Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/AFF0CEC651F411F0BE9745DADAE4EC9C.roa
File: AFF0CEC651F411F0BE9745DADAE4EC9C.roa (raw, json)
Hash identifier: Jrrft9fmy2Q7VfWlwSQF68Vzrq5qwK+YuOgBFL/Azrg=
Subject key identifier: 71:CA:A1:62:B3:43:C0:E8:07:77:05:3C:3B:3E:5F:63:BB:BD:3D:4C
Certificate issuer: /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial: 0220
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/AFF0CEC651F411F0BE9745DADAE4EC9C.roa
Signing time: Wed 25 Jun 2025 18:46:22 +0000
ROA not before: Wed 25 Jun 2025 18:46:17 +0000
ROA not after: Mon 01 Jun 2026 18:46:17 +0000
asID: 37739
IP address blocks: 2c0f:2c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF59BAF, serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Validity
Not Before: Jun 25 18:46:17 2025 GMT
Not After : Jun 1 18:46:17 2026 GMT
Subject: CN=685c43fe-9b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:e6:52:ae:b9:db:ce:d1:fc:43:a6:04:fb:
70:5a:23:5b:33:70:00:b0:e8:75:b6:1d:aa:95:f3:
5e:66:98:6a:59:31:41:23:13:91:5b:29:19:1f:76:
ce:80:5d:43:5b:3c:22:81:b9:05:38:29:c7:95:aa:
c4:b0:b5:c1:17:86:63:1b:16:23:41:68:6b:a4:5a:
8a:e4:12:f1:2a:91:bd:f2:68:cc:6c:c0:c5:cf:20:
f3:99:80:a7:58:3f:ed:4a:76:f5:46:3d:0c:4b:62:
a7:b8:22:cc:02:38:84:85:41:a4:73:72:ca:47:5b:
e2:3a:0c:52:b8:22:b5:f3:19:c7:69:41:1b:53:94:
f5:ce:79:a6:1f:b8:4e:be:5e:c8:1b:19:8b:b9:e5:
f9:4d:4b:bb:36:42:0e:9f:a6:9a:0e:ed:37:b2:f2:
49:52:e3:15:92:08:31:4a:e9:1c:34:1a:cf:6a:fa:
8c:bc:43:b7:95:0f:f9:7d:ca:55:cb:60:1f:f4:50:
6f:59:24:11:72:be:81:8b:c4:58:89:18:4d:18:fa:
ac:9f:dd:d7:44:04:aa:e8:4a:f8:8d:9e:8b:65:0a:
13:67:93:30:32:d5:1d:2d:91:5c:67:83:8c:38:46:
8d:c5:96:ee:ae:e6:cc:2c:63:a7:f5:53:84:ae:a0:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:A1:62:B3:43:C0:E8:07:77:05:3C:3B:3E:5F:63:BB:BD:3D:4C
X509v3 Authority Key Identifier:
keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/AFF0CEC651F411F0BE9745DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2c40::/32
Signature Algorithm: sha256WithRSAEncryption
c0:a5:5b:c4:c7:05:99:fd:74:f2:66:06:53:41:fd:26:60:50:
1b:4c:99:e2:fc:fa:4b:c2:50:34:67:6e:05:d0:b2:dc:b4:47:
d5:91:8c:ac:bb:df:d3:e8:7e:7e:83:f2:ca:0e:b4:b7:9a:ca:
40:a9:b7:cc:d7:38:c3:9e:b3:0d:1f:83:f5:ce:2a:cb:04:c5:
09:4d:6c:98:73:58:5d:a1:bf:30:69:0a:91:86:58:5a:40:8e:
ff:b4:6e:70:d3:0d:1a:09:f5:1d:77:4d:2e:2e:2f:5a:36:5b:
b1:6b:c0:06:24:bb:01:20:72:b1:5a:91:ed:7f:2b:38:5e:b5:
f0:ee:8d:2a:db:e9:cf:a9:55:45:71:7a:da:95:e5:ce:a8:ec:
87:cd:7e:89:1d:38:1b:9c:2d:fa:12:68:59:c4:16:74:3c:69:
60:a2:c1:f2:da:68:9f:90:6c:a3:fe:56:40:4c:b8:cf:de:1c:
29:c6:2a:9c:4e:e2:8c:26:0e:5d:50:79:e0:26:c7:4e:ff:98:
f1:e6:68:b7:24:70:bb:84:9b:0b:34:e4:35:c2:91:64:a9:33:
b0:21:63:62:f3:4f:f3:ed:6f:3a:ac:a2:9e:be:df:92:b7:b1:
c9:f9:1f:3f:e0:64:a8:5c:cb:48:98:ab:9b:04:34:35:63:ba:
59:fe:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:44:31 2025 by rpki-client