Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B68BD60E563B11F0A2614AB8DAE4EC9C.roa
File: B68BD60E563B11F0A2614AB8DAE4EC9C.roa (raw, json)
Hash identifier: I8DUR/txHyV4YK0AGh55s7Y2vPodf1Zp6NbEVc9+zaU=
Subject key identifier: 1D:B6:77:C2:79:15:25:CD:70:50:F3:DB:A9:73:06:C0:94:F5:50:6F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 152C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B68BD60E563B11F0A2614AB8DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:24:52 +0000
ROA not before: Tue 01 Jul 2025 05:24:47 +0000
ROA not after: Thu 01 Jul 2027 05:24:47 +0000
asID: 834
IP address blocks: 102.165.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 01:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5420 (0x152c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 1 05:24:47 2025 GMT
Not After : Jul 1 05:24:47 2027 GMT
Subject: CN=68637124-9472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:41:1e:7f:d5:fe:f1:db:2e:93:d0:46:0f:
3f:d4:1f:b9:1f:d9:8d:d0:da:ac:79:de:9d:54:e0:
cb:04:85:b5:3a:22:7a:36:55:33:7c:c8:c2:95:fd:
67:bd:d5:34:f5:25:f3:c2:3f:72:88:c8:d5:0a:2e:
2d:00:e4:4c:77:93:ff:43:94:41:1f:28:83:fa:a9:
af:45:6b:db:3c:34:42:0f:f5:05:a9:9c:52:67:38:
78:d2:c7:96:7b:e9:b9:ce:15:7e:ba:84:85:ab:b0:
70:a3:0e:a6:ca:8a:9f:6b:00:ef:89:8a:8f:35:e7:
32:f8:de:0a:f8:1a:1f:5d:34:94:3b:05:47:7e:1e:
1c:7b:ca:e4:02:ba:f5:1f:aa:1a:fc:b8:90:57:4e:
33:ad:0e:b3:1d:51:32:b9:85:4d:ae:dd:20:70:f9:
7e:bf:16:74:73:a0:86:d7:46:a2:13:6f:a2:87:bd:
b1:d8:95:91:32:e8:b3:b4:4f:45:99:8e:7d:0e:fb:
c6:00:40:3a:99:0c:7c:74:fe:5e:c0:f6:d7:fe:10:
26:de:f7:e0:a7:8a:3f:a0:93:0e:8d:d8:f6:a7:02:
0f:ca:ab:e9:4b:75:17:d5:b9:56:58:65:5f:9c:eb:
9a:64:07:c2:dd:e1:a2:fc:f9:81:d6:1b:50:34:cf:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B6:77:C2:79:15:25:CD:70:50:F3:DB:A9:73:06:C0:94:F5:50:6F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B68BD60E563B11F0A2614AB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.16.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:73:f4:a9:5b:f2:f2:dc:63:a8:22:77:4b:62:b9:36:16:a6:
f0:79:a1:9c:7c:58:23:e7:5e:e9:ee:98:0b:b0:68:a2:b4:4e:
3a:a6:36:be:ab:16:f7:e8:7b:10:5a:1b:07:cc:94:30:6a:d3:
19:a3:a6:45:4b:89:73:a3:1c:0f:48:ec:9e:8b:1d:5b:26:9f:
87:ba:2e:9b:33:f7:dd:33:f0:09:43:b2:c9:38:96:74:5a:aa:
3e:b3:b5:61:bc:b2:f8:00:98:b2:a1:ae:3d:07:6a:f7:4d:ef:
7a:92:a1:eb:be:92:8f:cb:1c:34:5c:72:e8:34:d6:9d:35:fb:
c8:09:c3:5b:46:3d:8f:c2:c3:39:66:60:01:56:50:b2:d7:7e:
41:92:b5:ef:b0:5b:20:85:d9:11:cb:33:cb:eb:bb:20:09:c6:
27:4f:6e:63:98:88:e4:fb:f7:2d:c9:b6:66:c8:8d:e0:58:eb:
92:cd:09:2b:c1:b5:4e:f5:d9:58:ae:ff:b7:7e:25:45:af:94:
1f:7e:d5:bf:71:3e:96:ed:92:a1:87:4b:31:48:c5:41:9e:8d:
cc:28:8a:96:d6:88:a8:12:51:bb:28:ed:d9:97:47:90:20:69:
34:e4:69:df:3a:34:ee:f5:56:6d:21:01:7f:60:ec:a1:dd:4f:
a0:2c:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:42:39 2025 by rpki-client