Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/44F7A312514D11F0BE5B7493DAE4EC9C.roa
File: 44F7A312514D11F0BE5B7493DAE4EC9C.roa (raw, json)
Hash identifier: JjfCaY/DSyk/x0PG88+ivHyCCCQmlDsXI+ZkbsOp9Bk=
Subject key identifier: 5C:CA:2D:79:45:2B:51:03:B1:D5:D5:1C:9E:20:31:4E:A5:EA:0F:A2
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 01DF
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/44F7A312514D11F0BE5B7493DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 22:47:56 +0000
ROA not before: Tue 24 Jun 2025 22:47:51 +0000
ROA not after: Sun 24 Jun 2035 22:47:51 +0000
asID: 328721
IP address blocks: 2c0f:7840::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 04:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Validity
Not Before: Jun 24 22:47:51 2025 GMT
Not After : Jun 24 22:47:51 2035 GMT
Subject: CN=685b2b1c-7c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:03:6d:69:35:15:a7:ea:cd:73:c5:17:8f:
d1:a7:b2:b6:0a:e7:58:49:f9:af:8b:69:45:c6:98:
25:fd:ed:ca:6d:c5:6a:bd:8b:f6:0e:39:bb:f0:58:
af:8b:7c:6a:2a:d0:f5:94:9b:ce:3f:b8:13:0a:f4:
a9:5d:08:c1:f0:de:a2:e3:f1:19:ea:fb:84:f4:7e:
d2:d1:7f:74:26:af:d7:45:b0:28:47:37:c9:0c:f5:
16:92:de:2b:2e:d8:9c:e1:27:da:15:e4:5a:6f:d8:
ec:80:6b:55:ef:3c:dd:52:6b:9d:80:06:c3:6c:1f:
03:de:d5:22:a8:e2:48:ef:8c:bb:20:dd:e9:e6:9d:
e0:38:df:2d:50:82:33:35:88:3c:6c:fd:b3:ca:cc:
ca:4e:ee:a4:0d:fc:e8:c1:22:89:f2:fb:56:96:8b:
52:d9:d7:a1:71:73:69:17:2e:cc:1f:57:4b:36:a3:
9f:72:3d:67:5f:7e:af:b2:86:dc:6a:f3:d5:15:1a:
d9:44:5f:3c:99:99:fb:c7:4d:7f:ce:e0:f0:0a:7e:
93:80:69:cc:c9:d6:20:00:68:02:19:26:95:e3:e0:
25:d5:96:3e:a3:89:06:de:65:47:d9:58:bd:e9:86:
04:2d:75:6e:7c:76:e3:10:91:d1:6d:45:9f:11:41:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CA:2D:79:45:2B:51:03:B1:D5:D5:1C:9E:20:31:4E:A5:EA:0F:A2
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/44F7A312514D11F0BE5B7493DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7840::/32
Signature Algorithm: sha256WithRSAEncryption
01:78:89:2f:e6:42:8d:4a:3e:71:39:08:57:74:95:a6:d4:fe:
51:97:c4:07:81:f3:f0:e4:aa:a0:62:70:8d:bc:6b:ec:de:c1:
3c:9e:be:ca:95:50:5e:0e:5f:0d:cc:01:98:63:bf:79:e5:38:
0e:b0:46:f4:ae:bd:db:a8:6e:ea:5d:4a:fb:de:c9:41:f3:0a:
81:42:6c:e4:74:2a:aa:ea:6a:79:26:00:42:41:47:85:34:bf:
9f:21:61:e4:bf:54:23:01:25:e0:18:43:b3:b2:ee:dd:a9:08:
18:9b:e6:ed:3c:c5:86:af:48:bc:19:4b:35:21:43:9a:fb:df:
f9:6a:f8:17:63:51:bf:fd:7f:8a:5b:7c:52:a8:e1:d4:b4:70:
f5:1f:33:cd:64:8e:e6:7f:2d:d9:52:6c:ba:9f:d5:c0:31:39:
a7:8c:91:fc:da:71:f6:1e:03:d7:d8:9c:98:da:e9:af:3b:b1:
56:d1:04:d8:bc:f7:6c:c9:42:07:f4:1e:6b:09:55:af:09:69:
63:85:ee:a7:eb:a0:cf:56:39:bb:51:1e:bc:95:93:68:c2:c8:
ac:51:4a:49:c3:99:56:0f:07:58:01:98:0a:18:08:d1:0b:7f:
42:c4:9c:21:ca:36:18:5e:ca:08:c3:33:49:5a:ab:02:4d:c3:
d0:bf:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:55:28 2025 by rpki-client