Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/0865A9A03F8011F09D9EB4C0DAE4EC9C.roa
File: 0865A9A03F8011F09D9EB4C0DAE4EC9C.roa (raw, json)
Hash identifier: eAtT77xV4NEBf1cf+HT8ySye2iBWrSOl4kk6XxsESlo=
Subject key identifier: EC:87:28:92:5E:FE:DC:2A:B5:B6:87:52:2B:CB:D8:9B:1E:75:FF:48
Certificate issuer: /CN=F361785AAF/serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
Certificate serial: DC
Authority key identifier: AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/0865A9A03F8011F09D9EB4C0DAE4EC9C.roa
Signing time: Mon 02 Jun 2025 07:05:58 +0000
ROA not before: Mon 02 Jun 2025 07:05:53 +0000
ROA not after: Sun 30 Jun 2030 07:05:53 +0000
asID: 329467
IP address blocks: 102.208.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl
rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361785AAF, serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
Validity
Not Before: Jun 2 07:05:53 2025 GMT
Not After : Jun 30 07:05:53 2030 GMT
Subject: CN=683d4d56-9bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:3e:10:1f:99:56:76:2e:7d:93:ee:54:b0:
ef:84:8e:a0:91:f0:bf:10:7c:19:56:be:87:32:51:
85:41:0a:d2:b4:93:b9:d3:c7:bf:7b:5a:d6:07:b8:
77:77:64:e2:7b:6f:1a:18:bc:10:54:45:7d:5b:6d:
23:43:9f:51:60:b1:e1:b7:0d:5d:02:97:71:0a:d9:
45:fb:f4:c2:a5:61:91:a7:fb:47:f1:1f:00:1a:e6:
04:fe:f0:d4:d1:a6:22:9d:18:11:e5:7a:51:0c:f0:
be:9c:cb:16:b3:71:93:19:90:6d:b4:cc:9f:0a:5f:
d1:41:44:93:d8:b4:3b:eb:86:20:e0:8d:9c:16:f1:
08:4a:50:62:46:5b:6d:60:82:f4:8a:f8:ec:a7:b1:
ce:03:a6:97:bc:ed:02:ed:00:0e:81:3a:9e:3c:b2:
b1:c6:5d:5f:e4:db:e8:b5:d7:c0:7f:01:e4:5f:77:
46:0a:36:16:1b:8b:d3:c0:d7:82:f1:2d:0d:67:bf:
ff:b0:b9:69:bd:23:27:0c:7b:eb:ab:ce:c1:54:50:
f8:66:02:dc:54:df:01:bf:cf:a1:c8:04:49:74:b7:
6c:ac:22:70:25:55:57:99:25:64:bc:ff:dd:08:94:
fd:81:6e:e7:ee:51:1c:ae:86:e8:59:29:c8:b5:96:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:28:92:5E:FE:DC:2A:B5:B6:87:52:2B:CB:D8:9B:1E:75:FF:48
X509v3 Authority Key Identifier:
keyid:AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/0865A9A03F8011F09D9EB4C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:53:50:82:7b:c2:34:4a:f5:45:61:3c:82:80:89:51:98:08:
fd:17:ed:a8:33:f0:c0:11:25:e7:3f:40:af:96:6f:05:23:85:
99:68:74:87:22:da:de:6c:8b:e9:55:58:8d:3b:97:5f:76:77:
b5:93:09:3c:80:f1:a9:69:05:2b:68:f4:cf:7d:16:a4:ff:4d:
4b:72:a3:1a:08:8b:f3:4b:97:58:47:8b:98:8e:6e:0a:28:cf:
f9:d3:20:75:67:75:8a:b8:ca:2a:05:45:7b:c1:42:67:d9:96:
ec:d0:d4:ad:59:94:e8:ee:c1:8b:9c:0a:14:3d:01:ba:37:17:
ba:2e:3c:90:ee:08:4b:7f:ba:d3:41:0a:f0:08:22:2a:a1:cb:
1e:1a:27:c4:95:31:04:63:ae:0b:9f:9d:64:19:a3:ed:b9:ae:
31:63:5a:15:b9:40:e7:e9:65:73:45:45:5d:96:03:f4:8e:54:
f4:92:8c:c7:c5:4d:56:23:35:85:85:d8:3a:82:4a:d0:ae:0f:
67:bb:5e:2e:8f:34:6d:8f:3f:cd:7e:a6:17:bb:be:df:dd:84:
1e:60:d2:79:18:46:15:a5:c1:29:a5:62:51:dc:87:78:2c:20:
33:a6:32:af:12:09:41:d3:c9:20:6a:12:35:2d:6b:21:e5:1f:
48:ab:d8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:34:21 2025 by rpki-client