03:89:bc:a5:f0:38:03:03:e9:a6:08:90:b2:ab:53:cd:6c:
8f:e7:3c:d0:fb:64:2c:7e:0d:80:e4:28:4c:d7:d7:a9:0d:84:
5f:79:13:55:99:34:94:bf:4b:73:31:60:aa:c5:1a:71:6e:71:
1a:c1:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:25:54 2025 by rpki-client