Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0452D734563C11F0B8D221B9DAE4EC9C.roa
File: 0452D734563C11F0B8D221B9DAE4EC9C.roa (raw, json)
Hash identifier: 4EvxLQxfkkL/sisOCOSPLRi7M4OutPCo8Swk9vHiQMA=
Subject key identifier: 3B:AA:78:03:0C:58:4E:A6:A8:94:D6:07:59:B7:F4:F9:4F:8C:69:E1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B50
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0452D734563C11F0B8D221B9DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:27:02 +0000
ROA not before: Tue 01 Jul 2025 05:26:57 +0000
ROA not after: Thu 01 Jul 2027 05:26:57 +0000
asID: 834
IP address blocks: 154.16.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6992 (0x1b50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 1 05:26:57 2025 GMT
Not After : Jul 1 05:26:57 2027 GMT
Subject: CN=686371a6-69fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:75:b0:e1:45:cd:2e:d3:41:22:f0:9d:a3:
5a:ea:04:26:36:2e:ba:e2:53:21:01:f9:b9:aa:1b:
56:62:ae:eb:fb:c5:3e:6b:a4:b3:78:b9:6e:0f:84:
fc:de:9b:66:5f:b1:b8:33:50:ac:26:6f:e4:ae:03:
d8:ed:c8:36:db:4d:e7:04:8c:6d:b2:5d:c1:6b:77:
6f:24:1d:a5:14:5d:0a:d4:01:5d:47:88:b7:69:71:
3b:28:ae:27:39:d2:72:9c:78:f9:c3:04:a8:97:cc:
17:a1:65:1c:b6:e2:b4:17:be:af:0a:00:c0:5b:29:
c8:18:3a:45:64:fe:12:62:2b:8c:27:33:10:2c:49:
b6:bc:5f:9b:5f:78:90:45:50:56:a6:ee:87:a8:c2:
b1:12:e0:58:df:7e:a4:ec:b5:80:50:e0:0c:10:54:
1f:e2:26:08:e5:cd:7d:56:f6:cc:84:00:cb:ec:fb:
e9:57:a9:a5:42:cf:4a:2d:c1:61:c1:d1:46:38:56:
56:6b:7d:fc:21:21:0c:8c:14:ee:90:1f:2d:5b:25:
4e:13:48:ef:e4:68:55:37:4e:d9:a2:f6:05:02:a7:
5e:c3:ee:59:83:45:61:fb:7e:80:3c:d1:19:af:de:
1f:83:64:dc:6f:33:31:9a:fa:63:7f:98:7c:4c:62:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AA:78:03:0C:58:4E:A6:A8:94:D6:07:59:B7:F4:F9:4F:8C:69:E1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0452D734563C11F0B8D221B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.229.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2e:be:52:05:ec:0e:0d:d9:c7:89:c3:6f:06:cf:55:3b:7b:
8c:93:91:a0:76:4c:71:fe:7c:13:82:a0:3d:89:09:27:d1:71:
73:9b:13:fa:e4:c0:32:8d:3c:7f:11:2f:d2:97:3e:71:78:35:
63:2d:e8:42:fa:cd:a0:57:ea:1f:89:00:6e:ed:95:6c:91:2a:
73:4e:3b:db:72:ff:f6:95:f6:b1:c2:71:d6:d7:d1:75:d8:49:
74:41:1a:27:56:22:c7:bc:51:be:4c:e0:bd:c4:58:d1:39:80:
6d:5b:cd:c3:68:81:37:03:52:50:c3:83:e7:91:1e:9c:61:50:
35:b6:b8:f1:99:20:5f:46:73:a2:fb:e1:66:7a:27:df:9c:b7:
41:81:16:c8:c5:7d:89:ea:dd:b9:13:f7:47:69:ed:9a:5a:21:
fe:4f:42:2a:de:f7:6b:38:4b:09:c0:7e:8d:ea:20:51:43:48:
7d:5e:7c:ce:f4:9e:0d:b3:96:31:83:b3:23:79:f4:9d:6b:41:
b8:5c:d9:82:b8:5c:ad:9d:52:89:04:d2:5a:9b:5c:76:44:61:
39:58:63:f4:88:14:29:db:76:6f:32:37:21:02:08:74:ae:39:
a9:b4:81:3c:45:4a:ce:3d:8f:fc:8f:b3:bc:3c:45:e8:59:88:
1c:48:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:30:34 2025 by rpki-client