Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/EC347D644F7011F0B0E5A285DAE4EC9C.roa
File: EC347D644F7011F0B0E5A285DAE4EC9C.roa (raw, json)
Hash identifier: 7VqGdhK0QKVxfwrcQu0g+uIjAEEmddmp5+L+0+/1OA0=
Subject key identifier: 81:10:5C:42:D7:F6:14:6F:63:81:C6:7B:EA:22:39:16:EA:84:21:E6
Certificate issuer: /CN=F3610DE1AF/serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
Certificate serial: 0523
Authority key identifier: 62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/EC347D644F7011F0B0E5A285DAE4EC9C.roa
Signing time: Sun 22 Jun 2025 13:58:07 +0000
ROA not before: Sun 22 Jun 2025 13:58:03 +0000
ROA not after: Mon 31 Dec 2035 13:58:03 +0000
asID: 328949
IP address blocks: 102.218.160.0/22 maxlen: 24
2c0f:7300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl
rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 02:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3610DE1AF, serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
Validity
Not Before: Jun 22 13:58:03 2025 GMT
Not After : Dec 31 13:58:03 2035 GMT
Subject: CN=68580bee-e484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:42:c0:72:2b:2b:ef:a8:62:1c:09:c0:29:
20:f6:59:f0:61:a4:f2:af:b6:30:aa:84:6d:b9:80:
54:29:ad:9c:77:ab:95:1b:7d:49:77:a9:8c:47:3b:
8c:48:23:73:e2:0e:d7:95:9c:f7:fa:e6:30:2b:89:
98:f7:ce:df:29:4c:52:6d:2d:af:dc:fe:a1:df:73:
96:d3:83:86:12:52:e3:4a:48:3b:a5:78:3b:a7:e7:
21:7b:37:c9:d4:a8:21:37:c8:f6:4f:85:32:28:69:
3c:3c:cf:26:77:27:3a:10:09:7e:f0:da:54:eb:b4:
b7:1d:d1:86:2c:ad:95:43:4c:98:e1:55:13:27:71:
cd:e3:14:5f:7b:9f:c9:f5:6b:33:21:ef:ea:27:4a:
2c:cd:f4:c0:f5:93:7f:c9:90:4c:2c:96:03:61:65:
b6:63:e4:f4:76:79:cc:72:43:fd:fb:f0:b8:fc:de:
f0:67:3a:cf:bc:86:9b:bf:96:14:b8:fb:e0:2c:87:
bc:94:ce:75:d3:cc:70:7a:e2:53:1a:06:11:cc:3c:
b2:91:85:85:bb:e7:32:50:f6:30:10:5d:a2:15:ac:
aa:96:59:17:00:b4:c4:2c:68:46:21:3b:ce:8d:7c:
0c:1e:a3:b3:59:58:e2:2f:30:28:ef:9f:54:8b:1b:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:5C:42:D7:F6:14:6F:63:81:C6:7B:EA:22:39:16:EA:84:21:E6
X509v3 Authority Key Identifier:
keyid:62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/EC347D644F7011F0B0E5A285DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.160.0/22
IPv6:
2c0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
08:ae:f9:d8:e0:0c:c0:80:de:b3:e8:6d:dd:b2:6a:48:06:74:
cf:ac:92:dd:9f:37:31:8a:7e:4b:84:7f:5e:78:2b:a9:be:9d:
d6:e8:1b:10:70:c2:1a:b9:88:1f:21:02:47:73:2a:b0:21:32:
8c:16:76:0d:cd:88:02:07:58:37:19:ec:5f:a5:1c:32:c1:29:
d4:5a:5b:a9:4c:19:a9:4b:69:86:05:7e:9f:97:48:e1:2f:12:
ab:7d:99:7b:45:ac:ae:ba:6e:ba:01:fe:86:af:bd:04:5a:12:
c3:cc:c3:6d:da:e2:f9:bd:21:4e:48:f2:3c:15:64:b1:a6:79:
af:00:25:fd:1e:9f:69:ef:62:df:d5:f7:f4:bf:4b:f1:91:2d:
ff:99:40:6f:cc:5d:85:d7:07:95:c7:77:ee:71:28:5d:2b:4d:
d7:e5:3e:8f:58:50:86:99:33:36:7b:6a:bd:a1:27:b3:06:70:
63:40:88:77:b1:96:8a:d8:94:70:0a:d5:9d:8e:b6:63:70:c2:
a2:6f:b3:34:0a:d0:4f:39:d6:78:84:14:3a:ab:03:3c:36:00:
f3:69:db:21:c8:ef:02:2e:f4:d1:65:0c:a6:50:e7:21:7b:66:
4b:a0:0e:70:4e:d5:38:ad:03:b0:55:2d:d3:5a:b7:91:43:8a:
7f:5c:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:21:00 2025 by rpki-client