Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/D4D84B9E3D5211F08FF5E995DAE4EC9C.roa
File: D4D84B9E3D5211F08FF5E995DAE4EC9C.roa (raw, json)
Hash identifier: /d1iMp/ZT/BMLsfn6Ybe9u0ARPnAxFGfjCR2WymN//o=
Subject key identifier: BB:FC:94:0D:75:85:4C:5C:9A:27:24:6C:90:AD:DA:AB:69:2D:44:B2
Certificate issuer: /CN=F3611B04AF/serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
Certificate serial: 02
Authority key identifier: 4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/D4D84B9E3D5211F08FF5E995DAE4EC9C.roa
Signing time: Fri 30 May 2025 12:37:22 +0000
ROA not before: Fri 30 May 2025 12:37:16 +0000
ROA not after: Thu 31 May 2035 12:37:16 +0000
asID: 37323
IP address blocks: 102.211.244.0/22 maxlen: 24
197.255.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 05:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3611B04AF, serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
Validity
Not Before: May 30 12:37:16 2025 GMT
Not After : May 31 12:37:16 2035 GMT
Subject: CN=6839a682-55b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:2a:b7:1f:75:f5:2d:65:18:85:b3:38:f2:
18:0a:e9:e2:d8:8e:c9:37:75:a1:48:3a:ea:0a:57:
d5:fa:b3:a9:f3:28:1e:c9:27:34:26:5e:c9:1b:1c:
5d:f5:61:ae:80:b0:38:46:96:7f:c5:d6:5e:f6:69:
dc:d5:1b:d5:21:5b:89:d5:fc:ba:6f:8a:5e:38:46:
14:fc:dc:df:98:8d:08:83:53:61:1b:88:af:4c:ed:
ba:4d:17:d4:db:e1:1d:e2:4b:52:4f:50:f1:17:3b:
56:58:0e:3c:2f:99:31:9e:08:27:20:65:80:d6:12:
35:5b:57:55:4f:73:3d:54:a5:4b:e8:62:33:34:63:
07:df:2f:f4:9f:6e:33:17:42:cf:4e:4d:81:06:c7:
8e:f8:be:b7:0b:24:96:31:90:88:68:b1:3e:dd:11:
2f:94:3c:6d:6b:f0:53:ca:87:cd:3a:fd:da:ae:08:
df:cc:aa:e5:7f:76:47:f6:82:b8:74:58:52:d8:3d:
e9:6d:2f:a6:1f:7c:ca:d3:e9:2c:6f:f9:e5:fc:00:
9b:a1:ef:5c:2f:3f:f3:70:a4:2f:47:36:d7:94:96:
6a:46:d7:92:dd:34:63:9f:e8:1c:e4:0e:56:4f:ad:
74:0c:b2:df:1f:b8:85:ae:3c:40:6c:c8:55:d2:33:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:94:0D:75:85:4C:5C:9A:27:24:6C:90:AD:DA:AB:69:2D:44:B2
X509v3 Authority Key Identifier:
keyid:4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/D4D84B9E3D5211F08FF5E995DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.244.0/22
197.255.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:9d:4d:1a:d3:19:e9:6c:94:c6:18:78:2c:f7:70:7c:c4:81:
32:ea:a1:59:33:df:a1:26:dc:8d:68:94:ba:c4:c7:9b:3b:d3:
34:9e:2a:f5:e2:8d:5f:b8:b7:1e:e8:98:02:a4:fd:0d:9f:8f:
61:60:e6:9a:9c:9a:5e:08:4e:4c:3a:5a:fc:c9:cf:f8:26:08:
75:7e:b7:07:d4:72:ca:57:59:9c:67:b8:c7:b8:f3:0a:cf:8e:
92:f4:cc:4b:ed:27:84:0b:52:58:64:3d:03:46:90:99:77:60:
24:7c:1a:b6:5e:6c:f8:c8:fd:1f:f1:fa:9a:87:73:48:05:0b:
82:c0:7b:96:84:88:46:32:23:b7:0b:6b:52:11:7c:c4:9c:03:
f1:89:a9:38:03:54:77:20:8a:6e:ca:4b:9f:65:a1:98:3f:a0:
8e:c7:7a:ac:b5:0a:2c:6d:91:26:fd:d8:e7:36:6f:b2:7b:cb:
67:bc:79:33:66:68:a9:b4:41:2f:cc:b8:8d:40:b2:ad:06:7c:
89:67:62:7d:9a:7a:07:8f:0f:33:87:c2:50:19:c6:80:c8:32:
b8:22:3f:c4:99:c7:11:db:85:7d:11:a8:8f:0b:f4:6e:3e:1f:
6f:14:46:e4:31:d5:4b:fe:91:20:83:66:fe:14:b5:89:64:8b:
2d:73:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:39 2025 by rpki-client