Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/B8172A60776E11F0A4ED07CEDAE4EC9C.roa
File: B8172A60776E11F0A4ED07CEDAE4EC9C.roa (raw, json)
Hash identifier: 466vNS7TytKtCpeQ9MYAdiBIOqEB2l2FatTpRe5swnY=
Subject key identifier: 2F:F0:78:10:00:B0:DA:4A:6E:C8:97:D5:C5:E7:BA:CB:3C:2C:D1:BA
Certificate issuer: /CN=F36FE07FAF/serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB
Certificate serial: 04
Authority key identifier: C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/B8172A60776E11F0A4ED07CEDAE4EC9C.roa
Signing time: Tue 12 Aug 2025 11:23:07 +0000
ROA not before: Tue 12 Aug 2025 11:23:02 +0000
ROA not after: Tue 05 Jun 2035 11:23:02 +0000
asID: 36924
IP address blocks: 2c0f:2fc0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE07FAF, serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB
Validity
Not Before: Aug 12 11:23:02 2025 GMT
Not After : Jun 5 11:23:02 2035 GMT
Subject: CN=689b241b-f61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:32:92:1f:fb:57:8f:5a:28:5b:f2:b9:ba:
f0:6d:09:ba:ac:e7:53:39:21:f7:49:76:4b:da:bf:
a3:8c:21:4e:3d:b0:c7:19:a6:1c:7e:ce:6b:bd:ce:
82:a3:76:a4:ec:93:98:a8:ed:17:0b:c0:56:c6:61:
f2:6e:0b:e5:7d:85:87:d3:7e:32:58:5b:37:67:ef:
8f:c0:39:78:ea:48:b8:cb:af:4d:85:b0:f0:e2:70:
09:b9:b0:c2:1b:33:37:25:4b:70:db:df:a9:71:bc:
ec:f5:7b:68:22:00:bf:81:ac:5f:db:47:fb:d6:aa:
d5:62:14:26:45:1c:ed:9a:b2:0e:66:8d:74:e6:58:
e4:b2:9a:7d:77:36:7e:d3:51:ff:94:22:ad:6a:3b:
96:d1:16:c8:6e:38:a1:be:96:bf:cd:c3:ed:1b:32:
2d:f4:8a:8c:56:a7:11:e5:d1:1c:02:d5:66:3e:73:
93:bf:f2:13:c1:9f:03:77:ea:fa:07:88:12:ea:5c:
9c:2c:43:1a:1f:b1:93:16:e0:c6:5f:eb:d8:fc:6b:
f9:6b:a0:1c:8c:a6:22:cf:bb:b2:e4:b9:60:0c:de:
7d:7c:6e:1e:8d:11:60:71:36:1d:7b:f9:93:1c:f5:
cb:89:71:a9:9e:0a:19:be:c4:09:0a:0b:78:dd:1f:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:78:10:00:B0:DA:4A:6E:C8:97:D5:C5:E7:BA:CB:3C:2C:D1:BA
X509v3 Authority Key Identifier:
keyid:C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/B8172A60776E11F0A4ED07CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2fc0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:0c:86:a5:43:a9:a8:57:72:2c:a3:73:4d:aa:0c:17:c8:31:
c9:b1:49:0b:d2:9b:ca:8b:2b:fa:62:ca:0d:7d:f6:21:58:8f:
2f:dd:85:e1:b0:4f:62:a4:a0:91:dd:0d:b2:7c:35:3e:e9:7e:
fb:b9:71:1e:27:eb:aa:6d:a3:49:36:86:50:d2:0c:d8:91:38:
17:88:1e:2c:61:43:07:1a:97:7a:6b:b4:aa:e6:c7:d6:e2:cd:
31:5b:cc:d6:9b:98:31:13:78:43:36:0c:01:fa:c4:4c:f7:06:
50:94:6b:3f:a2:2b:d0:44:1b:de:22:8d:09:54:37:7c:64:a6:
68:f1:3c:d6:cf:22:7d:d8:24:ac:2d:ee:87:58:1d:d3:0d:84:
de:57:2b:48:71:2c:c2:bc:ad:a6:96:5e:a8:8c:45:c6:94:e8:
0f:98:43:75:08:87:89:66:50:e5:91:6b:47:88:0b:6e:9f:ba:
e0:ad:b3:53:5c:90:79:cc:8c:fe:01:16:e1:01:34:de:81:6e:
ac:42:9c:9c:20:8b:0c:9c:4a:aa:ef:d9:39:99:3f:7c:f0:81:
fd:47:e6:38:46:e1:ff:a0:fc:a7:06:e2:0c:f4:a0:f0:70:70:
1e:12:e7:05:ce:bf:c2:2e:fe:54:62:67:63:bb:44:47:0e:fa:
d5:2c:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:08 2025 by rpki-client