Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa
File: 5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa (raw, json)
Hash identifier: B4meKXMBx/VoIvCrgLDGhjqQbFQ+74jsI7Z9mpVTaGc=
Subject key identifier: 9F:7C:26:C6:E2:C1:89:7F:C2:C4:DE:C9:2D:70:4F:79:96:3D:53:22
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 0409
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa
Signing time: Thu 15 May 2025 05:13:39 +0000
ROA not before: Thu 15 May 2025 05:13:34 +0000
ROA not after: Fri 15 May 2026 05:13:34 +0000
asID: 328271
IP address blocks: 2c0f:ee68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: May 15 05:13:34 2025 GMT
Not After : May 15 05:13:34 2026 GMT
Subject: CN=68257803-6699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:b0:67:3a:9b:40:4f:57:49:4c:98:34:eb:
7a:ba:47:d9:d3:ac:0a:d8:91:92:b1:ca:57:73:cd:
21:c4:db:db:15:3b:0a:68:c3:c7:33:e1:3b:35:cc:
11:32:08:15:90:9d:5e:d5:0e:83:f0:00:c8:31:ba:
44:b9:39:27:71:d3:72:3a:e2:11:22:8d:2a:bc:86:
3c:b1:79:3e:03:9c:f9:d7:26:18:aa:47:64:29:5f:
83:94:0b:2c:40:da:26:e1:02:c8:fe:7e:6e:1a:d2:
fc:ae:2f:52:35:b5:79:ea:28:6b:2c:0c:45:5b:b0:
48:61:49:67:c3:9a:a3:d7:60:bb:c1:6d:00:ab:de:
c4:bc:11:9d:47:12:ea:c9:a3:ea:ef:6b:27:6d:fb:
08:e2:94:e4:12:38:0f:1d:ef:f6:9e:5f:1f:d2:db:
8e:f4:bd:3f:b4:96:61:da:4a:fc:fa:cb:ce:e7:37:
f7:09:c0:1b:c8:18:92:16:dc:f9:f5:e0:b6:fc:e7:
78:53:0a:8e:81:fc:82:05:92:28:ae:1a:2c:a9:bf:
8b:ff:36:40:16:f8:a4:96:22:8f:9c:fb:93:24:20:
ee:28:17:69:2d:17:c9:5a:95:8c:da:06:c3:2f:99:
9f:05:2b:f3:b8:70:b2:4e:12:c3:3f:2c:b7:ef:4b:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:26:C6:E2:C1:89:7F:C2:C4:DE:C9:2D:70:4F:79:96:3D:53:22
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ee68::/32
Signature Algorithm: sha256WithRSAEncryption
ac:07:3c:4a:69:9e:1c:a9:4c:f5:cb:b0:3c:ca:13:eb:bd:18:
da:a2:94:36:06:87:c7:a7:53:a3:48:fb:ea:63:33:6c:c8:2e:
4b:28:30:c9:46:b6:f9:bd:3c:6e:0a:d0:4e:3e:22:02:51:5f:
8d:ec:ae:cf:e0:1e:c3:56:73:6b:36:76:e7:da:57:0b:c0:33:
87:da:d8:43:df:41:32:c3:cc:bb:fd:51:9b:39:cc:92:da:df:
f7:ea:8e:56:3f:ec:47:38:df:98:40:fc:77:0c:a1:7b:2e:92:
9a:a3:0c:d6:38:31:e8:84:9c:31:bb:83:88:31:25:46:79:4b:
4d:ce:73:22:e2:e8:67:b5:98:dd:44:10:fd:e5:43:c8:06:4e:
3a:d2:9c:49:12:fb:fe:b9:07:79:7a:a4:dc:31:e0:b6:44:f1:
4f:97:6e:c2:2d:dc:e1:0b:05:74:f9:8b:f9:9b:3e:bc:1d:21:
5d:a6:ae:90:5b:3c:ed:41:cb:ce:9f:f8:ac:9f:17:d0:d1:a1:
04:d1:83:50:13:ac:b0:85:73:a5:e1:19:ff:71:86:ed:bd:84:
94:8d:06:f3:a8:82:79:ec:08:ce:6c:f7:5e:85:59:8d:a9:46:
86:6e:f6:6a:4c:d0:d1:12:d2:8e:19:41:bc:0b:f6:59:cd:be:
99:86:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:57:51 2025 by rpki-client