Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC6D68EE330011F0B75D57B4DAE4EC9C.roa
File: AC6D68EE330011F0B75D57B4DAE4EC9C.roa (raw, json)
Hash identifier: 1HuSlV1Y2B/CHuA7iZR3gZ9qVLSm6clYeQKL+KmxGwE=
Subject key identifier: 05:BB:67:75:1E:B5:E9:67:91:12:D4:03:0D:88:67:EA:DE:63:C0:22
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14AD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC6D68EE330011F0B75D57B4DAE4EC9C.roa
Signing time: Sat 17 May 2025 09:24:04 +0000
ROA not before: Sat 17 May 2025 09:23:59 +0000
ROA not after: Wed 17 May 2028 09:23:59 +0000
asID: 211192
IP address blocks: 102.165.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5293 (0x14ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 17 09:23:59 2025 GMT
Not After : May 17 09:23:59 2028 GMT
Subject: CN=682855b4-9352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:54:69:ed:ef:d3:b7:d8:1f:5f:e7:c3:fa:
44:98:0d:7a:39:04:f1:45:30:ce:d9:da:48:c5:23:
b2:64:a4:02:bc:ef:45:35:a8:b9:5a:16:f8:03:72:
ce:89:48:a2:ee:da:43:54:78:03:39:93:c9:c5:c0:
f6:01:cf:d7:88:a4:13:fd:49:0f:12:cc:18:38:58:
cb:66:f5:47:2f:f9:fc:83:72:d8:b4:1b:c0:d0:a5:
13:bc:a1:8e:f0:62:0f:dd:d6:cb:a0:ba:7d:9b:fb:
17:b4:86:f9:8d:67:ce:1b:24:1a:dc:e8:be:ef:75:
4d:d9:73:c0:77:29:68:a2:54:22:df:e4:a6:11:10:
21:10:16:07:ce:02:73:e1:35:bd:9f:0d:1c:23:d2:
79:c2:a7:69:fc:89:cf:67:4b:7b:2b:15:29:da:a2:
97:14:42:ce:06:9b:43:10:0a:b7:56:b3:66:e1:f0:
76:8c:b5:c6:4e:f0:92:82:f5:bf:e2:4d:f8:19:ae:
2b:13:ee:4f:61:de:c7:37:79:80:c1:47:14:40:13:
76:21:10:f6:b3:8a:43:fb:3c:dd:e5:e2:bf:df:d8:
2a:08:30:a2:15:a9:4e:8e:eb:25:98:eb:d6:5c:ce:
94:85:8f:92:7b:d7:c5:3d:0c:0a:79:89:0e:bc:cf:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:67:75:1E:B5:E9:67:91:12:D4:03:0D:88:67:EA:DE:63:C0:22
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC6D68EE330011F0B75D57B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.31.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a7:de:b8:09:e5:eb:bb:7b:da:d5:a3:64:8e:31:f0:23:dc:
7b:2d:90:9c:bf:69:f1:2d:ea:66:e8:70:e4:ab:45:8b:b9:51:
b9:ee:83:15:3f:a6:52:1e:8e:8f:0c:a6:6e:d4:49:90:50:7a:
c7:34:f3:d0:8d:40:d3:b0:f5:28:12:ba:27:6c:41:f5:a6:c7:
6f:7a:c5:e5:63:9c:2d:29:b1:b7:4b:ac:8e:ec:81:25:ee:ab:
8d:7e:2d:0f:2a:6e:54:ec:12:02:53:16:b9:0d:dd:ce:1c:7e:
be:f8:71:1a:39:f3:bf:93:42:7d:3f:5c:96:79:30:d7:87:9f:
3b:b0:57:92:5f:da:25:71:fb:62:5d:ee:73:bc:61:33:32:21:
ca:5d:26:ad:de:30:c7:37:1e:9a:ed:73:2a:21:a6:a2:e8:4c:
68:35:f1:77:02:95:9e:d9:52:ce:3f:0c:ce:55:3f:2e:53:4b:
18:6a:09:34:7b:02:6e:bf:5e:f8:3f:88:5d:d3:59:66:e7:31:
d7:79:b7:ef:bf:13:e2:eb:f7:d1:d9:30:56:59:e6:d8:20:51:
4a:df:01:7d:61:3f:6c:db:4c:33:8b:1c:73:60:e3:d2:5a:71:
30:4d:4c:d3:66:fa:7d:3c:9b:f1:e4:79:43:20:68:d6:76:c8:
3f:7b:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:15:16 2025 by rpki-client