Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/E39F7394D71F11EFBDA86D9C762E951A.roa
File: E39F7394D71F11EFBDA86D9C762E951A.roa (raw, json)
Hash identifier: UaFjuj4h6iiPJ7i8a3Sfc3NzxnTj31aeIAuUOtd9TMg=
Subject key identifier: 76:1A:08:BC:4C:45:F4:BE:FB:75:9C:32:F7:9B:95:01:8A:7F:52:B5
Certificate issuer: /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial: 0176
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/E39F7394D71F11EFBDA86D9C762E951A.roa
Signing time: Mon 20 Jan 2025 11:15:43 +0000
ROA not before: Mon 20 Jan 2025 11:15:40 +0000
ROA not after: Tue 20 Jan 2026 11:15:40 +0000
asID: 329391
IP address blocks: 102.210.8.0/22 maxlen: 24
2c0f:2b40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636ECFAF
Validity
Not Before: Jan 20 11:15:40 2025 GMT
Not After : Jan 20 11:15:40 2026 GMT
Subject: CN=678e305f-12b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:c3:78:45:21:93:39:c2:08:fe:0d:b8:1e:
34:e7:b7:4a:73:60:af:57:e3:7a:86:1a:6c:24:0c:
dc:47:01:2a:e3:b1:f4:f6:4d:e6:f4:60:84:d4:bb:
bb:e3:f1:ac:47:6f:33:eb:39:6c:7a:01:c2:74:60:
a0:ab:43:a5:42:33:82:d9:6a:46:8d:92:d0:e1:7d:
12:e5:f2:c4:f8:6d:41:94:96:38:e8:78:86:18:3b:
5d:7e:ac:18:8a:4a:8c:e6:30:b8:da:11:22:1b:37:
38:38:0c:1e:7a:8f:3b:9f:07:24:54:7b:34:cf:2e:
50:07:83:86:57:76:9c:3c:46:0d:c6:46:17:02:25:
31:d8:8e:b6:a9:37:14:a4:9f:74:95:a2:8d:18:f3:
72:9b:90:5c:12:2f:6f:d5:9e:fd:2a:d4:96:c5:10:
48:46:20:bc:a5:0e:81:a9:0b:5c:9a:47:da:39:c5:
c4:32:29:ff:ca:43:cd:43:ac:3e:f7:61:35:cb:59:
c2:ec:87:c9:64:c7:35:d6:94:0f:04:1a:cb:08:77:
64:c3:62:16:b7:52:88:cd:40:39:c0:0c:71:92:56:
c4:ae:be:78:f0:29:36:e8:6f:4f:64:2e:92:99:bb:
a0:6f:5e:50:61:96:42:1e:e0:1d:cc:26:8e:be:d6:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:08:BC:4C:45:F4:BE:FB:75:9C:32:F7:9B:95:01:8A:7F:52:B5
X509v3 Authority Key Identifier:
keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/E39F7394D71F11EFBDA86D9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.8.0/22
IPv6:
2c0f:2b40::/32
Signature Algorithm: sha256WithRSAEncryption
16:a3:72:5a:ab:96:af:43:1f:32:27:19:97:ff:42:9f:67:2a:
4f:f5:aa:25:09:9b:1c:4b:3c:74:69:f6:02:a5:ef:79:b5:ff:
7f:f7:33:82:04:60:da:09:c9:1a:b4:07:27:27:01:88:18:a7:
d5:ed:53:3a:1b:b2:ae:ee:36:be:1c:e6:a0:c7:38:51:bb:69:
30:e3:58:60:67:d6:e5:c1:34:e2:03:35:de:97:7d:ae:6e:b9:
83:57:23:bc:3c:cd:59:28:1b:80:01:2d:39:20:b8:5d:8d:8e:
db:7a:89:00:a0:94:93:9b:15:9f:f2:bd:dc:e5:e8:46:ad:31:
77:ca:ac:09:1d:78:72:38:6b:a5:1e:9d:13:57:de:ac:28:55:
3c:0a:d1:ce:5c:2d:b8:e2:2a:15:a1:16:63:96:75:09:59:28:
08:73:19:10:62:1f:49:80:5c:91:f3:1a:68:61:5c:3e:73:32:
36:e7:c1:08:d3:d2:11:63:7a:a6:ea:c3:4e:e7:1c:a1:97:d8:
f2:84:e9:e1:4d:e1:08:35:07:b4:4d:af:9b:14:3f:0b:4d:a9:
b7:95:dc:29:5b:47:aa:57:5a:aa:35:b2:54:f4:2b:a1:e4:87:
1b:24:7d:0d:4d:d4:02:aa:f6:9e:b4:a9:0d:ba:a4:a4:69:bf:
55:6b:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:31 2025 by rpki-client