Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E8FED1743FC811F08A18A692DAE4EC9C.roa
File: E8FED1743FC811F08A18A692DAE4EC9C.roa (raw, json)
Hash identifier: hnmo7N4/a67YEauOpu4H6ZsRDwn3yhjbg25d6FFf+tw=
Subject key identifier: ED:30:FA:99:78:DF:E5:0A:43:62:4B:88:6D:C1:FD:99:99:16:81:03
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 060B
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E8FED1743FC811F08A18A692DAE4EC9C.roa
Signing time: Mon 02 Jun 2025 15:47:39 +0000
ROA not before: Mon 02 Jun 2025 15:47:33 +0000
ROA not after: Sat 02 Jun 2035 15:47:33 +0000
asID: 37645
IP address blocks: 102.206.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 02:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1547 (0x60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Jun 2 15:47:33 2025 GMT
Not After : Jun 2 15:47:33 2035 GMT
Subject: CN=683dc79b-2421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:fb:c2:cb:83:75:3e:29:07:84:8f:bd:bc:
18:c2:3a:f3:c3:22:b7:77:b8:08:09:ca:df:f2:ff:
88:c3:86:62:5b:eb:82:c7:dc:d9:5f:a5:2a:a3:7a:
f3:68:cb:13:75:66:4b:ae:82:54:ce:3f:58:bf:18:
c2:e3:bd:af:f0:52:11:ef:72:20:e5:ff:bf:5d:0e:
ee:8e:59:44:48:d4:3f:77:5d:d9:04:98:d9:80:9b:
f6:c9:b4:d7:0d:b0:ce:32:94:09:aa:61:30:47:76:
52:56:03:58:07:97:31:88:fc:c6:63:ed:3c:b1:2a:
b9:2b:2d:6d:c7:9e:e6:2b:13:11:dc:64:0c:75:ff:
30:e9:7c:e3:7d:7d:cc:37:4f:05:c3:31:43:22:8f:
3f:90:a4:a5:a7:6d:c9:52:ab:52:92:da:a3:03:fb:
29:5d:a1:15:fe:c5:d4:76:9d:ed:49:fc:0c:5d:36:
14:d8:8f:a2:48:52:82:d0:08:c8:4c:8d:62:b7:c5:
f4:56:d6:c4:71:b6:f6:ac:25:2b:b2:70:77:0c:4c:
cd:f2:ef:a5:3c:12:72:bb:4e:8c:15:5d:d5:39:37:
75:8c:d6:14:fa:b8:c6:c3:b0:65:78:ee:c4:54:63:
8b:ca:41:7b:ea:cc:4b:f5:92:07:46:37:bc:e8:4e:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:30:FA:99:78:DF:E5:0A:43:62:4B:88:6D:C1:FD:99:99:16:81:03
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E8FED1743FC811F08A18A692DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
98:9e:ee:fa:8f:cf:be:97:0b:e8:6e:83:bc:95:58:4d:9d:48:
2e:0e:58:1f:b6:e7:fa:64:48:63:ab:1c:5e:85:05:bc:9e:a5:
bf:c2:b8:3d:6f:ad:a3:44:9f:e8:d0:5d:42:1b:7e:7c:94:c0:
a8:d8:83:23:8b:2c:4f:e1:e2:85:26:2e:b9:ab:33:51:24:e8:
49:92:5e:8c:44:f6:ff:9b:cf:ed:1d:9d:f5:c5:6f:b1:e1:9d:
69:68:d9:06:b9:7a:e5:f3:4e:5d:15:41:b0:a5:67:e1:9f:b0:
11:c4:ca:cf:59:fb:f7:e3:9e:21:42:31:1d:fa:eb:2d:aa:4d:
b7:1e:3f:81:f2:c5:c1:55:c2:d0:3b:c5:35:99:bc:5d:f8:15:
c9:d0:fa:45:a7:ff:89:e3:c0:85:68:1a:7a:0e:82:f0:38:53:
cd:21:43:dd:a1:74:9d:a6:df:8e:35:d6:a4:d0:ed:e5:f1:a1:
82:f2:8d:9a:72:5a:41:5c:81:0a:f2:37:d0:9c:3b:1a:b1:4f:
e2:85:9d:8b:12:2b:ca:21:2c:42:ce:bd:e8:04:ec:32:f3:d2:
cb:8e:e5:b0:0f:02:a5:22:92:f6:f2:da:22:26:47:7c:5a:35:
60:f4:d2:d5:44:73:97:fa:c4:19:be:dc:97:fe:1d:48:24:c9:
11:13:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:56 2025 by rpki-client