Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3F2AC84815EC11F08E5E96D26DB8BCC6.roa
File: 3F2AC84815EC11F08E5E96D26DB8BCC6.roa (raw, json)
Hash identifier: E3+/ezfN3Y9Qcuav3WzEJ7tL1VimvyJt44A3wtcUdB4=
Subject key identifier: 5C:4C:34:A5:E4:D2:E2:1C:82:97:A2:66:62:2D:63:CA:5E:A3:24:EE
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 144A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3F2AC84815EC11F08E5E96D26DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:14:46 +0000
ROA not before: Thu 10 Apr 2025 09:14:43 +0000
ROA not after: Sat 10 Apr 2027 09:14:43 +0000
asID: 58061
IP address blocks: 102.165.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5194 (0x144a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 10 09:14:43 2025 GMT
Not After : Apr 10 09:14:43 2027 GMT
Subject: CN=67f78c06-d728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:b8:4d:9c:07:7f:0a:ed:fe:18:18:04:90:
84:c8:35:2e:b4:89:f2:3d:af:a8:b0:39:e8:1f:6b:
4f:2d:42:d3:ad:9a:1a:cc:ca:24:e0:fa:72:0e:6b:
05:5e:5c:92:3e:2d:b0:4b:87:66:f0:96:8d:ce:58:
ce:27:37:37:97:fe:a6:5a:12:77:56:a5:da:94:a1:
2a:6a:df:2a:24:87:bd:b2:68:b5:39:0e:ef:97:1e:
49:eb:e9:e2:22:67:4c:b1:3d:86:66:21:67:56:3c:
50:5a:54:0b:f2:a1:66:54:97:84:77:9e:1a:f4:03:
5b:65:3a:8b:03:ad:2c:a0:35:b0:4c:ca:a5:1b:69:
6d:ed:da:e9:1a:70:21:53:5d:17:0e:db:e3:c3:65:
9e:97:f4:f1:84:88:16:d2:c5:0e:2a:38:bb:d9:2e:
70:ac:05:71:5f:e0:70:20:28:8f:90:4c:90:e0:61:
e3:2a:8c:17:3f:ed:57:1c:61:cb:10:76:ef:61:ea:
4b:ab:27:36:c1:32:7f:15:6e:3f:dc:05:e2:37:3d:
d7:47:46:9c:a8:9d:f5:7b:8e:f4:9f:8e:af:52:cd:
9f:a5:b1:84:2d:7e:c5:52:fa:95:23:56:14:20:5b:
40:9d:1c:5d:fa:85:67:06:e5:75:19:63:ea:71:a2:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:34:A5:E4:D2:E2:1C:82:97:A2:66:62:2D:63:CA:5E:A3:24:EE
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3F2AC84815EC11F08E5E96D26DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c8:9c:8e:c3:2f:87:e8:56:fd:26:c1:88:2c:25:49:db:65:
4b:fc:4b:1b:e5:4f:7c:dd:f9:bc:88:b4:b9:a7:d4:8b:6c:26:
6a:61:27:64:f3:21:fb:81:94:3f:f6:db:d0:97:f5:8e:a0:0d:
77:e5:e3:ce:e9:bb:56:34:2a:e2:14:af:17:dd:56:ec:8f:dc:
63:f9:fa:81:4f:b6:37:d6:79:c4:14:76:bb:22:39:e1:09:84:
bc:5d:2a:99:4d:f2:4f:bb:3d:76:d6:cc:a2:91:a7:05:78:48:
ef:36:15:97:4f:7d:97:f8:99:81:8d:41:58:59:0d:74:ac:2c:
76:8c:5b:71:d0:c5:9e:46:e5:58:12:00:f6:c3:b1:6d:bd:c0:
9b:4b:ea:42:8a:75:13:66:e3:09:08:34:76:83:fb:f7:a1:c1:
1c:08:5f:f7:0b:a4:60:05:db:da:4c:3d:a2:bc:ce:ae:a9:09:
7c:7e:b1:f2:2b:5d:4b:5d:df:f2:93:72:f1:11:09:d7:66:06:
71:09:07:36:80:9b:4f:5e:16:af:ab:bd:1f:e8:fe:b3:5f:c2:
bf:b1:ee:d9:7a:95:c1:2c:8b:60:50:47:4b:7c:d5:56:b0:a7:
f5:fb:6c:de:09:81:fb:54:8b:cc:88:f3:6b:a4:c6:83:69:6d:
ae:0a:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:11 2025 by rpki-client on console.sobornost.net