Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/64606A98F6AA11EFBF9C6164762E951A.roa
File: 64606A98F6AA11EFBF9C6164762E951A.roa (raw, json)
Hash identifier: ZqYRFJlcb1QEmcIPiF4SXjyc4zrFWDiZaq/0tXcfXy0=
Subject key identifier: 6B:F4:E2:F7:BD:15:D4:44:D4:D7:24:FE:0F:32:B9:64:C6:BF:72:E3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A39
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/64606A98F6AA11EFBF9C6164762E951A.roa
Signing time: Sat 01 Mar 2025 14:35:16 +0000
ROA not before: Sat 01 Mar 2025 14:35:12 +0000
ROA not after: Mon 01 Mar 2027 14:35:12 +0000
asID: 834
IP address blocks: 154.16.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6713 (0x1a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Mar 1 14:35:12 2025 GMT
Not After : Mar 1 14:35:12 2027 GMT
Subject: CN=67c31b24-8370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:7e:ce:9c:81:0c:e5:1b:d7:84:6c:4a:22:
7a:4f:a0:ec:16:ff:27:3f:ef:2a:6d:55:b4:8c:cd:
8f:a3:4c:ca:e9:de:e9:9a:58:39:c9:36:9f:44:de:
e1:f4:4c:c2:ee:2b:b9:96:56:97:22:3b:92:24:a0:
02:b5:b9:46:dd:30:54:ae:ef:bc:93:7b:28:b9:ba:
90:d6:08:19:b1:59:e2:bd:67:8b:94:02:b4:a7:fc:
19:c8:4c:cc:34:11:3d:63:a7:49:8a:a4:30:d2:02:
f4:96:b5:71:f3:48:1a:f2:2d:36:d3:20:26:ae:fb:
0c:d5:fc:0a:a4:f0:a9:b8:36:fc:5d:21:25:ce:c2:
e9:0e:4a:fb:94:07:c5:02:3b:2c:54:11:b8:67:47:
5e:71:65:41:55:a1:78:68:48:f2:91:71:87:bd:0f:
b3:a1:c3:75:74:ba:40:df:b1:d1:1c:6f:5c:b4:29:
dc:e7:f6:60:7c:70:6f:69:09:15:4f:fb:06:4a:df:
9d:a0:6c:b1:a5:a8:e1:09:e0:cf:da:b3:12:2d:8b:
41:00:85:82:7f:ec:4d:e4:0e:bd:86:35:33:22:12:
b6:8c:0a:b4:7c:df:83:61:69:55:e4:2b:e9:91:1e:
8b:18:2a:1d:1d:4c:d6:a9:d2:5a:91:8a:b2:a5:fa:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:E2:F7:BD:15:D4:44:D4:D7:24:FE:0F:32:B9:64:C6:BF:72:E3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/64606A98F6AA11EFBF9C6164762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.242.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c3:ab:f0:06:47:2a:9b:19:8b:b4:45:ec:09:21:6a:ae:a6:
37:66:3b:62:65:41:89:bc:1a:19:bf:56:e1:b2:bb:41:82:5b:
42:d2:8a:73:69:0e:c8:46:9f:48:b8:23:4b:b7:52:80:57:58:
1c:35:e8:04:59:48:2b:9f:11:50:a7:c6:08:a7:89:b9:33:e4:
67:59:2f:aa:4c:0b:d7:96:28:9d:64:03:d1:5e:4c:fe:0a:ba:
27:97:39:e5:c6:e4:b2:d1:44:98:4a:30:88:54:30:a5:2e:1a:
5f:a5:6f:c0:63:e2:33:23:4e:e4:65:c8:68:8c:f8:55:bf:31:
fe:0a:5d:84:bb:b7:62:71:ff:a8:d5:f7:b2:38:36:18:9f:a7:
ec:6b:e3:0c:36:83:d8:26:52:39:a6:4a:fe:7f:dd:59:8a:6e:
a3:ac:b4:cc:df:d1:9e:54:3d:a3:49:d2:e5:13:30:ab:96:62:
f9:8b:cd:80:2e:01:5c:14:af:33:df:03:b8:ba:8e:ec:1d:55:
1b:68:ca:63:dc:e0:13:8b:cc:0c:1e:03:33:f8:8e:73:3a:5a:
10:0a:82:e5:55:9a:6b:23:47:9c:88:0d:c3:79:ea:73:85:81:
ca:d6:66:37:9a:22:81:c9:08:74:91:77:58:54:8c:88:f5:33:
2e:0d:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:00 2025 by rpki-client