Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DE749A184B7B11F0AAB9C6B3DAE4EC9C.roa
File: DE749A184B7B11F0AAB9C6B3DAE4EC9C.roa (raw, json)
Hash identifier: af8ncXHMAwBVJEZovWCGbFd9eqS6R6TZU6++dbZ8kPA=
Subject key identifier: EE:96:69:70:34:50:50:85:42:FE:98:55:18:E5:DE:7F:C6:6B:A3:96
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1504
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DE749A184B7B11F0AAB9C6B3DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 13:06:25 +0000
ROA not before: Tue 17 Jun 2025 13:06:18 +0000
ROA not after: Thu 17 Jun 2027 13:06:18 +0000
asID: 22516
IP address blocks: 102.129.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5380 (0x1504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 17 13:06:18 2025 GMT
Not After : Jun 17 13:06:18 2027 GMT
Subject: CN=68516851-8ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:b1:dd:99:5c:5d:de:33:90:c5:dd:e6:e4:
7d:9c:57:19:e4:54:2a:f5:db:9f:a1:38:ae:46:bd:
0f:e7:f0:bb:23:ea:21:74:10:b2:d0:4d:6f:a5:29:
8e:48:ce:6c:78:b7:19:6d:c6:cd:8c:e0:e0:26:e4:
31:b9:78:a0:e0:ce:23:2c:ce:2e:ba:f9:9e:91:14:
d6:b0:35:f5:df:c1:96:f7:b1:71:1d:eb:aa:a0:9c:
99:83:5d:de:28:9d:fb:9e:66:4e:85:20:d2:a7:be:
d1:3e:96:62:fe:3c:8f:d5:5a:cc:ab:78:a2:ea:82:
6e:d1:01:36:0a:08:78:a1:20:4c:bb:2e:2b:62:e3:
dd:7c:1c:9d:cb:3e:19:b2:32:59:66:f9:df:97:b4:
e2:65:56:69:0f:e1:3d:d6:0c:ba:2c:7e:d0:67:3f:
0b:91:73:5f:67:0c:c7:c7:f9:2d:17:76:4a:f6:6c:
8a:d3:4c:0a:14:04:1b:56:fb:00:a7:f6:77:11:24:
fb:16:9f:e9:4e:13:08:fe:d7:0a:d0:a5:05:05:6c:
e2:2b:67:4c:ac:25:e5:59:f8:a4:8f:77:ee:15:0d:
94:02:04:a9:77:07:70:90:4a:ce:3a:b6:c8:29:81:
ad:2c:1c:24:92:e3:c7:b0:01:ab:1d:37:3a:b7:50:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:69:70:34:50:50:85:42:FE:98:55:18:E5:DE:7F:C6:6B:A3:96
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DE749A184B7B11F0AAB9C6B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.247.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b6:f0:6d:9f:8c:10:5d:53:ef:0a:04:17:a6:46:16:77:b9:
ff:be:73:d5:39:39:03:38:aa:5d:92:60:28:60:10:a4:2d:a2:
ce:2b:6b:02:a2:8f:e4:09:70:3e:7a:4c:df:d3:91:e3:ab:d5:
4e:21:b8:ca:bd:46:a8:14:ba:bb:a8:b0:9e:2c:f8:e9:61:6c:
13:6d:be:8e:2f:d5:72:04:a3:ac:a4:dc:36:55:0a:7a:30:35:
d2:79:03:c2:ad:02:9d:91:54:54:ba:59:1d:ed:8b:2b:4d:a6:
0e:e7:80:da:30:43:60:c2:99:ae:dc:85:ce:75:20:6c:87:06:
a2:9b:72:83:5b:d6:ad:3c:ab:a5:c3:01:67:51:12:03:ec:a8:
0a:23:72:d9:aa:f5:08:38:8d:e9:05:26:8d:57:5a:cb:fd:88:
d1:31:85:94:36:c9:89:a7:ac:45:82:47:de:aa:06:be:7c:f3:
94:9d:3a:0c:b0:5e:5f:83:f7:fb:be:4b:65:ea:63:ab:9a:49:
4d:f5:7b:27:5b:d4:20:c6:7e:c0:f8:11:2b:85:73:75:f5:19:
ae:0f:8f:2f:5b:e8:70:c5:a0:3c:06:2c:77:6e:13:2d:08:40:
55:66:fc:a9:4d:c9:56:fe:b9:84:2e:59:26:d6:1c:cb:b8:fa:
3e:a6:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:51:40 2025 by rpki-client