Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07F974BE408511F0ADD02DD8DAE4EC9C.roa
File: 07F974BE408511F0ADD02DD8DAE4EC9C.roa (raw, json)
Hash identifier: 6oAWZPgfDI/RXGDXYh+9RD9hQO2BSvSLFbsXWsjkWbc=
Subject key identifier: A7:47:78:AC:E6:D7:34:58:50:B1:75:50:30:3D:73:56:AF:BB:1C:C7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B16
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07F974BE408511F0ADD02DD8DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 14:14:16 +0000
ROA not before: Tue 03 Jun 2025 14:14:11 +0000
ROA not after: Thu 03 Jun 2027 14:14:11 +0000
asID: 43350
IP address blocks: 154.16.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6934 (0x1b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 3 14:14:11 2025 GMT
Not After : Jun 3 14:14:11 2027 GMT
Subject: CN=683f0338-d9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:f8:4f:35:1b:76:77:61:08:d9:18:36:d1:
31:f3:bb:23:36:4c:31:a1:3c:dd:9e:67:ac:ff:4d:
71:f9:ab:b1:60:ff:dc:dc:1e:cd:ee:b4:fe:18:13:
c7:f8:45:64:dd:f1:e8:7c:3d:c4:40:2a:29:fa:66:
46:2a:13:ae:40:d7:40:8c:04:ee:40:59:bb:99:5b:
ec:e7:9c:3c:9e:a7:6f:aa:6b:e9:88:42:91:b3:5a:
5c:83:e3:a1:9a:86:ee:8f:1e:ec:63:91:07:11:cf:
d0:54:6a:af:7b:c9:f8:49:14:3b:29:50:71:c3:ca:
35:ce:c9:8b:0b:02:3a:9a:9e:f8:72:5c:a8:14:00:
48:57:49:96:6f:d5:16:bf:72:29:7a:84:73:64:d4:
a3:ee:d2:b2:68:74:1c:44:0f:85:e2:58:88:1a:c5:
f3:b0:07:7e:2d:ae:19:93:35:3b:c9:70:88:56:4b:
14:08:e6:f5:bf:52:43:27:4c:85:14:62:16:1e:77:
8b:1d:8b:30:1b:29:df:3d:a6:bd:46:4d:fc:04:ac:
f6:67:9d:ef:7d:bd:41:74:7c:90:61:99:8f:20:20:
21:18:fd:02:54:00:cd:06:41:45:1c:e9:93:69:02:
5e:20:77:10:16:23:db:85:a7:22:0f:19:da:65:af:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:47:78:AC:E6:D7:34:58:50:B1:75:50:30:3D:73:56:AF:BB:1C:C7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07F974BE408511F0ADD02DD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.12.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3e:05:da:46:d8:a2:6b:b4:40:70:ae:c6:70:a9:80:70:1f:
d8:cb:4b:e4:3d:a1:5b:11:4a:d3:3e:16:ef:a9:74:50:66:a8:
6e:c1:2d:36:21:e5:c2:57:1a:13:dc:92:05:c5:bb:02:f4:86:
02:49:19:ea:19:d0:fe:eb:12:28:d0:57:f7:fe:47:c1:a6:a8:
f9:9f:6f:e4:17:06:86:c7:f7:89:95:0a:a2:1e:38:ac:2e:87:
13:dc:f9:3d:5f:84:41:e7:c1:14:2d:3b:33:8c:f9:fd:af:1f:
87:b1:77:2f:24:10:7f:00:f9:63:27:2b:af:e0:71:6f:bd:f3:
07:02:55:73:5f:30:c9:8e:c2:9c:ea:05:30:81:19:68:c7:4e:
ad:97:7f:29:46:76:a2:f2:68:9a:43:94:5d:44:59:95:a0:e0:
78:28:9c:36:36:6e:69:cf:8c:c4:04:8a:83:7f:60:40:99:20:
e0:bb:77:4d:35:bd:e5:5a:f2:1e:63:53:0d:b2:c4:73:3b:44:
be:28:3f:57:5c:34:83:89:12:bd:61:d7:70:8f:d1:36:c2:5d:
b4:d5:60:d1:34:2e:a6:ee:df:5a:91:54:3a:d7:90:d2:40:91:
39:bc:94:57:70:a3:dc:f6:2d:ce:d0:aa:35:b7:b6:72:7e:71:
33:f4:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:20:21 2025 by rpki-client