Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FF12E003AF011F0BF660095DAE4EC9C.roa
File: 4FF12E003AF011F0BF660095DAE4EC9C.roa (raw, json)
Hash identifier: 1euO9usr0/1Cuph6RgAieC4TTNfW51gua6r9afmqg5U=
Subject key identifier: 10:2A:A1:A3:FC:9C:25:54:BB:7A:3B:3B:2D:C9:6A:59:04:74:6E:64
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B06
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FF12E003AF011F0BF660095DAE4EC9C.roa
Signing time: Tue 27 May 2025 11:47:06 +0000
ROA not before: Tue 27 May 2025 11:47:01 +0000
ROA not after: Thu 27 May 2027 11:47:01 +0000
asID: 61317
IP address blocks: 154.16.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6918 (0x1b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 27 11:47:01 2025 GMT
Not After : May 27 11:47:01 2027 GMT
Subject: CN=6835a63a-836f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:68:40:35:d6:a1:5e:83:b9:3f:28:7a:55:
f6:20:cc:df:30:97:5e:83:f9:dc:46:09:45:93:ed:
e6:01:9d:aa:16:46:c3:f2:f0:89:de:ca:1d:51:dd:
b5:b5:3a:2e:dc:24:22:bf:d3:b2:e8:cb:b5:4e:61:
7a:be:65:4c:66:5b:f5:67:35:f5:cc:e5:f3:7d:37:
24:a1:bb:0e:ae:64:0a:20:42:10:83:f2:01:1f:8e:
5b:e5:fd:22:e4:b7:a5:c5:e2:2f:0d:23:1d:26:a9:
a6:1c:91:25:3f:45:b6:36:c5:c3:c9:43:ce:42:72:
cb:c0:4a:b6:db:38:95:66:17:5f:92:37:69:6c:8c:
95:33:4c:0f:44:87:93:fe:c8:fd:17:d8:31:be:9b:
06:e0:b4:d7:e2:60:b3:9e:78:92:f5:65:e3:5e:34:
68:4f:f0:f2:ea:e9:6f:a1:a6:15:a1:01:a8:c5:89:
4c:c6:e4:5c:48:b4:30:b7:cc:3f:d1:60:26:3e:da:
fc:66:0d:3e:aa:26:08:df:99:9f:ff:ae:2a:e8:93:
5b:e0:bf:07:ba:b9:51:65:e7:24:b7:98:87:c5:d6:
21:33:f0:b3:be:cc:17:cd:e0:d6:d9:b5:0f:f6:71:
08:8f:2e:66:cf:b7:e8:3c:1d:ac:35:8a:42:25:7c:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:A1:A3:FC:9C:25:54:BB:7A:3B:3B:2D:C9:6A:59:04:74:6E:64
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FF12E003AF011F0BF660095DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.80.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fa:2c:7d:fa:06:c3:d4:35:46:8c:c9:f3:82:59:e7:d6:94:
c9:46:1c:c1:e6:09:9b:c4:2c:53:e4:23:70:82:09:2f:90:e0:
50:02:72:26:7c:3c:87:8a:c9:1b:f7:14:c5:3c:47:43:29:dd:
e4:72:6e:30:58:53:e9:aa:3b:ab:f6:c7:c3:a0:a5:3e:1e:46:
b9:5c:72:02:34:d9:96:a1:2a:1a:45:8a:7d:cf:b3:a2:83:e6:
b3:85:18:4e:ed:90:66:7d:ae:6b:fe:1b:1b:aa:98:7d:af:fc:
13:ba:88:ef:0b:c0:24:b9:53:54:4a:ce:44:b0:42:4d:35:44:
5d:fb:3c:f3:30:37:22:e7:d5:80:d2:ac:16:cd:38:d8:42:5d:
ca:e9:d2:1b:d3:a6:b8:f3:c3:60:41:8e:05:9b:48:b5:1c:00:
1f:65:2c:08:9c:4e:75:c4:66:f9:9e:4c:ba:88:36:cb:1b:65:
64:40:d8:04:9e:de:8c:03:60:aa:b5:2c:3c:e0:87:d1:ae:23:
d0:97:3e:24:c8:36:60:e5:24:7b:22:44:c6:8a:32:6e:0f:6e:
2f:48:13:fe:e1:da:11:17:c2:a3:a3:5b:c8:87:20:21:05:a1:
10:b7:d9:bd:5d:ec:6a:f4:d1:9d:a0:66:42:bf:89:9e:2a:00:
5c:49:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:27:35 2025 by rpki-client