Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/34F044FE336D11F0A6FE177FDAE4EC9C.roa
File: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (raw, json)
Hash identifier: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=
Subject key identifier: FD:12:D2:CB:E8:99:53:ED:28:5D:D1:CD:DF:84:71:E2:7B:46:C2:4C
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 049F
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/34F044FE336D11F0A6FE177FDAE4EC9C.roa
Signing time: Sat 17 May 2025 22:20:58 +0000
ROA not before: Sat 17 May 2025 22:20:53 +0000
ROA not after: Wed 31 May 2034 22:20:53 +0000
asID: 59895
IP address blocks: 2c0f:fee0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183 (0x49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Validity
Not Before: May 17 22:20:53 2025 GMT
Not After : May 31 22:20:53 2034 GMT
Subject: CN=68290bca-685d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:70:7b:83:b8:0d:7a:87:55:68:3a:44:36:
83:8f:d8:73:c5:35:47:98:20:24:cc:33:27:81:ca:
78:e1:9a:bd:e3:eb:8f:d2:7a:69:a4:e8:5f:24:8f:
8b:a2:fc:95:bb:36:bc:55:71:6e:5e:88:d0:59:2b:
4e:4f:84:b2:e2:84:7d:11:1e:d8:d1:87:ad:dd:2d:
36:f7:54:c7:a8:99:7a:45:a7:d4:2f:ca:83:ae:d9:
13:dd:59:0c:db:f2:a6:d2:2b:eb:9c:73:91:24:65:
43:f1:ae:48:fd:d4:ba:5e:27:dc:25:d5:1e:ed:5f:
8b:b1:33:bb:a3:0e:e9:ee:65:8d:a7:00:e7:62:e2:
7c:e4:ea:7a:6e:73:ba:fd:a5:b7:74:a9:9a:6d:64:
d3:f0:f2:2f:c8:ec:a7:0d:8b:d2:63:7f:37:d4:a4:
2d:b7:8c:40:7a:fb:a4:73:a7:8a:56:00:a3:1c:fa:
8b:04:e9:90:2d:8e:e9:0a:fe:bc:dd:ec:51:c3:3f:
d8:3c:af:73:71:aa:70:db:b9:9a:2d:6b:c9:96:df:
59:f4:96:6d:e6:be:5a:f4:9d:a8:98:ca:9e:ba:8e:
4b:00:5c:c2:d0:54:ff:70:6c:14:78:c8:c7:05:00:
69:ab:d0:11:f3:f5:f2:30:39:a1:27:9f:b1:1a:67:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:D2:CB:E8:99:53:ED:28:5D:D1:CD:DF:84:71:E2:7B:46:C2:4C
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/34F044FE336D11F0A6FE177FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fee0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:b1:a3:78:55:80:1a:8c:9e:bf:28:72:6c:49:50:a6:27:0b:
6d:cc:62:bd:9e:fd:a9:a7:1f:45:fd:65:34:19:dc:1e:6c:9a:
aa:3c:e8:db:bc:83:4b:e8:c7:3b:a4:45:35:8f:d4:44:36:33:
a1:2c:7c:a9:ce:02:83:79:46:7e:91:70:b7:ee:13:a8:1c:98:
21:f9:a1:0e:1d:93:cb:6d:be:cb:41:8f:50:b7:ab:a6:1a:82:
e2:06:a4:14:aa:25:13:d8:99:b7:6f:32:17:71:74:dc:23:22:
67:7e:b7:34:58:d8:b4:a3:0f:d5:fb:84:99:47:78:2f:60:c8:
27:23:00:c4:e5:f6:66:19:db:f0:0b:39:b3:9b:f6:0d:a6:00:
82:df:5c:ac:d3:ac:b9:19:f6:19:4e:cc:4e:49:94:36:77:3f:
f3:c8:d8:04:89:9f:84:79:09:6d:6a:69:89:4a:b0:77:09:14:
5f:7b:0e:90:2d:ab:2e:02:96:ed:fb:03:03:7e:99:d3:98:18:
5d:a4:b1:5f:80:b9:28:a1:4b:43:cb:06:c0:37:96:8a:85:db:
a6:71:6c:df:59:dd:0b:32:a3:80:88:98:dd:2e:a3:75:8f:0b:
c4:47:07:b4:00:9a:0a:a1:38:5a:c1:03:b6:fd:24:8a:64:29:
ab:3e:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:22 2025 by rpki-client