Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2EC1703A5E8311F08931B4E2DAE4EC9C.roa
File: 2EC1703A5E8311F08931B4E2DAE4EC9C.roa (raw, json)
Hash identifier: zSOdhVL40GzvUJIgWbNRIUPS8taPCZikdrrVAlQ4plI=
Subject key identifier: 28:C9:21:A2:5E:4C:03:F7:21:04:E4:8C:46:EF:0E:1D:9F:F8:90:2B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0F81
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2EC1703A5E8311F08931B4E2DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 18:16:37 +0000
ROA not before: Fri 11 Jul 2025 18:16:32 +0000
ROA not after: Mon 11 Jul 2033 18:16:32 +0000
asID: 203020
IP address blocks: 161.123.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 02:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3969 (0xf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 18:16:32 2025 GMT
Not After : Jul 11 18:16:32 2033 GMT
Subject: CN=68715505-ca1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:4b:d4:2e:15:84:26:c3:dd:37:9d:01:ca:
3d:5a:5f:2b:91:27:40:09:a0:90:d5:f5:0b:ea:26:
28:cc:ae:d1:0c:b0:1e:94:d5:5d:14:95:a2:5c:2f:
16:2e:e1:7b:ae:25:b0:15:f7:28:7d:03:83:05:16:
37:38:de:e9:a4:41:2a:90:44:b8:13:f6:e2:84:2c:
23:70:9b:cc:e2:5e:aa:64:2f:b6:4a:08:5f:0c:2a:
dd:7e:d8:94:ba:76:46:3c:23:49:6d:43:d5:67:ad:
46:a1:37:b2:96:1a:ac:94:e0:ae:9e:f4:d4:17:66:
9e:9f:33:7f:c3:10:14:71:f7:96:ca:9b:54:12:e6:
97:af:81:18:9f:ce:fe:23:fa:39:44:31:47:c9:23:
e5:a3:66:13:06:5e:b7:8f:37:fa:f7:c8:11:f6:e6:
f8:5e:a4:46:cf:d5:ba:18:24:eb:b7:0a:17:53:17:
87:b5:3a:ab:90:de:c8:4e:b1:f7:5b:37:27:cf:7f:
d8:5a:6d:6b:96:94:9f:bb:04:9e:5f:5f:f6:70:10:
43:d2:c2:86:e0:e1:59:db:1f:bd:34:d7:2d:22:10:
67:05:83:61:2a:19:97:5c:10:ac:6b:e4:78:65:84:
99:dc:d2:32:49:27:11:e1:a0:ba:16:51:d8:85:68:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C9:21:A2:5E:4C:03:F7:21:04:E4:8C:46:EF:0E:1D:9F:F8:90:2B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2EC1703A5E8311F08931B4E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.102.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:7b:92:9e:f2:92:ae:4c:7b:1f:8a:94:df:39:06:b1:87:23:
ae:a2:32:35:3e:7e:67:e4:52:a1:a9:77:44:13:38:26:ff:db:
2c:5b:2a:f2:32:25:6f:97:b6:96:ab:d9:c9:78:72:ae:51:b3:
22:d8:ef:70:29:3c:3d:92:c5:00:f6:83:44:9f:27:64:8f:7b:
d0:b6:a3:72:cb:0d:c4:08:19:36:07:51:97:9d:d7:4e:7f:f2:
44:ad:55:9a:fb:df:8d:07:1b:40:60:76:fa:27:83:7a:06:69:
13:76:2c:d1:d8:a0:52:91:38:62:08:b7:38:fe:4e:a4:6a:72:
7a:8e:9b:8b:60:ea:4b:fe:eb:0d:8a:5b:e1:8f:e2:bc:5d:8e:
54:54:25:da:ac:95:06:db:2f:a1:ce:17:34:f5:ab:fb:44:5b:
93:a1:48:f9:36:d5:57:4f:37:82:06:2a:d7:c9:91:03:e2:54:
0d:7d:4f:7b:92:58:ad:f1:af:06:4b:3d:14:13:d6:81:ff:de:
55:7a:f2:09:1c:fc:35:0d:7e:78:df:53:37:e5:b0:6f:32:dc:
ea:e5:94:d4:e1:30:a9:fc:e9:ae:02:2d:80:c3:53:59:06:68:
0c:d3:fb:97:b9:54:c1:e3:4e:3d:02:11:a7:e0:a9:0f:82:7b:
29:05:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:01 2025 by rpki-client