Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/DACADA1046C311F086D2CAF2DAE4EC9C.roa
File: DACADA1046C311F086D2CAF2DAE4EC9C.roa (raw, json)
Hash identifier: cCmcwJlgiJprQTyGetPh+w7SGAOJEFqm9EdH0ShanAk=
Subject key identifier: 6E:E3:0F:16:25:A4:C6:1E:02:BC:20:76:77:54:41:DA:99:0F:31:2F
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D32
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/DACADA1046C311F086D2CAF2DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 12:59:06 +0000
ROA not before: Tue 24 Jun 2025 12:59:01 +0000
ROA not after: Fri 18 Oct 2030 12:59:01 +0000
asID: 11845
IP address blocks: 197.245.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3378 (0xd32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 12:59:01 2025 GMT
Not After : Oct 18 12:59:01 2030 GMT
Subject: CN=68497d99-b95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:ee:f9:9f:06:af:45:18:14:55:10:91:81:
e5:c7:b0:86:70:c0:fc:84:13:36:7a:66:41:ce:82:
d8:34:e4:01:a4:88:c9:41:1f:e1:4c:18:20:a0:c8:
cd:b3:25:0f:86:32:8f:5e:74:42:c4:76:27:02:47:
70:67:a5:1b:28:ff:85:36:5e:bc:7a:86:fc:00:67:
31:78:f1:fd:59:7d:cd:09:30:e8:aa:21:32:01:ad:
ec:d7:5d:c9:14:83:d9:c5:2a:8b:5f:1e:94:8c:dd:
d7:fb:11:72:79:6c:b4:8d:99:76:17:67:13:c3:74:
9c:24:da:90:5c:49:ab:5d:2a:36:8c:f5:90:1c:1a:
42:05:8e:73:4a:f0:bc:c9:7f:f9:d9:9a:d5:fd:16:
dd:a1:91:aa:af:99:4f:3f:b5:2f:b4:57:36:77:6d:
ec:61:9a:77:ee:e1:69:50:be:67:d6:1c:41:85:b0:
b7:9b:f8:eb:b8:c8:db:a9:33:e2:36:5e:c0:8b:53:
11:7d:7f:59:37:fa:4d:78:d4:5c:e4:a8:e6:41:c4:
b1:fe:d4:76:31:b8:74:16:3c:98:e1:dd:2e:22:3e:
c5:03:e7:97:7d:34:8c:49:bf:59:28:ec:b7:1e:c8:
06:eb:39:80:1e:35:09:1b:da:64:44:ec:86:92:75:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E3:0F:16:25:A4:C6:1E:02:BC:20:76:77:54:41:DA:99:0F:31:2F
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/DACADA1046C311F086D2CAF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:fa:0d:41:70:31:3b:5a:17:72:24:04:b2:48:64:2e:64:1c:
db:0a:49:d4:c2:0a:60:0a:38:16:70:db:4c:1d:02:f5:9b:72:
4d:89:0d:26:42:9d:c2:13:34:f9:56:a7:e3:37:2c:9f:e7:ec:
88:18:24:14:dc:83:31:9b:9d:7b:6b:78:2f:07:bb:0b:60:08:
92:62:23:9a:9b:9d:84:52:7c:da:d9:18:71:a2:63:65:e4:72:
a5:c7:f6:24:cc:5f:28:e8:d3:a6:3e:da:1a:1c:a2:47:f6:0e:
2c:b0:43:5d:77:d6:04:52:2c:67:18:00:68:9f:2c:46:48:83:
1c:42:16:4e:9f:b1:68:2f:b9:1f:50:8b:5d:2b:f4:f0:d4:25:
46:82:0f:00:bd:14:22:74:b6:4b:b1:15:81:fc:6e:b3:35:b0:
3d:55:76:cd:67:81:8a:69:44:27:64:b0:19:b4:f3:1f:2e:cd:
ae:f3:b2:d1:12:7e:91:4d:67:1d:8e:72:9d:a6:0b:a0:69:63:
f1:68:43:85:ea:47:19:89:26:24:c8:72:a5:30:5b:a4:7d:d8:
8d:b5:8e:5a:07:c4:ae:22:47:26:3f:62:58:52:77:ce:8e:25:
0e:65:58:74:16:a1:08:c0:08:9f:ed:8d:91:17:a9:d0:e5:ce:
94:ea:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:02:50 2025 by rpki-client