Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/2102A8A43D7911F0803DB98ADAE4EC9C.roa
File: 2102A8A43D7911F0803DB98ADAE4EC9C.roa (raw, json)
Hash identifier: jn6wHDa7z3BpOGn7UEKxpnEmsypcGUNkQbxecl9NKpA=
Subject key identifier: 25:D0:DB:21:25:21:5A:58:5F:DF:67:8E:69:1C:F4:1A:AA:D6:FF:D2
Certificate issuer: /CN=F36C29E6AR/serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Certificate serial: 06
Authority key identifier: 26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
Authority info access: rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/2102A8A43D7911F0803DB98ADAE4EC9C.roa
Signing time: Fri 30 May 2025 17:11:31 +0000
ROA not before: Fri 30 May 2025 17:11:26 +0000
ROA not after: Fri 29 May 2026 17:11:26 +0000
asID: 327947
IP address blocks: 129.122.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft
rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C29E6AR, serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Validity
Not Before: May 30 17:11:26 2025 GMT
Not After : May 29 17:11:26 2026 GMT
Subject: CN=6839e6c2-913c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:9a:01:55:fb:15:c5:b0:cf:8e:70:ed:a9:
6a:2b:3c:b6:8f:57:65:b3:35:23:4f:8c:c7:94:35:
54:41:67:48:58:75:5c:dd:61:21:8f:69:76:fd:31:
be:00:35:fb:7f:45:34:3b:4f:4a:8e:ba:3d:f9:4c:
0a:1b:c2:58:01:1a:79:1e:53:18:b3:e0:b6:41:6d:
d2:c7:69:fb:53:27:ca:89:d1:dd:18:18:ff:64:7c:
a1:47:5c:b1:1e:15:83:07:04:f8:ef:11:5a:6e:ce:
f2:64:66:6d:5c:60:fd:ad:94:47:55:1c:eb:ec:c9:
84:44:50:11:b9:77:70:14:52:03:d1:4d:25:c3:30:
a4:07:29:4a:1f:13:ee:74:1f:72:30:19:41:ab:14:
ca:d3:29:b8:54:d9:d9:fe:d7:69:cf:4f:f0:fd:45:
b5:54:f1:6d:8a:9c:ba:36:09:c7:4a:ac:35:6f:7a:
de:de:53:af:65:dd:4f:9e:3f:e5:d6:92:08:cf:6d:
b7:f4:d1:4a:3b:b2:ad:0a:6b:13:31:18:4d:57:16:
79:54:3f:66:a1:ff:4f:6c:13:56:90:88:76:f2:ef:
bd:8b:2b:6b:c4:a9:ec:db:53:04:2a:f4:94:dd:be:
69:fc:88:b2:2a:f7:91:a1:34:93:bb:4e:03:22:e0:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:DB:21:25:21:5A:58:5F:DF:67:8E:69:1C:F4:1A:AA:D6:FF:D2
X509v3 Authority Key Identifier:
keyid:26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/2102A8A43D7911F0803DB98ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.122.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:1f:bf:b9:46:75:f4:56:fb:73:82:02:02:f2:eb:a1:05:6e:
91:e9:ee:37:3d:86:28:f8:3a:40:58:d3:66:c4:4b:c2:2d:9f:
e0:db:11:88:77:8c:64:98:e8:46:00:4a:a9:41:e3:08:2f:de:
d9:c0:1e:dc:1c:19:ff:8c:93:cc:5f:32:fd:73:72:ee:3a:0c:
36:e8:1b:27:c5:3e:27:55:d1:d5:fc:93:79:57:6e:fc:3e:cf:
c0:25:4c:91:cc:35:a6:9a:c0:6a:21:c0:39:f5:ad:2b:d4:a0:
5f:f3:ec:e6:10:05:3d:11:ba:af:18:99:b8:41:8a:3e:84:d3:
71:04:6c:5d:35:84:05:78:e9:b9:aa:89:54:c0:b7:8b:3f:8e:
3c:a4:46:55:1b:cd:a6:b6:3a:d3:d1:b9:80:cf:ca:f0:13:c0:
86:5e:e8:8a:ad:22:c3:33:0f:53:f3:bf:a9:4b:f0:5c:66:d4:
b7:74:a3:5a:75:fa:4d:f1:2e:43:6e:28:df:0f:79:48:af:ae:
d3:d8:1e:28:6f:18:c7:e5:7a:01:0a:80:e8:3b:fe:90:ab:1d:
60:a8:f0:d5:68:b8:f9:f3:8c:08:30:91:52:e3:e0:71:b7:82:
73:21:c7:ba:b1:66:e7:69:5b:a1:a4:37:35:1c:51:6b:a6:84:
88:c1:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:21 2025 by rpki-client