Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/96EEF4241AC311F0B89BF12B6EB8BCC6.roa
File: 96EEF4241AC311F0B89BF12B6EB8BCC6.roa (raw, json)
Hash identifier: vqcYzbGtD0ZRcekEWRXQp1WFkBDbdQPKyQSVLdR+Dao=
Subject key identifier: D3:D8:34:4D:0B:1F:9B:05:AC:1D:DA:5B:B1:E8:DC:D5:89:57:C9:2E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1469
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/96EEF4241AC311F0B89BF12B6EB8BCC6.roa
Signing time: Wed 16 Apr 2025 13:06:21 +0000
ROA not before: Wed 16 Apr 2025 13:06:16 +0000
ROA not after: Fri 16 Apr 2027 13:06:16 +0000
asID: 262287
IP address blocks: 102.129.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 01:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5225 (0x1469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 16 13:06:16 2025 GMT
Not After : Apr 16 13:06:16 2027 GMT
Subject: CN=67ffab4c-be6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:7c:b4:12:d2:37:f2:42:53:bb:a3:4a:53:
5f:0d:d9:d0:6a:c2:6d:bc:73:a8:22:98:55:41:4d:
94:33:64:0f:b3:65:0f:0e:48:ab:89:17:b8:a6:b1:
70:e6:75:f1:0a:65:97:e6:6b:fe:f4:db:9b:f5:fb:
4c:99:f4:3e:41:e8:a2:5c:f0:82:91:9e:23:6b:de:
9f:62:9f:f1:62:76:c9:42:35:78:e3:d8:a8:8a:a5:
38:20:5f:2c:c1:9b:a6:04:59:f9:a7:54:64:28:3d:
a9:b0:41:d6:87:20:14:cc:fe:fd:d4:9f:f9:59:7c:
f3:5e:88:90:47:d8:04:8b:43:4f:7b:a1:89:b0:c5:
75:ef:66:05:b4:41:6c:eb:fb:28:ea:a9:65:59:73:
a5:48:40:bb:9c:f1:b2:f7:ae:45:e2:60:dd:71:32:
b5:17:ff:f5:71:9d:ce:c7:81:e3:b0:79:99:d6:4e:
02:db:61:08:f0:74:57:28:0e:33:8d:e3:3e:5d:32:
d0:ad:93:00:d0:f2:5b:1d:ea:8e:62:e0:ac:e6:92:
1a:99:47:33:a4:be:e8:8d:31:b4:d4:e1:8d:fd:c3:
ef:5f:22:fd:1e:2e:a2:98:5f:69:a6:50:89:40:55:
f5:6e:5b:7a:ef:cd:b8:89:4b:10:19:99:70:c5:58:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D8:34:4D:0B:1F:9B:05:AC:1D:DA:5B:B1:E8:DC:D5:89:57:C9:2E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/96EEF4241AC311F0B89BF12B6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:29:48:d0:4c:35:ef:97:9a:cf:38:36:d7:37:27:e4:73:a8:
a5:df:1d:8d:d7:6f:7f:06:d6:d3:6b:03:f9:08:d1:ce:ce:80:
9e:37:f0:ac:24:36:f5:b6:c6:1d:6c:ca:53:f7:57:70:30:40:
52:27:0e:0f:05:71:1b:a3:46:ac:57:7e:51:aa:a5:7e:16:f2:
a7:ed:df:2b:ac:c7:84:17:82:6e:25:a7:86:fd:4f:3a:3b:10:
b4:cb:d0:c4:b2:e1:57:04:e0:b6:ba:ee:3a:f8:54:01:66:f4:
28:d2:4c:24:57:f9:67:85:85:be:7c:ed:5d:d0:5e:27:b4:7e:
e6:8e:bd:62:0a:81:c9:af:2c:1f:3b:a0:7f:d7:f1:4b:1a:43:
4f:0a:98:7c:13:54:39:17:9e:f2:e0:43:8e:9f:d6:8f:9a:36:
ae:f8:1a:ac:a2:e8:00:88:45:39:e6:fb:d3:70:74:30:ed:86:
25:ce:c6:9a:d5:c8:ce:c2:e0:e2:77:79:74:00:24:a2:48:46:
7d:39:11:b8:52:14:d2:99:76:2d:a9:8b:e6:ae:c4:d5:a4:cc:
70:09:d0:b9:29:4e:da:84:fe:96:20:b3:bf:20:51:30:b3:ac:
a7:8d:8a:1d:98:64:1e:2b:aa:ab:a1:d9:6c:84:12:ab:c2:23:
12:87:88:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:40 2025 by rpki-client