Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/D0BDEA5AFBB711EF9F66FA8E762E951A.roa
File: D0BDEA5AFBB711EF9F66FA8E762E951A.roa (raw, json)
Hash identifier: enMw35WYPPq+4i07Lg/h4bfes66PnQ1o07jpZ2J1Hjw=
Subject key identifier: 5C:CE:BA:F6:DA:D4:1E:6C:ED:90:73:E4:29:33:0E:ED:B1:F2:E2:9D
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01CF
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/D0BDEA5AFBB711EF9F66FA8E762E951A.roa
Signing time: Sat 08 Mar 2025 00:53:57 +0000
ROA not before: Sat 08 Mar 2025 00:00:53 +0000
ROA not after: Sun 08 Mar 2026 00:00:53 +0000
asID: 328988
IP address blocks: 2c0f:6f00::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 8 00:00:53 2025 GMT
Not After : Mar 8 00:00:53 2026 GMT
Subject: CN=67cb9525-91c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:07:33:23:bf:b8:6b:12:ab:7e:52:39:3f:
ea:92:b5:a2:07:77:75:b3:45:01:74:9a:10:d1:a3:
32:77:05:97:24:d0:a1:4a:24:91:42:26:6c:f2:a4:
7a:33:ea:75:32:7c:26:8b:79:28:f7:e5:8a:7b:55:
ec:29:47:1a:c4:8e:f7:3a:24:a8:d0:33:7c:e0:d3:
b0:7e:11:b9:2f:28:43:08:cc:2d:f2:b5:4d:57:d2:
cf:8d:56:84:d0:d1:df:d9:7f:91:ab:60:67:76:3a:
25:33:43:ee:3f:4e:b1:8c:a7:52:36:e6:e5:4a:76:
bc:ed:df:d6:6f:0e:65:ec:e0:9d:52:18:9d:9e:92:
4d:fc:80:8f:5c:a8:05:c5:46:22:44:5e:d4:fa:15:
fd:b9:66:ea:05:6b:cf:ac:3e:a5:8c:36:e4:91:bc:
37:91:3d:a2:e6:99:e1:76:02:03:e5:d4:86:d7:95:
75:56:9d:08:60:ed:ca:20:2f:d2:f8:ca:bf:5f:ff:
44:6d:91:62:aa:58:76:30:16:24:10:2a:b6:1e:13:
73:25:db:95:f8:21:fd:65:08:dc:a6:da:a1:91:ac:
3f:6e:cb:e1:e5:02:53:34:6e:7d:1c:37:f0:05:f2:
18:14:04:a7:85:ca:b3:26:c3:40:14:b7:46:e0:64:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CE:BA:F6:DA:D4:1E:6C:ED:90:73:E4:29:33:0E:ED:B1:F2:E2:9D
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/D0BDEA5AFBB711EF9F66FA8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:6f00::/32
Signature Algorithm: sha256WithRSAEncryption
b4:30:9c:73:65:74:2e:08:97:7e:ba:e2:9d:95:91:aa:4c:2b:
a3:fc:52:dd:a2:6f:fa:74:92:50:22:89:bd:f1:d0:c4:fb:92:
5d:08:0b:f4:c8:e0:b8:d0:a6:8d:24:25:99:da:56:51:4c:de:
7e:34:ca:3c:38:67:b9:03:db:46:9c:59:f9:b9:39:ad:fb:9a:
46:c5:f5:5d:12:5b:56:fd:d2:8b:d3:75:c6:65:36:83:d3:38:
7f:fb:e0:8f:13:85:21:18:e3:dc:31:65:94:c8:ea:91:cc:17:
fa:9e:6d:15:7b:48:76:92:f9:41:5f:02:95:a0:ab:55:7e:a3:
bc:59:14:9b:0a:05:de:db:fa:3d:cd:b7:4b:1d:78:6c:2a:6e:
cb:86:d0:b8:41:54:a9:88:77:e9:e0:69:b2:a9:e2:4c:03:bf:
98:fd:fa:55:a5:8c:48:74:18:e0:3c:3f:bf:c5:12:34:35:08:
ab:e2:f1:f1:c4:90:9b:46:d4:d0:32:3f:40:1c:13:2f:f2:cf:
d1:53:1b:44:1c:57:1f:f8:9e:11:b5:0e:a7:62:d1:16:33:f9:
eb:51:97:e6:f2:91:b0:cb:be:6f:3b:28:91:b9:2e:fa:ce:00:
99:41:28:17:fe:5a:c3:8e:e8:e1:6f:c9:db:32:e1:f1:ee:67:
6b:ea:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:10:23 2025 by rpki-client