Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/FC00EAA4371311F0A9CEF9EEDAE4EC9C.roa
File: FC00EAA4371311F0A9CEF9EEDAE4EC9C.roa (raw, json)
Hash identifier: Q4m0b1uWFzhLDSfGIcY57zIKhG5rB1HYViD6WNKMhQs=
Subject key identifier: C9:02:A9:28:7C:3A:E0:BE:E3:9A:55:57:03:27:89:03:97:22:EF:2B
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 08D4
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/FC00EAA4371311F0A9CEF9EEDAE4EC9C.roa
Signing time: Thu 22 May 2025 13:52:22 +0000
ROA not before: Thu 22 May 2025 13:52:18 +0000
ROA not after: Sun 20 May 2035 13:52:18 +0000
asID: 37049
IP address blocks: 41.242.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 13 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: May 22 13:52:18 2025 GMT
Not After : May 20 13:52:18 2035 GMT
Subject: CN=682f2c16-655d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:cf:cf:5b:6a:ab:30:45:02:1f:c5:4d:c3:
f0:29:81:d6:55:3d:e5:a5:fd:55:00:28:7c:1a:0a:
ec:79:a9:03:1a:b1:04:2e:76:d7:b6:bb:3a:0a:32:
79:eb:57:fd:09:a3:9f:94:15:c3:a4:de:13:d2:89:
c2:4c:a9:50:57:bd:64:33:87:bc:ee:4d:56:6a:f3:
01:32:2b:a3:74:ae:db:1b:41:7c:2a:ca:6c:97:c8:
36:65:b8:0c:a2:4b:a4:93:82:b1:50:a7:16:c2:30:
00:07:f4:97:71:30:b4:72:04:4b:0e:ed:6c:90:d0:
44:35:61:84:87:23:dc:2e:7a:7a:ed:59:15:9e:87:
b5:77:b2:ea:c4:d1:a5:09:4f:f5:b9:a9:99:29:73:
86:70:0f:76:72:fc:fe:5a:ff:4a:98:1c:de:3a:e6:
04:67:cd:dd:0c:b9:03:58:52:7e:72:7c:cb:a2:91:
44:47:58:66:a7:c9:b4:fb:c2:6e:cd:e7:bf:76:bb:
e0:c9:a0:db:1d:4a:05:21:bc:39:fe:46:03:52:ab:
c7:b2:1d:a1:e0:0a:a0:63:05:26:d7:dc:11:23:d4:
6c:dd:c4:07:7b:8e:5f:b2:2b:e7:a7:d9:6e:52:69:
9d:d7:f1:b0:72:63:83:28:b4:84:10:89:cd:59:11:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:A9:28:7C:3A:E0:BE:E3:9A:55:57:03:27:89:03:97:22:EF:2B
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/FC00EAA4371311F0A9CEF9EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f7:22:34:ee:0b:cb:50:ee:a2:c4:e5:a8:81:d5:d1:06:80:
40:fa:40:22:de:61:cf:21:2b:04:57:87:bb:a5:d2:f7:9d:d4:
11:fe:69:5a:70:74:24:ba:cd:ee:29:a3:27:5a:4c:32:e6:63:
25:77:a2:c0:d5:2e:2c:7d:3a:89:e5:3a:b6:84:cd:97:23:e4:
25:b3:64:84:bf:13:d0:11:bd:a7:a5:e6:7e:7d:fb:97:5e:1d:
93:27:31:47:85:18:9e:04:47:cc:d6:33:b7:75:f2:d7:10:01:
10:a1:2e:44:0e:48:30:e8:e5:2a:52:7d:dc:ed:81:cf:73:72:
f6:64:f0:12:b1:57:e0:1d:03:7e:61:57:de:96:ae:09:23:fd:
72:44:35:41:ec:8e:df:0f:a5:cf:63:49:15:34:74:7a:14:f4:
4d:b6:20:f1:04:fa:e8:ef:d3:c2:cc:e7:fe:91:4a:64:93:f7:
b5:07:27:4a:cd:0e:a0:c4:56:ae:4f:e9:46:1b:31:9e:94:da:
c3:53:ee:4e:3e:4c:15:4b:00:8b:00:03:54:18:06:d9:db:80:
43:0e:e0:c9:26:1a:8b:8c:00:b1:d6:5c:10:43:b7:a5:59:2b:
f8:9b:d2:00:5c:50:6c:44:9d:3c:b2:95:15:99:9a:68:04:32:
19:ec:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:39:09 2025 by rpki-client