Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/690A23D6EF5211EF9077D3B4762E951A.roa
File: 690A23D6EF5211EF9077D3B4762E951A.roa (raw, json)
Hash identifier: 0iKOdI8WQ+za156uoJX/Id/r52uIHrhex4UFcHy+RSk=
Subject key identifier: 9B:A5:64:5F:8D:CC:13:F6:1D:49:29:2A:26:5D:4A:3A:90:A4:9F:4C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A0A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/690A23D6EF5211EF9077D3B4762E951A.roa
Signing time: Thu 20 Feb 2025 06:17:50 +0000
ROA not before: Thu 20 Feb 2025 06:17:46 +0000
ROA not after: Sat 20 Feb 2027 06:17:46 +0000
asID: 834
IP address blocks: 154.16.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6666 (0x1a0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 20 06:17:46 2025 GMT
Not After : Feb 20 06:17:46 2027 GMT
Subject: CN=67b6c90e-95cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:98:08:79:46:64:65:05:79:b7:e4:9e:d4:
b3:bb:6a:bc:63:af:1a:4f:00:5a:6f:38:ed:1d:f5:
e9:eb:fd:59:e0:f1:cd:97:43:bb:b9:c9:0a:d6:e3:
c6:eb:c5:b4:cb:e7:28:a1:d5:c5:5a:a4:97:a0:64:
8c:e0:c1:ab:cb:c4:e1:bb:ba:d9:6f:63:fa:66:ff:
dc:4b:39:f0:ab:a2:4d:71:c5:d9:64:e3:97:7d:94:
2b:ec:a3:e9:86:30:84:e9:21:2c:b2:53:8b:d3:28:
ff:99:8b:c0:45:85:43:3a:b1:60:b9:3c:42:b2:73:
4c:0e:b9:a9:49:8e:58:a4:ae:34:62:85:1e:2d:3c:
52:01:66:c6:7d:c5:bf:38:d7:af:98:d6:04:26:83:
98:33:08:0b:ac:c7:c9:d8:d4:e7:05:0f:55:de:6e:
a1:ae:a7:83:18:41:bf:fa:85:8a:8a:73:03:dd:1d:
d5:8b:58:ad:0d:26:2e:22:a5:f1:5f:21:af:f8:c9:
b4:37:20:4d:27:2c:e4:82:91:df:39:fd:05:46:e2:
47:43:12:cd:2b:a4:18:36:d6:78:77:26:3f:b1:27:
09:29:b4:10:b1:84:30:a9:7d:69:8f:75:7b:e6:18:
00:69:f3:8d:09:08:5c:60:60:93:ce:d6:46:6e:23:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A5:64:5F:8D:CC:13:F6:1D:49:29:2A:26:5D:4A:3A:90:A4:9F:4C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/690A23D6EF5211EF9077D3B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.225.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7e:50:04:4b:03:1e:2c:61:db:00:2e:37:30:c9:6d:35:f3:
b5:82:8b:9e:74:2a:fe:4a:85:70:71:3e:f5:eb:9e:bb:03:96:
8b:10:7b:97:81:76:a2:5f:d1:34:ea:16:34:35:31:e4:e5:39:
4b:28:32:78:81:17:c7:7b:a0:07:16:f3:0a:ef:e7:29:77:04:
64:0c:30:f0:ab:4e:a1:8f:dc:82:2d:d7:50:0a:d9:51:ae:fb:
50:67:bf:36:76:f9:bf:1b:8c:c7:68:87:c5:b7:de:a9:78:b3:
28:ae:01:54:cf:1b:6b:31:3d:dc:48:9d:96:a8:d0:9c:6c:cd:
28:10:22:7c:99:a8:81:01:fb:cd:7b:4f:7f:d8:4c:fe:f0:ef:
ab:00:f5:53:da:a5:d4:3b:4c:04:25:e1:ca:3e:ee:0d:fc:82:
47:78:92:94:44:39:39:69:12:df:b3:0c:65:05:e4:6f:52:72:
19:0e:3e:eb:bf:6d:34:b6:53:13:ad:7e:48:cd:94:b7:42:dd:
31:e6:0b:ad:78:47:4a:9d:ff:24:ce:df:a3:8e:7d:56:6a:66:
29:d1:d3:bc:89:4f:93:1c:2f:45:c0:2f:e1:aa:0f:7c:d6:91:
3e:6c:0b:93:2e:26:eb:c3:7c:a1:29:34:a6:93:c7:a3:9f:24:
03:32:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:54 2025 by rpki-client