Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/5853244A4E9611F082A2187CDAE4EC9C.roa
File: 5853244A4E9611F082A2187CDAE4EC9C.roa (raw, json)
Hash identifier: BjWsYHunCpGazJaSX7YroZ5H4AtJQ65jDY0lzxf2ugk=
Subject key identifier: 7A:E1:BF:8A:C7:9D:DB:24:75:4A:FE:35:AA:3B:B2:8E:92:16:8C:81
Certificate issuer: /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial: 03A8
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/5853244A4E9611F082A2187CDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 11:53:29 +0000
ROA not before: Sat 21 Jun 2025 11:53:11 +0000
ROA not after: Mon 30 Mar 2026 11:53:11 +0000
asID: 329027
IP address blocks: 102.213.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 03:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644FF0AF, serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Validity
Not Before: Jun 21 11:53:11 2025 GMT
Not After : Mar 30 11:53:11 2026 GMT
Subject: CN=68569d38-82df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:f9:fa:1f:d7:af:65:67:00:15:32:a6:e6:
21:58:41:12:1a:40:8d:7e:28:da:8f:2c:be:1b:4c:
c9:e2:31:00:5c:ac:a4:b3:f4:5a:bb:06:27:3f:64:
45:ff:ce:a8:d4:cf:2b:f8:a7:10:b4:c7:23:13:43:
9f:fd:20:22:07:dc:d0:94:53:c9:3b:02:eb:bd:e1:
3d:17:51:89:6d:45:18:ca:a1:af:a1:64:9e:f5:00:
d4:9d:ef:73:71:cd:90:0c:25:b9:e6:c4:2e:c2:cb:
d3:1d:2e:11:b4:12:cd:4e:70:3d:13:b6:ce:cd:c1:
ab:d7:54:01:0a:be:46:44:dc:11:e4:be:40:a1:9c:
da:25:3b:3e:8f:48:58:7e:bf:f0:3e:e7:f8:a8:99:
97:a6:e0:51:69:11:c1:74:f0:dc:10:bc:2f:88:ff:
ff:bb:00:62:db:d7:48:7c:a3:0a:97:2a:71:09:ff:
54:de:c6:92:00:36:98:cb:52:e0:3b:86:f3:73:8c:
dd:e5:1b:ae:52:3e:f0:ea:eb:b7:20:b9:a2:e1:bf:
4a:7a:f7:45:b9:96:28:79:78:07:7a:7b:ef:61:7f:
db:a4:b3:45:e0:99:ab:2f:a6:18:27:1d:87:ad:fd:
0d:20:24:d9:cf:1b:20:2b:de:e1:51:22:5c:57:9e:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:BF:8A:C7:9D:DB:24:75:4A:FE:35:AA:3B:B2:8E:92:16:8C:81
X509v3 Authority Key Identifier:
keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/5853244A4E9611F082A2187CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.44.0/22
Signature Algorithm: sha256WithRSAEncryption
40:1b:f8:76:48:69:4a:40:b9:ce:84:0a:1c:d5:70:59:05:e8:
f8:f5:8f:54:e0:9b:7e:d1:32:db:d1:cc:cb:d4:ce:b2:c9:e9:
68:08:6c:06:23:2a:98:11:3c:8a:df:03:74:2c:a0:f2:67:20:
be:03:bf:f4:12:3f:c7:47:02:b7:88:91:83:11:36:7c:92:1f:
f1:88:ef:2f:47:e0:cf:de:39:15:c8:c2:34:67:97:8e:0e:29:
da:2e:2a:80:72:fb:27:66:50:c9:13:0c:7f:92:18:02:ee:d5:
7e:4e:43:07:3f:34:9a:68:24:35:ce:71:75:d7:b8:da:54:6a:
28:79:fe:bd:62:62:45:e9:6a:69:96:96:c5:72:8f:b5:0b:5c:
ba:48:f0:a7:cf:03:77:a3:39:47:57:db:b1:34:89:3d:60:16:
17:3f:91:eb:8f:6a:b5:42:8f:9a:39:6e:67:de:39:b0:6a:88:
87:b6:db:b6:d3:9d:70:70:d2:3e:14:86:b8:46:f8:e1:0e:10:
22:12:b2:56:cb:90:3d:3b:13:f0:bd:de:69:48:09:f1:a3:8d:
f5:79:ac:d3:f3:7f:f1:33:30:a1:40:fd:82:2f:87:67:26:30:
15:51:46:1f:d4:9e:fb:6b:bd:5a:a2:90:2e:d3:ce:d7:78:55:
bc:09:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:07:31 2025 by rpki-client