Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6CD1DA9815EC11F0A6F3CBD46DB8BCC6.roa
File: 6CD1DA9815EC11F0A6F3CBD46DB8BCC6.roa (raw, json)
Hash identifier: 4t3jzjiYJfk7NpgBYGnJqmEAXQSwdJLk2f6pnXpgYOA=
Subject key identifier: 6C:88:16:43:7C:67:C0:3C:B4:F4:24:FD:9A:3A:B1:90:B3:B3:04:5B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 144C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6CD1DA9815EC11F0A6F3CBD46DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:16:03 +0000
ROA not before: Thu 10 Apr 2025 09:15:59 +0000
ROA not after: Sat 10 Apr 2027 09:15:59 +0000
asID: 7018
IP address blocks: 102.129.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5196 (0x144c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 10 09:15:59 2025 GMT
Not After : Apr 10 09:15:59 2027 GMT
Subject: CN=67f78c53-9450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:6c:ed:9d:ed:2a:7e:65:fb:e4:8a:3a:25:
91:7d:f1:4b:07:7b:b7:9a:a4:48:69:71:a3:fa:e7:
ec:43:4d:8c:d6:7e:f8:7d:8e:a8:3d:4f:92:7f:48:
2e:c5:29:33:16:22:bb:c8:1e:c1:c6:1c:ea:d6:6e:
14:64:96:d8:90:51:86:2a:1e:15:7e:e5:31:6f:c5:
82:52:44:1e:3c:50:72:bb:e2:74:c6:49:56:7e:00:
cf:58:1a:e2:65:ba:2b:1a:2a:33:3b:86:f2:00:74:
f4:dc:ef:9f:44:b7:3d:5b:ee:55:e0:3e:2b:b8:76:
a5:ad:bd:61:3b:e4:1d:3c:52:fe:87:33:68:c0:fe:
e0:7c:17:1e:29:d9:b7:0d:2c:db:be:f5:b7:ad:ed:
d8:9e:8c:1f:23:a5:07:aa:4e:83:19:50:be:42:53:
a7:05:4c:87:d1:e4:b1:be:b4:f3:98:9a:a1:04:29:
f0:e2:3f:86:69:b3:07:ff:c3:a3:df:85:df:2a:07:
4c:43:b8:e7:93:09:f9:c8:21:3a:ea:ab:f8:79:67:
df:62:77:b9:3e:ae:a8:ac:90:5c:d5:58:cc:38:4b:
46:c4:fb:e5:c2:23:d3:05:16:47:19:3e:6e:46:a1:
20:9d:f3:64:5d:72:11:59:98:04:48:cb:c9:0d:77:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:88:16:43:7C:67:C0:3C:B4:F4:24:FD:9A:3A:B1:90:B3:B3:04:5B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6CD1DA9815EC11F0A6F3CBD46DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.170.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:fd:17:5b:fb:9d:1c:5e:95:e6:1e:cb:3a:d2:90:f8:ea:50:
1e:3a:7a:4e:5f:ad:50:12:21:4f:47:1f:5a:e9:8f:38:e0:4e:
ae:ac:79:62:06:ea:cc:7a:59:c9:d0:36:97:44:3a:71:d1:61:
3a:22:4c:71:8e:74:f8:e3:b0:d4:56:b2:af:b0:80:cc:27:f2:
2a:4c:71:19:16:89:ee:bd:15:7a:32:d2:6b:ee:09:52:31:a7:
61:1b:03:5c:fa:c8:13:07:db:3c:50:fa:81:65:60:40:68:c0:
c5:89:1e:7c:ed:f4:ac:7a:58:cd:ab:22:ab:46:98:2c:7f:b3:
a1:77:3f:2c:5d:e3:e7:f2:9f:14:f5:30:3b:68:77:07:80:b5:
4d:7a:79:91:49:59:61:44:4a:f4:d4:0e:90:97:18:2e:ec:9d:
01:d9:55:c7:7a:b3:41:06:04:bd:ec:3a:c6:71:db:cf:c3:04:
f3:38:df:bd:47:94:92:13:08:82:60:ae:b0:db:df:77:7d:41:
1c:c1:75:e7:7d:9c:1a:ea:5f:b3:c8:c2:a4:b7:b7:4a:1d:3f:
7f:e3:fa:32:7d:10:dc:2c:4c:bb:8d:bd:5e:00:71:6a:33:55:
e9:5c:df:06:d6:99:cc:4d:01:c6:32:ae:e2:25:78:61:42:2b:
7f:90:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:38:30 2025 by rpki-client on console.sobornost.net