Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/F048964C373811F0825513DADAE4EC9C.roa
File: F048964C373811F0825513DADAE4EC9C.roa (raw, json)
Hash identifier: 2Ikhzq2/HCvXEgb5kQy7EaPMlwaaIqbXOotqV7Tgsok=
Subject key identifier: 27:73:C5:0D:22:E9:E4:73:D2:40:D3:AC:9A:BC:68:7F:E2:6D:CA:A6
Certificate issuer: /CN=F36E6A93AF/serialNumber=4A2C402CEE2AE0341163899416EA3FF04F51C329
Certificate serial: 03EB
Authority key identifier: 4A:2C:40:2C:EE:2A:E0:34:11:63:89:94:16:EA:3F:F0:4F:51:C3:29
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SixALO4q4DQRY4mUFuo_8E9Rwyk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/F048964C373811F0825513DADAE4EC9C.roa
Signing time: Thu 22 May 2025 18:16:54 +0000
ROA not before: Thu 22 May 2025 18:16:49 +0000
ROA not after: Fri 22 May 2026 18:16:49 +0000
asID: 329103
IP address blocks: 102.215.84.0/24 maxlen: 24
102.215.85.0/24 maxlen: 24
102.215.86.0/24 maxlen: 24
102.215.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.mft
rsync://rpki.afrinic.net/repository/afrinic/SixALO4q4DQRY4mUFuo_8E9Rwyk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 03:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1003 (0x3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6A93AF, serialNumber=4A2C402CEE2AE0341163899416EA3FF04F51C329
Validity
Not Before: May 22 18:16:49 2025 GMT
Not After : May 22 18:16:49 2026 GMT
Subject: CN=682f6a16-6043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:23:af:9c:f4:65:91:3c:f3:1e:78:d0:3c:
24:f4:b6:ee:f8:0b:ab:08:01:e9:a7:55:08:3d:e3:
85:4a:84:e5:8c:e1:31:b0:ae:c0:7c:c4:6b:63:39:
10:6f:f1:d5:a6:d1:18:ad:78:35:76:a3:89:47:fd:
47:5d:d2:88:ff:91:13:0e:0c:23:04:63:e0:50:44:
cb:dd:c0:b3:4a:07:6a:76:4f:1a:ac:e3:01:aa:b7:
5d:6f:f6:62:ce:3d:64:93:82:65:7e:79:43:1f:0d:
ca:3e:f9:05:e2:2e:a0:d4:2e:6d:47:1a:15:f4:2b:
cd:9b:f8:09:10:67:01:cb:41:8b:85:f0:3b:ca:ae:
68:d2:f6:ff:5f:66:4d:f3:9b:c4:c3:a8:4e:a3:8a:
cc:16:4c:4c:fb:60:cf:d2:c9:a4:9d:c7:c0:53:78:
fa:b4:a7:91:47:5a:77:f1:90:36:7f:8a:f2:96:a9:
3e:92:02:fa:96:76:5a:30:eb:07:ef:2d:31:21:ae:
29:13:fc:53:c1:8b:73:a6:79:e1:09:3f:09:fc:5d:
77:3a:3c:cc:66:c2:e3:cf:1d:52:b9:1e:8b:32:fa:
65:c5:39:4c:72:26:f9:a2:e5:fe:7a:b2:b4:12:f9:
57:50:d3:4a:90:87:34:ef:a9:f5:d9:39:cf:cb:dc:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:C5:0D:22:E9:E4:73:D2:40:D3:AC:9A:BC:68:7F:E2:6D:CA:A6
X509v3 Authority Key Identifier:
keyid:4A:2C:40:2C:EE:2A:E0:34:11:63:89:94:16:EA:3F:F0:4F:51:C3:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SixALO4q4DQRY4mUFuo_8E9Rwyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/F048964C373811F0825513DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.84.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:17:51:f3:17:1a:2d:95:d3:9b:e9:f1:d9:9d:28:ca:ec:19:
91:8b:2e:71:3e:ea:77:45:0c:42:2b:df:9e:68:35:c7:69:31:
75:b0:13:93:49:d3:0a:b7:d0:7f:60:d5:4b:de:bb:18:a7:ac:
6a:eb:18:17:bc:67:d5:60:17:83:8a:0c:2a:5c:fb:97:8c:a0:
7b:cd:1a:e7:98:69:36:e9:4b:47:51:36:4a:1b:f5:de:c5:e5:
d6:3e:ea:1b:b9:8b:66:13:4e:b8:7a:67:86:f3:ed:1d:41:b3:
94:9c:cd:3d:3e:a5:df:a6:d7:31:f6:ad:bc:d6:55:88:8c:99:
9d:8d:3c:0e:4e:81:ca:cf:8b:fe:14:f9:9e:83:22:5d:90:4d:
23:78:5b:f8:46:df:b8:8e:f5:9f:bd:4e:ff:c6:51:93:08:08:
a6:02:1c:81:9a:64:be:4c:fe:cf:b3:74:5d:7b:0d:71:a2:0b:
15:d7:ce:a1:cf:4b:21:14:10:b0:78:ec:38:36:f6:59:e2:2a:
91:a3:3d:15:99:76:3e:f8:c4:29:ab:cd:bb:ea:a2:8f:d0:fa:
ce:46:4c:13:08:5c:fa:13:33:74:b4:f1:f5:61:fe:4c:5d:e3:
74:bf:1c:0e:67:0e:90:18:c1:39:d9:a2:51:7f:3d:51:1f:ce:
e4:58:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:12:33 2025 by rpki-client