Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/93EF9424412711F09F2CC980DAE4EC9C.roa
File: 93EF9424412711F09F2CC980DAE4EC9C.roa (raw, json)
Hash identifier: oONnRnrDfB0ZG1UHPPGQ0dp5NPJf1dST08ulaRQGOC0=
Subject key identifier: 7A:28:60:3F:7A:DE:5C:FE:E4:75:E2:23:8B:96:B8:11:D6:77:19:4B
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 0118
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/93EF9424412711F09F2CC980DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 09:37:49 +0000
ROA not before: Wed 04 Jun 2025 09:37:44 +0000
ROA not after: Fri 04 Jun 2027 09:37:44 +0000
asID: 329403
IP address blocks: 102.206.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Jun 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Jun 4 09:37:44 2025 GMT
Not After : Jun 4 09:37:44 2027 GMT
Subject: CN=684013ed-069a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:2c:f2:41:5f:38:94:8c:80:f7:a5:f5:2a:
5d:b2:d9:b3:0e:7d:52:17:a9:b9:78:d2:c7:66:86:
d3:9e:3a:4f:a0:dc:44:00:22:66:01:2f:5a:12:36:
f4:a1:a3:9d:13:53:a1:a0:ed:43:df:7d:c1:96:22:
ed:05:8c:ee:cd:c9:b2:03:0d:a2:ed:c9:a1:56:4c:
05:76:b8:34:e8:36:10:1e:f7:0f:52:b6:7b:9a:30:
6f:ea:07:a0:38:1d:68:d9:e1:e4:4c:c5:e7:8f:71:
d0:33:f3:d4:d7:66:b8:7b:18:60:d1:06:bc:ea:be:
47:cb:f0:f5:ad:da:84:54:cf:30:2c:a4:36:89:17:
10:29:0d:51:48:e9:09:03:8b:15:8f:4c:25:9d:c8:
33:83:bf:3c:b7:be:3c:b4:a6:0c:ab:5b:dd:f7:9e:
37:fb:69:db:9f:d1:9e:7c:2e:86:63:0d:97:68:44:
f4:7f:f9:99:e7:0a:ff:fa:64:72:e9:08:d5:b6:75:
fc:61:b0:be:b4:1a:e9:8f:e1:3b:77:b5:21:cf:b2:
27:44:d5:17:f2:24:6b:d9:10:23:de:23:94:66:77:
8c:3d:87:f1:9b:7c:a2:44:19:b9:5f:77:d9:59:19:
93:e8:89:f8:76:4a:07:c5:d7:10:48:97:ec:96:b5:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:60:3F:7A:DE:5C:FE:E4:75:E2:23:8B:96:B8:11:D6:77:19:4B
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/93EF9424412711F09F2CC980DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:06:7c:e8:4a:1c:70:20:99:d4:5c:59:c7:1a:c5:a0:20:73:
69:9f:9e:ed:48:e9:91:a1:7c:2d:d8:14:c8:df:84:10:05:65:
d7:6b:25:a2:67:c5:4a:45:18:ff:b0:ff:49:c0:3b:59:be:32:
64:42:5e:0f:c1:20:10:5a:1d:f6:35:76:6e:e2:1e:3f:32:ea:
0f:45:96:12:e0:ed:b5:20:6f:16:14:9a:c0:d9:92:76:04:2a:
b1:ce:a7:f9:52:af:f8:e0:79:00:60:ac:42:c7:96:8d:b0:e3:
07:6a:79:2b:64:83:59:c3:b6:6f:5a:d7:5e:2d:cf:9e:9d:29:
73:f6:11:3e:55:0b:45:0d:63:59:61:6d:80:49:0f:ac:f9:e8:
99:b2:10:13:80:07:9d:a7:2a:80:bc:40:5c:90:2c:a4:c7:2c:
60:09:5c:12:bd:7c:74:62:50:48:44:ab:5a:4d:e0:ff:8e:bc:
cf:5e:3e:78:d6:b1:ac:26:c0:1c:08:80:3a:98:8a:95:43:4b:
65:88:72:dc:a2:ff:0b:20:5a:08:8b:a9:ef:9e:cf:6a:04:a2:
ac:e3:a8:5e:0e:4b:45:aa:ca:85:c5:2a:1c:60:5e:0f:ad:2a:
69:bc:2e:29:44:f9:86:e0:ca:d6:07:81:01:b7:62:78:e0:c2:
57:64:7b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:23:14 2025 by rpki-client