Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/964FF29424BD11F0B0FB42CADAE4EC9C.roa
File: 964FF29424BD11F0B0FB42CADAE4EC9C.roa (raw, json)
Hash identifier: CgoC1yXsglW+JATEA6VXCNngFjyeXhN766ti0g00ayo=
Subject key identifier: 8E:02:93:69:A5:69:04:26:9E:A0:D5:99:96:B8:5B:9E:9C:6F:BB:3B
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 06F0
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/964FF29424BD11F0B0FB42CADAE4EC9C.roa
Signing time: Tue 29 Apr 2025 05:48:34 +0000
ROA not before: Tue 29 Apr 2025 05:48:30 +0000
ROA not after: Sun 22 Apr 2029 05:48:30 +0000
asID: 37239
IP address blocks: 2c0f:fe78::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: Apr 29 05:48:30 2025 GMT
Not After : Apr 22 05:48:30 2029 GMT
Subject: CN=68106832-1a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:65:68:14:a0:d0:e7:df:84:28:30:10:d4:
f2:2e:3f:4f:36:0d:8c:35:72:ac:ab:00:03:5d:b2:
74:2a:f4:ff:69:0b:ce:1f:c1:e2:33:83:d9:2e:ce:
bc:f8:35:36:72:c9:e6:cd:93:d6:be:70:93:eb:c9:
3e:81:12:d8:0d:e5:29:c0:f3:2c:ba:ff:f7:f0:55:
14:50:2d:a8:07:79:8d:84:35:42:a3:a6:05:05:a3:
59:62:f3:fa:5b:c4:9f:9c:04:20:fa:2e:95:d8:47:
6c:c6:41:96:f6:79:85:d0:83:79:4b:c2:95:40:b7:
2f:79:f7:1c:09:47:df:29:23:bb:ae:98:3a:51:28:
88:5c:c2:ad:e2:9d:4a:ec:dd:55:04:7c:fb:63:c8:
66:f8:75:2a:7f:f8:a3:89:92:d2:e9:ee:03:18:98:
ea:7a:a2:88:c5:4b:ce:3c:70:13:38:03:76:f8:9d:
59:38:48:01:9e:95:b0:99:91:d2:74:c1:24:14:8f:
02:3d:c8:b7:1b:4d:21:3b:64:dd:29:32:f8:c3:a4:
f3:96:ab:2f:63:8a:f8:52:44:79:70:43:51:53:7a:
6c:88:20:45:3c:2e:07:cf:b9:ff:52:63:fe:33:8e:
a3:ee:6f:64:02:4c:bb:cb:c8:15:6e:5b:0f:24:cc:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:02:93:69:A5:69:04:26:9E:A0:D5:99:96:B8:5B:9E:9C:6F:BB:3B
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/964FF29424BD11F0B0FB42CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fe78::/32
Signature Algorithm: sha256WithRSAEncryption
5b:81:e2:85:e1:1c:5a:41:54:17:28:84:0c:60:a6:b3:7a:49:
90:6f:9e:e4:f5:ec:8c:5b:96:23:5e:ec:60:16:aa:db:89:b6:
47:5a:23:90:1c:ab:8e:34:66:0b:a2:5b:44:6b:d0:eb:ed:2e:
32:98:3b:e5:5b:39:c5:d9:9c:07:30:ed:fc:08:af:b5:0d:1b:
c7:12:6e:52:cc:8c:ad:cd:54:21:54:8c:5c:79:06:84:be:4b:
67:e2:23:53:e4:81:2a:73:5b:33:e3:03:75:f5:0e:07:8d:58:
1d:78:b0:58:6d:0c:9b:d8:61:3a:89:ee:b9:f9:99:13:77:a0:
22:07:8c:e4:94:d2:1d:0a:8b:45:34:a9:0e:69:57:30:e1:55:
f2:6a:69:67:c4:88:72:ee:43:53:5b:65:8a:22:b4:7f:c6:43:
32:bc:87:e3:34:ee:13:ad:aa:af:ae:0a:3f:eb:b0:e5:10:c2:
f2:f7:9f:77:78:f8:55:eb:2e:f7:fe:21:f9:f1:a0:38:bd:6d:
e8:d5:44:74:e0:22:ad:a3:dd:f5:9a:c6:37:18:e8:9e:ab:36:
8b:45:59:48:fc:26:41:3e:0c:ea:e0:1a:28:f2:43:2d:a4:66:
f5:f0:b2:e4:2d:ac:52:c0:15:0b:13:72:be:4a:e1:ee:3e:35:
44:93:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:23:23 2025 by rpki-client