Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9513E534299011F0A9201E90DAE4EC9C.roa
File: 9513E534299011F0A9201E90DAE4EC9C.roa (raw, json)
Hash identifier: suXW/NaFVryCs79GrvaIb1mjyEHS+nAvpIcbc6IBwb0=
Subject key identifier: A9:B9:90:2D:6E:CF:7D:5F:21:CD:F1:27:61:02:C4:0A:AE:24:34:89
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1496
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9513E534299011F0A9201E90DAE4EC9C.roa
Signing time: Mon 05 May 2025 09:09:01 +0000
ROA not before: Mon 05 May 2025 09:08:56 +0000
ROA not after: Fri 05 May 2028 09:08:56 +0000
asID: 329184
IP address blocks: 102.129.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5270 (0x1496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 5 09:08:56 2025 GMT
Not After : May 5 09:08:56 2028 GMT
Subject: CN=6818802c-dc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:f6:45:aa:eb:4f:55:ae:1d:d0:89:09:db:
cb:50:c3:d6:9c:c7:1d:c8:8f:70:e6:78:d7:d3:b1:
b2:2e:e2:f5:43:85:1e:d2:ac:e1:87:f0:2a:6e:6f:
55:5c:1e:02:c4:9e:9c:34:d9:8a:26:6e:43:4a:78:
ed:77:68:76:b1:bd:4d:ee:76:7b:29:20:26:06:a0:
b9:6e:bf:5c:0b:b2:44:f1:4c:5b:00:99:ed:5d:34:
01:84:3f:5f:df:34:03:82:e1:f8:1c:37:2a:d9:53:
31:63:77:0a:a7:da:26:9e:3b:51:26:6f:90:f2:50:
b0:28:af:bc:9a:5c:54:d9:52:92:1b:5d:5e:4b:30:
80:fe:41:1c:88:3c:fd:96:4b:cc:1b:b5:73:5c:6d:
6e:07:55:fc:7c:f9:77:ea:dd:f2:03:7e:e4:a0:9d:
6c:81:f5:83:5b:18:55:65:70:5c:dd:1c:a5:29:eb:
37:74:55:c0:88:6b:57:d8:52:64:c5:7b:44:b3:9a:
45:85:b2:62:55:89:29:30:98:c3:39:fe:99:1b:29:
41:37:50:2b:80:6a:b9:80:72:11:26:b8:e1:f6:52:
7d:0a:38:5e:db:07:c6:93:6a:13:54:33:31:78:5a:
75:00:23:28:a8:ba:1d:b8:ac:2d:6c:28:b1:b3:13:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:90:2D:6E:CF:7D:5F:21:CD:F1:27:61:02:C4:0A:AE:24:34:89
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9513E534299011F0A9201E90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.165.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7b:2b:63:3c:c8:4f:5a:59:1d:d2:f1:57:a3:0c:ca:82:28:
ee:6e:32:05:4a:07:3b:e4:8d:c9:98:f6:28:fd:11:04:3e:29:
df:32:dd:f0:d5:ca:a6:ad:f8:52:3c:cd:78:41:46:eb:ad:e6:
59:41:e9:07:6e:23:b0:86:ce:61:92:9f:4a:c7:50:df:90:93:
80:e4:23:6c:7a:e5:90:b4:13:46:15:1b:50:75:4a:36:b9:d1:
43:a3:77:71:ee:ef:f1:35:64:3a:68:35:89:e9:92:19:df:02:
00:eb:e1:eb:ad:5e:09:eb:39:c2:04:26:4c:01:64:59:fc:8b:
0e:c9:73:52:a4:76:ea:b8:69:55:8f:d1:96:5d:65:b8:62:84:
59:73:d6:b4:88:0c:e3:3e:82:0b:b5:14:d9:c8:77:74:90:e3:
a2:4e:ee:61:e1:54:08:b4:46:2b:fd:08:bd:3f:88:b4:c5:b3:
33:9a:5f:f5:bd:59:07:70:21:21:33:65:c9:80:b6:ad:a6:98:
e3:a5:77:af:d7:71:71:c4:83:46:8c:9f:9a:b3:80:ee:57:8a:
53:60:d5:d3:bf:9c:16:f0:67:37:41:4a:a9:3f:34:6a:5a:a7:
75:be:39:17:1c:3b:50:77:c5:e1:a7:8b:db:d6:31:80:40:45:
9a:6e:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:51:57 2025 by rpki-client