Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2511597215EC11F08A6694D06DB8BCC6.roa
File: 2511597215EC11F08A6694D06DB8BCC6.roa (raw, json)
Hash identifier: t3CqvFjssQqzvTk/uj2ECSPZvJsb2foLOMUFOuzetiw=
Subject key identifier: 94:AD:57:9A:BC:8F:BB:04:CB:C4:FA:6F:81:13:0B:25:15:3E:FC:21
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1448
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2511597215EC11F08A6694D06DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:14:03 +0000
ROA not before: Thu 10 Apr 2025 09:13:59 +0000
ROA not after: Sat 10 Apr 2027 09:13:59 +0000
asID: 174
IP address blocks: 102.165.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 01:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5192 (0x1448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 10 09:13:59 2025 GMT
Not After : Apr 10 09:13:59 2027 GMT
Subject: CN=67f78bdb-072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:ab:96:d4:2d:e6:2b:f7:10:30:7a:c4:db:
9d:84:d2:9a:f6:ee:d5:c6:8e:ff:50:d8:bd:e9:38:
15:29:ea:c8:e7:7f:99:de:c3:bf:7b:4c:e1:22:04:
f9:97:ae:4a:22:b6:6c:78:c9:8e:f4:fc:93:0e:9a:
e4:14:e4:20:42:88:cd:ae:4f:a3:87:7c:40:e5:52:
ad:02:38:88:c4:b5:14:d2:73:66:7f:4e:07:b9:96:
74:95:17:df:2e:d1:e3:73:86:66:00:c0:56:09:3b:
f6:98:64:61:ee:9a:65:cb:86:a5:e8:a5:98:84:d3:
fd:29:04:50:d1:5a:80:d1:36:30:7e:7d:54:6a:eb:
52:03:75:e7:f2:2b:50:ee:d9:60:20:51:3d:12:62:
08:90:99:b7:25:7b:c3:1f:0c:27:81:65:26:9e:49:
c4:d0:65:44:3b:ce:6d:0f:d0:9e:e3:bb:ea:dc:3f:
0b:76:1e:53:55:d3:20:7a:79:03:0f:8c:40:db:26:
f7:ce:95:45:cb:41:da:4f:46:ad:e4:a1:d7:2e:fc:
dd:f3:6f:6b:58:63:80:6b:88:61:06:c2:52:b3:c7:
8a:50:da:55:76:0a:f2:d5:9f:bb:0e:5d:7d:18:19:
d2:02:1a:69:58:8f:63:34:bf:a1:40:9a:dc:08:55:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AD:57:9A:BC:8F:BB:04:CB:C4:FA:6F:81:13:0B:25:15:3E:FC:21
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2511597215EC11F08A6694D06DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.16.0/24
Signature Algorithm: sha256WithRSAEncryption
29:68:12:96:70:a1:a8:94:34:ef:0b:86:d7:45:93:08:de:a4:
36:4d:05:7c:28:34:40:f7:81:53:3f:b6:83:cd:57:2d:0b:15:
f4:a8:f1:f3:09:62:e9:36:49:62:38:09:0a:c3:1b:ba:1b:17:
eb:28:71:c5:65:75:17:e5:75:71:b3:30:fd:f4:2d:36:13:36:
ce:55:bb:06:14:c8:c0:53:f9:63:5a:7d:e9:6b:d4:e3:bf:e5:
8c:30:54:91:dd:28:8b:80:7c:c0:f9:ad:84:06:06:0c:b8:a2:
dc:85:52:55:ca:f1:ef:6f:36:6f:57:15:87:ec:80:74:a9:e3:
e9:7c:84:39:02:b3:e2:32:9e:bc:9c:b7:81:75:9f:2e:7a:e1:
b1:96:43:51:e6:c7:0c:f1:b5:40:f0:31:24:c0:07:ca:23:38:
e9:39:24:40:cd:f4:e0:61:2e:45:7c:ea:a2:1d:e1:f6:c9:9c:
23:7f:9f:4e:a4:95:eb:b5:f7:50:68:ed:e4:52:e9:2c:a1:2b:
69:86:6b:e3:29:ba:74:2e:f1:da:d5:c6:9b:c1:6d:8f:d2:ce:
8b:87:3c:e0:1f:1d:7c:eb:02:7d:76:6b:36:4c:d6:ba:2a:76:
64:d3:ae:2b:47:54:da:91:02:96:8a:9e:51:96:b5:25:27:3e:
59:8d:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:08 2025 by rpki-client