Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/01E1321A3E5A11F0B7F45DBCDAE4EC9C.roa
File: 01E1321A3E5A11F0B7F45DBCDAE4EC9C.roa (raw, json)
Hash identifier: tNYBiIqQJL0JjP5Fr7JKp7+lo47X4fq0T1n16WVA4Lc=
Subject key identifier: 61:35:52:A9:03:21:5B:28:2A:D7:A3:C3:A4:A4:DA:A3:F9:0B:E0:42
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 068C
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/01E1321A3E5A11F0B7F45DBCDAE4EC9C.roa
Signing time: Sat 31 May 2025 20:01:15 +0000
ROA not before: Sat 31 May 2025 20:01:10 +0000
ROA not after: Fri 31 May 2030 20:01:10 +0000
asID: 54339
IP address blocks: 102.215.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676 (0x68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 31 20:01:10 2025 GMT
Not After : May 31 20:01:10 2030 GMT
Subject: CN=683b600b-c250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:3c:fc:53:62:ba:6e:fe:6c:80:b4:90:4e:
60:3f:6a:fc:bf:da:af:f0:14:1f:0e:16:56:0f:ee:
08:9e:70:85:e3:e9:88:bf:1e:d4:9b:62:3d:94:28:
f0:2e:d4:2b:72:f2:1e:5e:43:06:27:cf:5a:ee:4d:
ab:78:9e:34:15:bc:40:00:20:30:76:1e:40:1b:d4:
74:3e:66:4b:d7:16:81:ff:61:df:a6:f4:b4:a0:71:
27:11:29:7a:1a:4c:bc:4e:16:92:52:84:aa:cc:c3:
97:1a:f7:8a:37:85:f3:70:9c:96:db:35:bb:06:f9:
a3:82:87:cc:50:84:73:f8:b7:0d:7d:30:09:e7:97:
ed:5e:4b:55:4f:a8:8d:39:e1:aa:88:d9:7f:72:b2:
bb:70:ab:63:0d:99:70:92:3f:dc:d8:22:16:99:9e:
83:0e:20:b5:98:75:51:43:c9:6b:37:f1:a1:01:99:
3c:52:a4:98:dd:0f:98:cf:43:cb:7d:43:b3:36:ed:
1c:88:54:2b:df:1a:a7:f4:7a:8f:67:61:a1:44:96:
38:94:91:c7:0a:2b:7c:ea:86:41:b7:b7:e8:1c:34:
d9:25:3a:c7:bb:61:50:c9:2e:60:1e:9e:7c:e7:dd:
b3:f9:f7:8c:2a:01:cf:ce:82:a8:91:a9:0f:c1:63:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:52:A9:03:21:5B:28:2A:D7:A3:C3:A4:A4:DA:A3:F9:0B:E0:42
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/01E1321A3E5A11F0B7F45DBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.225.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ae:86:01:f2:05:e6:eb:ad:e5:f9:e6:0a:e1:29:93:7e:6a:
53:cd:df:d6:ae:be:b3:0a:4e:33:b1:5a:2e:ac:fa:39:ca:3b:
f3:91:ef:dc:eb:1c:cb:c8:d3:3d:92:68:a5:8a:20:1d:9f:39:
db:2f:93:65:9d:4a:f4:22:4d:0f:b1:d7:ab:d5:31:dc:e0:23:
83:1d:f1:b4:71:af:30:eb:4b:6c:4e:05:59:c6:c8:69:34:fa:
17:45:4f:2d:bb:81:6d:5e:7c:e2:4c:d2:d9:25:f1:2b:d5:ee:
a0:c5:75:cc:58:f1:37:87:28:dd:e8:07:c0:67:0a:3f:3b:00:
12:b5:cb:55:14:b3:60:d1:09:35:98:71:69:d5:2b:a3:83:e6:
ed:41:56:7d:52:22:ba:56:64:4d:3b:c2:b7:0f:af:02:38:19:
71:60:5e:b5:bd:d9:1d:58:1b:5d:3c:f5:1e:86:8f:90:cc:4b:
58:c7:c2:7d:87:10:07:3a:7c:da:ac:7f:57:5d:b9:ea:9f:0a:
63:e1:13:aa:e1:08:e5:9c:f8:9b:4f:2c:19:14:5d:cf:a2:4c:
fc:4e:4e:02:ba:b6:21:8a:5f:d9:bc:23:c9:f0:75:32:5c:f4:
33:a4:75:0a:60:88:10:f1:9e:ff:17:7f:3e:07:28:5a:9d:ba:
7d:1e:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:41:56 2025 by rpki-client