Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/69B0889231CA11F09BDEC58DDAE4EC9C.roa
File: 69B0889231CA11F09BDEC58DDAE4EC9C.roa (raw, json)
Hash identifier: 77yOBtNOkAqIpYkHbVXR0+hEPUSWHxx/HR9IjT63+54=
Subject key identifier: E4:30:12:85:4C:4F:6F:3B:34:F5:0C:5A:92:82:E1:89:E6:FE:50:65
Certificate issuer: /CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Certificate serial: 032C
Authority key identifier: 10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/69B0889231CA11F09BDEC58DDAE4EC9C.roa
Signing time: Thu 15 May 2025 20:23:07 +0000
ROA not before: Thu 15 May 2025 20:23:03 +0000
ROA not after: Sat 15 May 2027 20:23:03 +0000
asID: 328539
IP address blocks: 102.206.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36232DEAF, serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Validity
Not Before: May 15 20:23:03 2025 GMT
Not After : May 15 20:23:03 2027 GMT
Subject: CN=68264d2b-a1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:c3:54:bc:2a:eb:e5:5c:d4:5a:75:a8:25:
89:a5:3d:85:e2:9e:7a:12:5c:3b:b9:d9:e3:3f:3f:
63:e9:c6:c7:d2:33:4f:c6:ff:a9:62:2f:d4:ec:eb:
80:fd:41:4d:21:d5:6e:b4:97:3f:10:2d:a7:c1:0f:
15:35:dd:8b:b0:48:7d:4d:1e:f8:09:e8:95:80:57:
2b:51:db:3e:ef:ac:89:e9:2e:f5:2a:8b:f1:3e:7c:
e7:6a:37:c8:67:f1:1e:c7:8e:3b:7c:52:c0:b8:86:
bd:61:4c:7d:a3:b8:9e:d6:84:1e:3c:e2:c3:de:2a:
b9:0f:1a:5e:2b:89:e2:21:17:00:23:82:a5:e6:f1:
e4:9b:8b:06:e9:d1:b4:f7:a1:11:88:46:40:f0:20:
78:83:8a:2a:e7:b6:65:ab:6c:2c:9d:e6:a1:80:66:
1f:17:40:19:05:0c:23:fc:e3:d8:94:ae:a7:12:cb:
15:d2:f1:c7:34:ce:a0:76:fe:6f:25:1a:e7:94:24:
d0:f4:b0:ac:2c:a1:65:2c:26:b2:05:ec:a9:07:3c:
06:dc:eb:1e:5c:e9:f6:ba:b7:64:53:86:60:21:21:
ac:e4:ef:09:75:0f:53:f5:eb:b3:c8:16:1b:b2:78:
f0:54:aa:1a:ee:d4:1a:68:f4:f4:a1:7c:d9:57:47:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:30:12:85:4C:4F:6F:3B:34:F5:0C:5A:92:82:E1:89:E6:FE:50:65
X509v3 Authority Key Identifier:
keyid:10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/69B0889231CA11F09BDEC58DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.252.0/22
Signature Algorithm: sha256WithRSAEncryption
44:30:ce:55:d8:dd:b5:d2:b5:6a:59:3b:89:59:dc:01:72:89:
85:1c:a4:7e:01:07:75:c9:18:ee:5b:d2:d8:bb:f5:3d:99:96:
4e:3b:ab:a7:bb:3c:f4:68:fb:2d:0c:b7:a8:4e:59:06:ad:ed:
ad:15:22:83:da:bb:29:64:8e:76:32:5a:bb:1a:28:4f:43:3c:
f3:31:5c:da:65:82:82:67:81:4f:0e:1a:13:f7:a2:46:b6:d6:
78:bd:14:2e:4e:20:a2:02:1d:6b:a8:9e:19:cf:e2:cf:21:ae:
c2:ac:f7:05:9b:27:40:9d:29:39:29:08:21:8a:d1:fa:19:c1:
a2:d0:21:67:97:ab:93:24:4a:d8:00:a0:9a:0d:08:35:c6:68:
ed:7f:59:ed:13:01:fd:1b:97:c2:ae:ea:d9:01:53:69:a2:3a:
be:e9:48:bc:ec:45:d4:fa:c8:a0:fd:4e:36:7e:30:81:d0:b5:
5f:28:c5:10:c0:ce:db:01:eb:16:74:6f:5c:c9:90:10:3b:f7:
42:0f:35:ca:23:27:45:f1:e2:43:8c:ef:b5:15:4d:7d:ce:23:
db:2b:16:ba:15:19:60:4c:95:cf:69:85:45:1e:4f:83:67:fc:
48:28:34:03:25:46:7a:04:f8:dd:76:e8:de:03:08:9f:1d:b3:
23:39:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:04 2025 by rpki-client