Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/A64C0358317011F08C073EC0DAE4EC9C.roa
File: A64C0358317011F08C073EC0DAE4EC9C.roa (raw, json)
Hash identifier: hGMo1TkfzC+9+ayAahdFQnR5FChuHYPQw3lEmeqRL/E=
Subject key identifier: 74:02:CA:F0:9E:8D:21:83:DF:B3:AA:90:7B:24:8E:8B:57:B5:3C:A0
Certificate issuer: /CN=F36F7B44AF/serialNumber=A3C9EEC0BF6EB6495E8CEC0CB237F8A6D29A32ED
Certificate serial: 02
Authority key identifier: A3:C9:EE:C0:BF:6E:B6:49:5E:8C:EC:0C:B2:37:F8:A6:D2:9A:32:ED
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/o8nuwL9utklejOwMsjf4ptKaMu0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/A64C0358317011F08C073EC0DAE4EC9C.roa
Signing time: Thu 15 May 2025 09:40:35 +0000
ROA not before: Thu 15 May 2025 09:40:30 +0000
ROA not after: Thu 31 May 2035 09:40:30 +0000
asID: 328297
IP address blocks: 102.143.0.0/17 maxlen: 24
2c0f:eeb0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.mft
rsync://rpki.afrinic.net/repository/afrinic/o8nuwL9utklejOwMsjf4ptKaMu0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7B44AF, serialNumber=A3C9EEC0BF6EB6495E8CEC0CB237F8A6D29A32ED
Validity
Not Before: May 15 09:40:30 2025 GMT
Not After : May 31 09:40:30 2035 GMT
Subject: CN=6825b693-5d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:67:cf:da:eb:ab:58:e0:8b:5f:60:5f:26:
8f:8c:0a:c2:15:3e:c5:90:9f:72:f0:24:0b:fe:45:
4f:44:f9:c9:1e:e4:5b:4b:c4:ae:e1:6f:0a:46:2d:
93:5b:b9:9e:6a:76:2b:04:5f:36:95:ae:4a:b1:eb:
9c:e9:b4:8f:e7:b6:a4:92:10:0e:f6:6c:fc:8a:68:
a0:c8:07:95:55:10:43:af:96:18:c3:75:0a:6e:6d:
bd:68:77:7e:f3:6b:48:90:bb:c0:48:6d:e4:4d:53:
62:9e:82:73:9b:4d:41:10:b1:ce:20:b1:b9:14:6e:
5c:ea:08:5c:31:74:b8:31:91:0c:a4:4c:41:46:e0:
08:ed:cf:c3:1d:ab:aa:75:4c:ea:0e:83:39:fc:01:
5b:f5:e7:c7:50:89:c9:c4:27:dc:d7:cd:c9:00:6e:
5e:bf:63:9d:d1:36:d4:bd:d0:6e:9f:32:eb:e3:ba:
22:2e:89:81:f3:cf:30:8c:4b:a2:05:18:02:ba:c1:
32:ef:7b:79:7d:21:51:65:0b:76:b0:42:f0:de:6d:
c3:18:e7:ae:09:59:55:a7:44:eb:4c:2d:b4:15:52:
b2:36:cc:b4:8e:e6:2f:f9:2b:04:a5:2a:9b:db:1a:
c3:ec:77:ab:01:99:42:89:88:6d:23:26:0d:ee:85:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:CA:F0:9E:8D:21:83:DF:B3:AA:90:7B:24:8E:8B:57:B5:3C:A0
X509v3 Authority Key Identifier:
keyid:A3:C9:EE:C0:BF:6E:B6:49:5E:8C:EC:0C:B2:37:F8:A6:D2:9A:32:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o8nuwL9utklejOwMsjf4ptKaMu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/A64C0358317011F08C073EC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.143.0.0/17
IPv6:
2c0f:eeb0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:f0:99:e5:b0:b4:43:db:6d:ed:8f:30:df:18:37:ed:38:3f:
e7:27:74:69:38:10:a5:4f:5b:e7:f4:b6:fb:0e:f1:8c:8e:5a:
07:6a:fc:b8:0d:c3:3e:1c:cd:36:2c:9d:4b:a9:16:80:f6:35:
7c:45:3d:b7:a2:c7:ac:c3:b4:ee:51:6f:4a:8c:cd:78:9c:43:
ac:20:cd:b6:2e:45:04:e0:91:f8:2a:05:84:be:2d:81:d9:6e:
69:74:16:3c:09:42:9f:6b:9a:50:a9:3e:fb:40:b4:73:be:6f:
76:44:40:e6:d1:3b:dc:94:19:cc:4c:c1:6d:2f:6e:8e:8c:eb:
bb:e4:2c:ae:c4:5c:4f:9f:c1:4f:94:6b:0e:65:c0:6b:d3:0a:
4c:67:7e:4f:a5:4d:44:4a:75:a5:42:3e:30:f5:91:39:94:f3:
ee:db:4a:5b:0a:d0:92:d1:93:81:3b:15:f5:54:be:f3:e8:37:
83:2a:53:e6:16:a3:2b:be:b9:b2:84:e2:ab:d6:df:8a:ba:3f:
92:47:38:5c:65:12:a5:33:b1:3d:e3:c8:6a:6e:ae:0e:22:35:
2b:a1:c6:f7:6f:7f:14:29:31:06:17:7a:3e:b5:78:61:a6:71:
86:b7:67:71:48:3f:10:47:5b:7d:55:e2:40:d2:87:01:7d:a8:
d9:1c:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:06:24 2025 by rpki-client