Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/0C6B2666405B11F09F43C8CCDAE4EC9C.roa
File: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (raw, json)
Hash identifier: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=
Subject key identifier: 61:8F:07:17:D7:59:01:D5:F7:B1:D9:9D:73:FA:86:46:A2:4D:B9:E1
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 01CE
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/0C6B2666405B11F09F43C8CCDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 09:13:45 +0000
ROA not before: Tue 03 Jun 2025 09:13:39 +0000
ROA not after: Fri 29 Jun 2029 09:13:39 +0000
asID: 37577
IP address blocks: 197.239.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Jun 2025 04:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Validity
Not Before: Jun 3 09:13:39 2025 GMT
Not After : Jun 29 09:13:39 2029 GMT
Subject: CN=683ebcc9-c5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:4b:8d:ee:da:8c:f9:6d:fb:5e:39:d7:8a:
a5:fc:41:2e:0f:15:91:39:5d:3a:f7:46:df:f0:50:
f6:45:e8:80:c1:48:53:be:1b:bf:fb:d4:ed:3b:2b:
36:03:54:07:4b:b8:a9:7f:36:46:30:cf:31:65:de:
d0:2c:8e:47:35:f2:24:5d:a0:8c:2b:0e:f3:49:7b:
41:ac:e8:22:2a:d5:2d:6e:f6:9b:b5:3d:81:2a:3b:
86:8c:6c:df:9d:14:29:86:e4:2b:5d:de:da:ad:79:
66:b9:e5:82:cc:3a:1e:73:d5:f8:25:43:0b:8d:ee:
08:50:02:c4:c3:2a:ff:2c:dd:7c:dd:b7:5c:85:40:
fb:0b:f4:fa:f7:db:a2:55:a4:11:48:5f:69:1e:04:
85:1f:be:01:a2:ed:6a:d5:79:93:1a:9f:59:f5:2c:
b3:5c:54:c2:0d:ff:19:81:dc:34:b2:f6:e2:54:d3:
6b:72:ee:13:1d:18:89:b6:29:56:da:fa:f8:06:56:
ee:5a:1b:88:bd:74:bb:d7:16:8d:bd:df:63:cc:d4:
df:f8:2a:d6:c4:70:57:9a:c7:32:1c:0a:32:b7:77:
fe:18:dd:8f:56:48:8b:66:d5:cf:c1:4e:85:77:e4:
fe:fb:ce:da:c5:4d:8e:fc:ca:12:34:98:87:1f:3c:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8F:07:17:D7:59:01:D5:F7:B1:D9:9D:73:FA:86:46:A2:4D:B9:E1
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/0C6B2666405B11F09F43C8CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.239.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1f:4b:0a:44:3e:ee:59:90:ad:12:a1:ef:d5:f8:98:68:23:
45:e3:2d:20:a6:bc:03:27:be:0b:ab:13:d8:3b:a7:bc:3e:78:
62:25:e8:ac:d9:be:91:28:d2:4c:38:7e:0f:2a:77:d6:81:82:
e9:ce:a9:95:93:54:1b:6e:d5:96:50:bd:0e:83:3b:e4:1b:6f:
e7:c2:a6:e4:f6:34:6b:d9:b9:5b:a4:b2:e9:10:85:c0:f1:dd:
df:6d:4c:77:a7:c6:13:9a:04:42:cf:d3:74:87:9e:d0:f1:67:
20:cc:74:ae:dd:1b:c5:13:87:53:a9:0a:f1:26:d4:55:2b:0e:
87:8e:0b:e5:95:8f:97:f2:59:db:0b:77:6f:88:d6:15:e0:42:
c1:5b:a2:b5:01:a7:70:db:36:cf:d0:42:04:c4:93:f1:b0:9a:
90:71:41:1d:63:cf:32:99:15:5a:a8:a7:3f:9f:38:a9:8e:b0:
c3:37:f5:18:04:61:df:c5:d1:08:ef:fb:72:36:c3:d2:92:b2:
7e:7e:36:b8:ed:40:de:e9:5e:f0:06:db:71:97:06:6e:a8:36:
51:11:d5:e3:8d:f1:62:26:b1:7a:56:f2:8a:f4:2e:59:b3:8e:
b4:5b:eb:12:6b:ab:7d:48:4b:a1:e1:60:cc:34:9e:4f:05:e6:
6f:e5:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:44:16 2025 by rpki-client