Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/04AE355E412711F0A7E4287CDAE4EC9C.roa
File: 04AE355E412711F0A7E4287CDAE4EC9C.roa (raw, json)
Hash identifier: ENLeza9xray0l264BMW02TQidzUw/ZtvZxWMod5FZ6s=
Subject key identifier: 2C:A1:71:E6:A8:C0:23:E3:25:D4:34:6E:72:1C:11:6B:B2:41:D5:78
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 0114
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/04AE355E412711F0A7E4287CDAE4EC9C.roa
Signing time: Wed 04 Jun 2025 09:33:49 +0000
ROA not before: Wed 04 Jun 2025 09:33:44 +0000
ROA not after: Fri 04 Jun 2027 09:33:44 +0000
asID: 329403
IP address blocks: 102.206.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 04:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Jun 4 09:33:44 2025 GMT
Not After : Jun 4 09:33:44 2027 GMT
Subject: CN=684012fd-ba8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:3d:d3:40:83:20:48:30:1c:87:b2:d0:b1:
4c:ab:38:73:fd:0b:8a:be:eb:df:eb:a6:94:2a:41:
a8:25:c0:20:75:1a:fe:49:76:5a:b6:20:8e:9b:b4:
5a:8f:d2:f0:ee:bb:67:95:4a:31:cb:16:1d:a3:ab:
8e:09:77:99:a3:25:ca:c5:8c:0c:ab:16:d7:46:99:
c8:ca:dc:17:56:08:ec:d6:b5:4f:0f:ec:64:01:87:
22:3d:8c:0e:76:3e:f6:3d:1e:e2:cd:7e:17:39:01:
87:c5:79:db:69:e0:31:5b:a5:ed:ec:dd:95:a5:6b:
70:f0:ba:fa:25:39:b6:c1:cc:a8:18:8e:e0:28:6a:
fb:19:79:fb:7f:03:3c:e4:84:13:f9:06:7c:51:c3:
dd:b5:b6:6f:38:65:59:53:c7:7a:d9:18:ea:c5:4b:
88:88:9a:b2:f9:eb:55:1c:13:ae:29:fc:6d:14:17:
cb:21:18:76:9e:5c:1e:99:0b:82:d0:2c:eb:0c:25:
ed:ea:8d:c6:d5:79:1e:4f:df:2b:54:9d:8f:5c:4f:
98:46:32:ef:f9:fd:4a:dc:06:cd:fa:a4:d5:ce:35:
0c:93:74:27:2c:96:fc:31:64:4c:7a:89:34:b4:a3:
41:ad:ad:67:b8:0d:8c:53:bb:4d:ca:30:b3:7e:53:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:71:E6:A8:C0:23:E3:25:D4:34:6E:72:1C:11:6B:B2:41:D5:78
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/04AE355E412711F0A7E4287CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.68.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3a:49:c2:46:7d:3e:4d:60:50:04:92:22:4d:97:4b:b4:92:
47:e6:db:b9:6d:a1:6c:cd:53:00:b9:a0:e9:f9:80:5e:54:c4:
0a:58:bd:88:db:08:29:63:9d:b8:3c:3a:3f:b2:bf:f9:b4:0f:
6c:66:19:7b:3e:bf:3e:37:fb:7c:27:f8:26:dd:e2:d7:d0:26:
13:98:ad:c3:30:03:33:fd:fc:ff:fe:a3:52:49:2d:92:7f:57:
f0:8e:0c:aa:5b:d3:60:9e:55:6c:d0:d4:63:a8:c3:06:83:11:
2b:a6:54:2f:03:83:c7:99:60:02:78:0c:fa:ce:49:65:5f:8a:
ae:a4:3b:ba:c5:54:63:1f:ac:dc:de:f1:7d:02:68:40:35:3e:
68:84:d0:3b:b1:bd:4b:ff:0f:e5:fd:eb:b3:c0:b2:fa:a9:e1:
1d:19:43:5e:d1:ca:00:f8:29:8a:19:41:e8:1e:6d:7e:e5:94:
df:f7:3b:ae:f2:0b:9f:c8:39:69:c2:27:da:18:3a:32:e5:26:
d5:b6:63:6b:ec:98:30:cc:8c:54:f1:0e:8c:da:f7:82:fd:b3:
cb:c5:2f:f4:27:c5:62:27:64:0c:11:b6:d1:7b:01:0d:5a:7f:
d0:2d:e0:ab:3c:e0:bf:9d:fa:98:30:9a:b4:2a:55:9e:98:42:
47:02:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:57 2025 by rpki-client