Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/60A315E6417711F0BAB45C7CDAE4EC9C.roa
File: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (raw, json)
Hash identifier: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=
Subject key identifier: FC:7C:43:FE:84:72:E2:1C:74:97:9D:E4:BC:F8:1C:45:D5:61:49:7F
Certificate issuer: /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial: 13
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/60A315E6417711F0BAB45C7CDAE4EC9C.roa
Signing time: Wed 04 Jun 2025 19:09:03 +0000
ROA not before: Wed 04 Jun 2025 19:08:58 +0000
ROA not after: Mon 05 Jun 2028 19:08:58 +0000
asID: 329429
IP address blocks: 2c0f:3540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 05:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
Validity
Not Before: Jun 4 19:08:58 2025 GMT
Not After : Jun 5 19:08:58 2028 GMT
Subject: CN=684099cf-4258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:59:2f:72:cb:fe:88:4b:dd:f7:48:d4:0e:
95:64:b2:ca:45:05:f4:b7:2f:93:68:21:2a:08:07:
ef:b7:f2:6c:f5:67:50:9d:f3:8f:fa:af:45:64:98:
68:ac:72:db:5c:59:af:b4:20:05:97:3e:8f:54:07:
3a:47:07:61:d2:e9:ce:2d:c4:00:b2:14:21:d8:46:
5f:a3:5d:fc:ec:fc:93:d7:76:3d:e7:43:c0:4b:f2:
87:f7:d0:96:06:88:a2:fa:b3:14:b2:ed:21:82:88:
dd:4b:a1:5f:e3:7f:87:46:cf:02:8f:5a:4a:0b:37:
a0:0b:32:f7:bf:07:cc:91:9e:49:99:fd:96:d4:17:
6e:bc:1a:b1:8a:83:7a:ec:26:2e:a0:0e:c8:a7:55:
98:3b:0c:ef:85:e0:5f:7b:4a:32:13:23:a0:f0:d6:
9e:79:2e:70:e0:12:cb:ce:f8:30:18:62:df:d1:75:
cf:6c:75:2a:3b:3e:ee:11:bb:a4:d1:9b:bb:c0:be:
26:3a:f1:08:19:9f:2c:79:0d:75:16:ea:bf:99:3e:
f5:98:f3:af:d6:ee:6a:0a:58:5c:50:53:7c:04:2e:
f2:ff:04:cf:a6:5f:b2:92:39:c5:0e:55:2a:82:3a:
64:68:04:ef:e9:a5:8e:59:cf:3b:c4:6a:c4:c6:c7:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7C:43:FE:84:72:E2:1C:74:97:9D:E4:BC:F8:1C:45:D5:61:49:7F
X509v3 Authority Key Identifier:
keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/60A315E6417711F0BAB45C7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:3540::/48
Signature Algorithm: sha256WithRSAEncryption
ab:d2:ac:b8:02:66:03:8e:e6:14:ff:5f:e1:13:72:ae:1c:21:
c6:d2:32:21:e1:5c:64:15:3e:48:96:de:a7:72:ca:ca:af:63:
1a:6a:c9:ad:86:aa:d7:77:7f:98:1a:38:b2:c6:e9:d2:49:61:
a9:d7:3d:c3:dd:11:3c:aa:41:11:bc:22:58:69:03:85:45:3d:
5f:63:68:d7:41:66:51:84:41:e0:49:39:46:de:82:76:18:b6:
29:a7:9e:67:d1:b9:b0:63:a0:f7:cd:bc:d7:2d:49:43:e4:64:
d6:75:5f:2f:bc:e8:9a:f2:67:ad:5b:96:a2:16:59:bc:70:a4:
15:b6:41:9d:32:22:8d:98:98:46:c2:f6:19:3b:5f:04:13:61:
88:a0:f4:25:61:27:00:35:47:f9:4f:2e:d5:47:df:a1:bb:77:
f8:d6:96:02:b0:0c:95:ab:f5:af:9e:78:71:81:ee:75:61:87:
06:c1:21:2c:52:3a:84:0e:3b:cd:87:46:c7:1d:f3:b6:27:d1:
3f:42:d8:04:95:69:e4:5b:f2:0a:9c:69:27:55:ca:a1:8f:92:
6a:dc:e6:45:63:f6:20:97:1f:bd:f0:26:bf:da:63:18:0d:bb:
65:c7:f3:4f:2d:0f:d8:da:66:00:9f:31:01:25:b6:05:4b:16:
4b:cc:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:02 2025 by rpki-client