Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82FD56DE648011F0BB54D07DDAE4EC9C.roa
File: 82FD56DE648011F0BB54D07DDAE4EC9C.roa (raw, json)
Hash identifier: Judec6f2d4CLEVk1eM+Be6F2aG0Zl9b/opkFFsCJZ5U=
Subject key identifier: 17:CD:20:D6:7B:ED:30:36:20:0A:66:16:A2:5D:F5:00:4A:50:AE:25
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B7E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82FD56DE648011F0BB54D07DDAE4EC9C.roa
Signing time: Sat 19 Jul 2025 09:12:37 +0000
ROA not before: Sat 19 Jul 2025 09:12:32 +0000
ROA not after: Mon 19 Jul 2027 09:12:32 +0000
asID: 216193
IP address blocks: 154.16.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7038 (0x1b7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 19 09:12:32 2025 GMT
Not After : Jul 19 09:12:32 2027 GMT
Subject: CN=687b6185-dcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5c:7b:cf:cb:ad:75:3f:c9:49:f1:1a:28:84:
98:6f:4b:a5:44:9f:d2:3c:3a:03:37:3f:2b:b2:97:
b3:10:8c:0b:b9:f2:78:3a:a2:f0:b9:51:d2:31:b8:
d9:b4:8d:3c:d5:89:3b:04:85:28:c2:a5:57:d1:9a:
cf:c0:68:0e:8a:59:fa:0d:2f:46:ee:1d:9e:f8:ea:
54:d3:84:48:92:94:86:ae:6e:58:b9:45:17:94:00:
5b:0a:86:af:da:d4:91:3b:26:78:20:a7:88:d4:76:
d7:76:c9:13:b8:95:d0:2b:69:63:99:ba:29:1c:7c:
d7:77:62:f4:90:b4:ca:93:8c:2b:0b:33:2f:59:2d:
12:7c:be:18:a3:8a:92:56:1b:2f:4f:f8:64:b7:e9:
ff:42:d7:91:d3:8a:97:de:e6:6f:c4:ed:4d:ee:73:
1f:b3:9c:85:5f:7f:21:95:16:ba:88:43:e6:cd:d7:
2b:13:fa:36:c1:2a:1b:c0:d4:be:a9:2e:cf:79:39:
7c:f9:34:38:0e:7a:42:15:a7:1b:fe:55:11:33:6d:
eb:05:d3:15:2b:7d:e0:3d:1b:87:24:fb:e9:6b:b5:
a0:c2:af:c9:ed:84:cd:1b:79:2d:d4:be:f0:1a:f7:
88:27:3e:a4:a2:60:54:9d:fa:af:c6:7c:72:24:de:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:20:D6:7B:ED:30:36:20:0A:66:16:A2:5D:F5:00:4A:50:AE:25
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82FD56DE648011F0BB54D07DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6c:da:ca:72:49:26:5c:bf:f6:7e:fe:2e:e7:07:8b:5f:5a:
60:e5:72:e7:0b:67:b2:c8:a5:d4:a6:05:e6:81:94:6d:10:15:
ef:96:71:00:b7:7a:96:37:b2:26:1b:a9:45:63:32:13:5e:75:
3b:81:da:85:bd:53:8d:81:38:81:4f:af:92:23:3b:12:4d:0d:
22:1b:01:92:1e:f9:58:99:f6:bc:15:60:68:2d:3e:ab:ab:dc:
5e:e0:f4:b3:ff:25:27:9b:85:be:2e:65:1a:d6:69:33:e9:1d:
c3:bf:78:59:b8:56:6b:8c:29:91:72:37:1c:1d:64:a4:31:64:
05:96:f2:f9:b4:a2:4b:aa:e2:5b:c0:e2:17:a0:5c:f4:bc:27:
e7:4f:03:dd:d2:6e:b8:f0:ec:8f:b7:8d:d6:86:1b:08:29:94:
4e:29:6a:39:06:82:d1:51:b3:f5:e2:ff:fc:2e:37:a7:2d:73:
77:ac:8e:23:5d:95:f3:fd:67:a9:c8:a1:1b:ab:34:dd:80:5e:
65:ff:9f:65:79:30:83:0f:1c:4c:84:a0:a0:a6:13:d2:01:66:
b8:08:4a:b5:60:e0:d6:44:5c:33:ae:c7:1d:22:d4:ca:36:57:
a2:a6:df:26:a0:0f:71:14:b7:af:f3:85:84:8b:ae:39:84:f2:
8e:47:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:05:06 2025 by rpki-client