Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/27ACEE40309911F08CDD5A9FDAE4EC9C.roa
File: 27ACEE40309911F08CDD5A9FDAE4EC9C.roa (raw, json)
Hash identifier: R78ifneCXIZK4iZNWc6Ut5sSOPOLNpgbTZjjJYZGJ60=
Subject key identifier: F9:81:96:40:90:8A:27:0F:B7:9F:95:E1:08:92:7D:98:C5:45:E4:D7
Certificate issuer: /CN=F36DE22AAF/serialNumber=58F5445C8A3A3511BCECDD1889542893F488C77A
Certificate serial: 0514
Authority key identifier: 58:F5:44:5C:8A:3A:35:11:BC:EC:DD:18:89:54:28:93:F4:88:C7:7A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/27ACEE40309911F08CDD5A9FDAE4EC9C.roa
Signing time: Wed 14 May 2025 07:58:01 +0000
ROA not before: Wed 14 May 2025 07:57:55 +0000
ROA not after: Tue 15 May 2035 07:57:55 +0000
asID: 36924
IP address blocks: 102.206.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.mft
rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE22AAF, serialNumber=58F5445C8A3A3511BCECDD1889542893F488C77A
Validity
Not Before: May 14 07:57:55 2025 GMT
Not After : May 15 07:57:55 2035 GMT
Subject: CN=68244d08-51c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:69:92:9e:23:fd:f9:7c:66:76:6f:b2:19:
a1:fe:38:71:cc:d3:ab:e2:50:19:43:3d:fd:e2:53:
e3:53:e6:39:02:45:27:4d:3e:62:83:a1:fa:3e:3a:
d3:0d:37:9f:51:22:ed:cb:79:9d:21:8a:ed:6e:6c:
b5:c8:60:be:ed:7a:ec:2c:ff:89:3a:54:f2:b2:79:
55:4e:d3:92:1f:64:48:96:0d:dd:aa:5b:c3:6e:cd:
0b:ad:79:74:b5:62:fc:03:e5:d3:fe:ff:29:8c:87:
97:f5:58:cf:5c:b8:0f:e2:1e:45:3a:b2:b7:84:47:
e8:49:c7:fe:76:bf:cb:c7:04:1a:eb:b0:60:23:5d:
e0:a5:a3:f1:ce:9f:92:ee:3b:7b:b9:d5:a9:75:17:
ec:5e:98:43:f3:42:8d:e2:20:bb:66:9d:e2:f4:5d:
eb:30:33:9f:0d:8b:65:0b:e7:b8:b3:2b:7d:f8:b0:
61:a4:e9:88:89:4d:f7:d9:29:4d:04:cd:46:3b:ae:
a8:f5:86:df:7d:e1:3c:10:cf:02:15:b9:1b:d5:fc:
ad:e6:a1:f7:9e:78:88:26:97:f7:7b:94:b3:f2:76:
44:4c:59:b5:7f:4b:c5:28:ec:a5:6f:fe:0c:44:d4:
dd:4e:4c:9d:1d:ed:3a:81:18:2f:4c:ac:5c:b8:11:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:81:96:40:90:8A:27:0F:B7:9F:95:E1:08:92:7D:98:C5:45:E4:D7
X509v3 Authority Key Identifier:
keyid:58:F5:44:5C:8A:3A:35:11:BC:EC:DD:18:89:54:28:93:F4:88:C7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/27ACEE40309911F08CDD5A9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:04:28:0b:7c:44:4c:65:0e:d3:e0:c8:a6:5a:7f:b8:e0:c0:
e6:18:34:d9:0a:d0:3d:4b:dd:7a:4e:75:47:f4:1b:2b:8d:5f:
3e:92:70:59:ad:01:9c:1e:c1:9e:f9:aa:d5:1e:84:d9:50:bd:
8a:8c:4c:52:90:60:9b:d6:17:75:04:14:41:62:18:f0:2f:b6:
2f:82:20:ed:a3:8c:9b:5b:e6:ce:8d:8b:da:28:b3:09:cd:42:
86:37:30:15:da:16:07:e5:48:1b:de:0e:4e:14:5f:96:bd:e1:
e6:a5:92:bb:33:40:31:2d:70:c2:55:c3:05:61:85:e7:eb:73:
fc:9f:84:f0:06:61:66:2d:96:ca:b9:a6:cc:ad:3b:0e:85:50:
02:76:18:ec:cd:2a:2f:8d:84:cb:c4:aa:c1:a3:8f:8f:23:36:
72:3b:32:31:c3:6d:21:5a:72:3f:a4:8f:77:89:20:1c:7e:f9:
5f:58:af:f6:b3:76:ed:58:b5:31:37:3b:8f:27:a3:8b:9f:f4:
b0:e8:18:67:fb:f1:40:6e:12:b6:33:a0:4c:f5:d4:2a:9f:ba:
bf:b3:2b:f5:2c:8c:5c:7e:27:24:52:3d:96:d0:74:5e:9e:3b:
fa:32:72:12:38:d7:9f:4f:9c:46:14:eb:03:d4:d1:f4:ca:3e:
ab:e8:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:51:41 2025 by rpki-client