Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5A12B2E502C11F0BC9831C7DAE4EC9C.roa
File: A5A12B2E502C11F0BC9831C7DAE4EC9C.roa (raw, json)
Hash identifier: l1eOrdtsOpmuKu6LHv1PqfY+bMBnN3NYdEBUmJPCffA=
Subject key identifier: A7:68:58:A0:69:7A:F1:4C:39:07:CC:E6:3C:3C:46:8C:3A:99:C0:61
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 151B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5A12B2E502C11F0BC9831C7DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 12:21:54 +0000
ROA not before: Mon 23 Jun 2025 12:21:50 +0000
ROA not after: Wed 23 Jun 2027 12:21:50 +0000
asID: 20001
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5403 (0x151b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 23 12:21:50 2025 GMT
Not After : Jun 23 12:21:50 2027 GMT
Subject: CN=685946e1-de9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:95:bc:3a:5c:b4:95:4c:74:59:63:42:9b:
41:49:aa:1b:88:64:18:b4:7d:05:84:f0:c8:78:41:
b2:80:b5:84:c9:ee:fe:94:a7:88:e4:a6:e7:35:01:
41:03:0e:49:0c:15:29:36:aa:f6:77:81:1e:d3:17:
bc:81:73:8f:3b:41:75:78:64:8b:0f:3d:4d:95:d0:
70:ca:78:7c:6f:0b:01:67:9c:47:02:54:46:ce:07:
63:fa:18:b4:30:c5:d2:40:f5:6b:cf:f2:87:96:f6:
ef:6f:40:0c:7b:09:fc:19:43:07:5e:65:73:d8:cf:
b0:00:ef:86:00:50:05:99:08:44:23:de:d1:c8:07:
50:1d:a3:5d:69:59:81:75:c4:87:6e:76:2d:5c:15:
d5:77:60:48:80:f5:06:54:87:25:84:24:a7:78:ca:
e0:81:00:5a:01:48:41:78:6b:18:a0:d2:28:dc:56:
1e:b7:8f:50:10:38:ab:1d:ac:ab:59:f4:01:f2:8c:
29:d1:c7:e2:d2:1b:c0:9e:07:86:88:d0:e9:f3:4d:
be:e6:cd:75:d3:37:a7:ea:ea:33:2f:bf:21:23:a5:
2d:b9:65:76:ed:33:83:9a:bd:25:90:36:22:0b:94:
1e:24:cb:bc:f1:2d:36:b0:ea:e5:af:9a:7f:53:41:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:68:58:A0:69:7A:F1:4C:39:07:CC:E6:3C:3C:46:8C:3A:99:C0:61
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5A12B2E502C11F0BC9831C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7c:5d:13:24:7d:cd:11:f1:fc:91:eb:a1:4f:fb:e8:a8:48:
35:13:fb:f4:56:c1:b8:f1:54:fe:a3:c8:09:fc:c2:9e:19:d8:
26:18:f0:62:55:ec:ad:ef:64:85:53:a0:e2:2e:e8:37:95:f6:
f8:f7:2e:64:bc:da:4b:93:db:fb:80:85:f0:3c:c5:6d:aa:c5:
30:c7:38:f8:58:0d:9b:74:3f:7d:5d:45:3a:cf:4d:da:97:5b:
14:56:87:e5:67:3e:34:41:66:8e:85:f2:ec:85:12:be:3c:ff:
aa:2f:5a:57:f4:c0:ba:c4:3c:41:a3:5d:32:4d:63:6e:3b:11:
5f:3e:94:1a:45:dc:ce:1a:80:31:0b:1b:1c:99:07:8a:1e:da:
aa:52:7a:2a:ff:77:10:34:37:20:fb:de:27:ab:65:8b:ef:20:
b7:7b:83:89:31:3d:0a:d6:30:77:cd:a1:36:0f:6f:06:fd:4f:
f8:ea:7b:43:98:b2:8f:2e:b5:9e:53:72:c0:54:5e:03:73:a0:
58:4b:0f:1b:c2:24:f6:6d:7d:53:4c:77:7a:6b:c3:a5:ea:e8:
b9:ce:e8:de:db:f7:0a:44:87:dc:5d:3e:f3:d5:fd:c0:c8:ff:
2d:c7:69:c5:1e:f0:d0:1c:7b:56:c3:3e:bb:28:5c:f0:7f:99:
0c:46:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:43 2025 by rpki-client