Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/413B19025CBA11F0B3AC387EDAE4EC9C.roa
File: 413B19025CBA11F0B3AC387EDAE4EC9C.roa (raw, json)
Hash identifier: huhnDHM3c28d4RK7MjVi9V09R1xz37R9RDv4groETcU=
Subject key identifier: E9:6E:2A:41:11:04:59:D8:01:DA:F9:16:A3:9C:10:FA:75:A8:C2:7C
Certificate issuer: /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial: 07B1
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/413B19025CBA11F0B3AC387EDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 11:45:48 +0000
ROA not before: Wed 09 Jul 2025 11:45:43 +0000
ROA not after: Sun 06 Nov 2033 11:45:43 +0000
asID: 329523
IP address blocks: 41.198.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Validity
Not Before: Jul 9 11:45:43 2025 GMT
Not After : Nov 6 11:45:43 2033 GMT
Subject: CN=686e566c-4633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:e2:a7:09:b8:db:11:0a:0c:78:f4:f7:b5:
d4:37:1c:fd:5c:0f:9e:ed:53:b2:ee:55:38:2f:dd:
51:f0:e4:39:42:d8:98:52:18:8d:43:7a:f1:09:4a:
94:5f:25:cb:7e:24:dd:ef:ff:1d:7d:0a:95:bf:ce:
f5:19:5f:3b:08:25:b4:8d:cd:33:10:20:9d:46:4e:
15:c7:d5:8d:3f:cb:7d:3b:8e:ba:4f:4c:4b:fa:dc:
45:a7:a4:26:c7:7d:5b:03:84:b7:07:5b:2a:1a:07:
c9:8c:9a:03:5a:4c:02:f1:b6:bd:a2:5d:77:25:a2:
dc:5c:b3:3a:78:a1:18:cc:c0:53:48:a6:52:5c:c7:
1d:1c:80:dd:06:ff:f7:5f:17:20:e5:b6:3c:69:0e:
40:44:0b:28:f4:9a:75:e0:d1:bc:05:e4:93:70:14:
6b:84:86:4c:96:45:d1:72:19:d7:9e:72:5f:50:f3:
54:99:55:aa:6e:90:b0:df:be:7f:8d:f7:8c:ba:68:
47:da:61:4a:67:26:80:d9:5d:16:76:31:9e:91:e2:
84:23:71:27:53:a9:a6:7d:2d:81:5e:a1:cc:21:87:
bb:c3:75:66:a3:1a:3f:37:a8:60:05:37:1c:74:30:
2a:5d:42:a8:d2:fa:b0:3e:9f:10:d0:bb:58:67:28:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:2A:41:11:04:59:D8:01:DA:F9:16:A3:9C:10:FA:75:A8:C2:7C
X509v3 Authority Key Identifier:
keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/413B19025CBA11F0B3AC387EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.198.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:12:88:7b:f6:7d:6b:f5:06:bb:bb:ef:66:e1:6b:08:08:fe:
0b:cc:4d:8b:61:92:4e:b2:33:ea:e7:70:6b:cb:ca:aa:80:71:
54:8e:50:ca:87:26:e8:cc:d3:29:20:95:05:3e:42:b5:cb:cd:
c6:04:9c:ae:a1:27:ff:2f:71:11:f8:d8:95:45:cd:3e:80:d1:
1c:2f:47:28:fc:60:20:dc:7b:02:5d:7d:ef:98:da:99:c3:c4:
ba:ad:d1:cc:8b:bb:2f:be:39:e6:7a:11:84:f0:c1:ac:c7:48:
6d:c9:17:aa:ef:c4:b4:68:93:cf:11:34:e4:0c:cc:9a:e5:50:
94:74:83:69:fc:b6:cf:a4:a7:01:01:dd:d4:e9:5a:38:28:d9:
6b:88:ed:e1:4b:4b:cb:31:3c:11:09:f9:06:42:f9:99:84:31:
80:96:48:2f:d9:4b:0c:dd:49:52:61:68:2f:72:3d:b3:7f:97:
21:12:30:a9:30:ac:da:1b:8c:7b:45:f8:28:1b:7c:45:34:dc:
c9:3e:e2:cc:a8:99:58:ee:83:f4:7b:8a:3b:7b:be:69:e8:c9:
f4:2c:9b:ff:7f:42:8f:23:5d:8b:bd:98:21:17:52:1a:70:6b:
08:4b:90:ab:9d:9d:41:f2:f3:31:eb:6c:9a:6f:f8:e5:f0:7d:
98:f6:f8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:15:26 2025 by rpki-client