Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E21A2E636E811F0944FA4D8DAE4EC9C.roa
File: 9E21A2E636E811F0944FA4D8DAE4EC9C.roa (raw, json)
Hash identifier: pDOjxdNZVHH2u+uKoLtWs7YqVZFPZWf5MYnCkAxxMsU=
Subject key identifier: A2:A8:19:20:97:04:92:70:14:A2:CD:6F:27:A6:2D:99:C2:CE:ED:92
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14C4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E21A2E636E811F0944FA4D8DAE4EC9C.roa
Signing time: Thu 22 May 2025 08:41:56 +0000
ROA not before: Thu 22 May 2025 08:41:52 +0000
ROA not after: Mon 22 May 2028 08:41:52 +0000
asID: 213734
IP address blocks: 102.129.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5316 (0x14c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 22 08:41:52 2025 GMT
Not After : May 22 08:41:52 2028 GMT
Subject: CN=682ee354-2462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:5c:01:85:69:f2:0e:90:1b:34:0b:75:ec:
fa:a9:c4:81:5c:46:a3:6d:43:45:c9:f2:02:b9:b5:
27:06:23:ff:95:6e:ba:0d:a2:e3:b9:4b:22:a2:90:
51:3b:0b:5b:df:68:75:e0:30:a6:be:d8:f9:01:72:
be:95:d7:2a:e4:40:94:be:07:05:54:00:ae:96:2c:
74:71:20:1f:48:dc:8d:e1:45:d9:e8:fc:b4:44:66:
1b:cf:38:41:97:f0:ea:5a:db:65:a6:40:28:18:b6:
e2:36:5f:a8:c2:14:ae:9d:3a:bc:18:98:b2:a4:8c:
b8:d3:60:48:f7:04:ff:f4:0b:d4:7c:2f:1a:fa:09:
78:1c:81:bf:c3:83:f1:ce:4a:45:f4:d9:4c:d3:52:
01:ae:46:e3:7e:f7:79:0e:2e:31:41:6f:f0:99:a4:
9a:d3:1a:56:77:80:39:c7:e0:39:35:43:1c:61:f4:
80:96:c5:5f:97:c0:a8:6c:16:3a:5e:de:52:51:60:
88:a4:87:04:17:9d:1a:03:6a:cb:33:00:4c:46:c0:
e9:bd:2b:cb:03:b2:06:e0:c8:b6:c9:d8:01:fb:cb:
dc:2f:24:86:7d:05:aa:29:ff:05:67:37:c7:42:87:
02:7a:6d:66:7e:be:ac:68:0b:4f:58:12:4e:88:48:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:19:20:97:04:92:70:14:A2:CD:6F:27:A6:2D:99:C2:CE:ED:92
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E21A2E636E811F0944FA4D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.135.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:d3:f2:c0:f4:80:0a:38:44:55:8c:36:5b:a5:c6:9a:13:36:
3e:bd:3b:66:5b:33:ff:a2:6b:f9:a4:48:99:68:50:d8:5e:52:
9c:b4:4a:72:e7:7d:61:3d:00:3b:4e:fd:e7:95:4d:fb:2b:be:
68:14:68:49:54:5a:51:8f:46:df:98:e5:25:74:92:7a:a0:e4:
db:75:67:80:ff:e9:00:17:31:b4:e5:3b:fa:a6:c4:f4:58:1a:
52:8f:57:06:0d:6c:36:44:41:ea:13:89:cc:a5:0f:46:e3:cb:
19:94:d3:5d:cf:92:da:fd:69:06:78:cd:0b:98:50:dc:ed:78:
b6:9a:9b:ca:bf:34:c2:b9:56:4b:e8:bb:91:60:32:d1:e2:68:
93:ae:c0:48:3f:e9:9b:d6:23:1e:9c:c7:5a:80:59:2c:33:9b:
d1:21:1d:e3:b5:d2:2e:89:0a:f0:13:a3:c2:06:25:23:ed:8a:
f7:8a:b9:4b:2a:d2:ad:6d:a3:6a:47:5f:e5:a5:e5:77:ac:ef:
e2:1c:21:fa:f5:e1:a4:17:3f:77:66:c9:4c:1c:db:f9:75:58:
fa:5f:1c:c9:5c:6a:47:0b:48:6b:6e:7b:87:4f:26:2d:77:6f:
4b:02:4a:97:14:2f:dc:a7:f8:a2:5b:7d:cc:50:44:26:b2:cf:
77:16:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:05:16 2025 by rpki-client