Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA021F8A4B6111F0A72D868EDAE4EC9C.roa
File: BA021F8A4B6111F0A72D868EDAE4EC9C.roa (raw, json)
Hash identifier: DCyY81IYkXp+LoW0JBWI7g/5qTPDiiERXs02I8CM7zs=
Subject key identifier: AF:1A:87:FC:09:E8:6C:C4:81:52:2E:0B:E9:89:09:BA:34:4B:C3:E4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1500
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA021F8A4B6111F0A72D868EDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 09:59:16 +0000
ROA not before: Tue 17 Jun 2025 09:59:10 +0000
ROA not after: Thu 17 Jun 2027 09:59:10 +0000
asID: 20141
IP address blocks: 102.165.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5376 (0x1500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 17 09:59:10 2025 GMT
Not After : Jun 17 09:59:10 2027 GMT
Subject: CN=68513c74-c177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:61:c5:c2:fa:5a:38:a4:a1:df:05:1e:4d:
73:b9:31:0d:4a:81:98:db:71:35:43:4c:bc:6f:33:
4a:51:ab:5f:00:76:70:e0:80:cf:d1:21:3f:68:c7:
b7:e6:d2:64:97:57:96:37:9e:c6:fe:47:ac:6b:59:
59:56:bc:a1:45:32:55:32:2f:7d:38:7b:90:9f:39:
28:3b:32:7d:44:27:04:1d:8e:7c:30:0b:b0:5e:64:
53:bc:ee:34:3b:7b:4a:2f:c9:5e:6a:69:5b:48:5e:
de:f2:f1:32:e4:36:f6:62:6e:27:39:b4:a1:fe:99:
d0:f7:2a:c1:3d:d2:04:40:b3:fd:77:80:86:63:ab:
be:a7:15:d9:1e:e2:1f:5b:27:02:5d:3a:29:99:5d:
a7:66:e8:41:cf:9f:55:91:d5:54:26:4c:3c:47:a1:
07:a0:5e:1e:ed:f8:8a:d9:91:71:6b:d1:3e:43:d6:
94:62:bf:59:56:59:0e:d4:fc:12:54:37:3d:01:9e:
0c:0e:29:6c:0a:83:78:9b:51:d5:83:6c:2d:74:75:
f7:8e:2d:d3:5b:2c:c2:12:ae:40:d0:2c:a3:44:da:
9f:69:fb:af:61:eb:f5:73:6f:5a:7e:ee:1a:0e:95:
c5:cb:bd:1d:96:98:fd:12:de:76:41:7b:e2:bf:88:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:87:FC:09:E8:6C:C4:81:52:2E:0B:E9:89:09:BA:34:4B:C3:E4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA021F8A4B6111F0A72D868EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.49.0/24
Signature Algorithm: sha256WithRSAEncryption
43:52:ca:79:88:43:fc:ca:de:f2:56:0e:66:e7:9c:f2:60:db:
d7:44:7f:82:45:d0:34:1d:10:41:69:a6:80:b7:b7:8a:2b:1d:
31:ee:4f:96:e3:f6:45:16:58:96:68:72:69:09:d9:89:bc:8b:
68:85:7b:63:9b:7e:83:d2:da:72:bc:3b:bf:c3:17:ee:93:a1:
23:e5:17:4a:95:62:af:6a:e1:2a:be:98:5b:d1:4d:7b:44:35:
71:df:ba:3d:64:2f:43:37:8c:d1:62:0e:fe:04:99:6d:f0:96:
9f:b5:92:d8:12:5e:80:95:64:7b:35:02:dc:11:09:a0:48:bf:
8a:2a:db:62:19:a0:6a:70:a2:10:8a:32:76:89:c9:61:b4:50:
d2:c2:e9:62:31:2a:45:df:7e:70:f0:16:ad:29:b8:67:a4:31:
49:9a:3b:26:0b:98:e3:87:d4:73:46:81:b5:b1:31:86:5e:ee:
27:d1:c7:eb:0c:11:6f:e6:0b:b5:6a:0e:f0:37:3a:8f:f4:54:
3e:55:80:52:fa:85:19:ef:c6:f4:ce:b9:35:00:06:db:1d:9b:
87:ef:f4:88:5b:a1:99:2c:b5:b2:c3:e1:da:af:a1:64:c6:4f:
a1:5a:5e:67:9c:98:e3:39:2d:94:b8:ad:29:8e:92:89:6f:67:
2e:a2:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:03:05 2025 by rpki-client