Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB8F1D8563A11F0A852F9AEDAE4EC9C.roa
File: 7CB8F1D8563A11F0A852F9AEDAE4EC9C.roa (raw, json)
Hash identifier: Tu4n/2CocPZXzAvtPZUshX2lyXeoCwnWiTZam5osd8Q=
Subject key identifier: 0A:D1:2D:42:5F:E2:C7:5E:43:1D:54:E1:27:EF:C5:30:49:B0:46:B8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B47
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB8F1D8563A11F0A852F9AEDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:16:05 +0000
ROA not before: Tue 01 Jul 2025 05:16:00 +0000
ROA not after: Thu 01 Jul 2027 05:16:00 +0000
asID: 834
IP address blocks: 154.127.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6983 (0x1b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 1 05:16:00 2025 GMT
Not After : Jul 1 05:16:00 2027 GMT
Subject: CN=68636f15-214c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:4d:aa:6a:9b:11:48:3a:87:a0:db:d5:c3:
af:07:dd:69:58:00:50:3f:2d:51:0f:82:14:ef:3d:
d5:15:13:7e:f0:ed:3c:2c:f6:14:37:66:81:fb:35:
fe:77:83:8a:b9:9f:48:db:69:cb:67:e8:b4:d9:8d:
51:e9:f1:e5:77:a8:67:47:c3:83:cd:02:7a:97:a0:
26:81:1f:92:0f:8b:ba:6c:84:5f:ad:fd:e8:4e:c5:
37:6b:f6:8c:d7:fb:18:5d:bf:96:6d:97:64:35:90:
f0:7c:7b:8a:27:dc:86:18:6b:30:24:d5:84:26:13:
7f:2a:22:de:70:30:19:4a:6a:87:92:52:c1:1c:67:
9e:e9:79:3a:ed:97:0b:6a:9b:5c:be:a2:5e:11:5d:
2d:88:9d:b4:5d:cd:bc:e7:89:b9:9b:78:94:e1:b1:
4e:36:75:5f:80:5d:18:a8:ac:f1:e5:cd:ac:16:a3:
80:62:3e:0c:81:9e:ad:ca:b6:b7:8c:c5:c6:9c:f1:
ec:43:02:86:3d:c2:26:fe:ae:dc:bd:a2:ef:c8:4f:
6a:88:e4:55:26:7c:cf:92:1a:da:f1:70:15:66:3d:
12:7a:15:cd:22:29:a6:2e:c0:ef:77:e9:ed:4c:20:
a7:a4:53:13:64:b1:d1:17:f4:de:dd:a2:8c:b3:69:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:2D:42:5F:E2:C7:5E:43:1D:54:E1:27:EF:C5:30:49:B0:46:B8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB8F1D8563A11F0A852F9AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.51.0/24
Signature Algorithm: sha256WithRSAEncryption
25:51:e8:95:9d:4d:9f:54:59:5e:d6:04:42:42:a7:87:94:a0:
98:df:d4:40:9f:4a:d4:55:8d:28:92:aa:43:f9:ab:03:13:18:
b6:8a:ab:eb:a1:fb:02:a0:13:02:a2:42:53:3f:7c:b6:01:b3:
60:4e:04:bd:09:1c:df:f1:82:1c:44:89:e1:16:2b:e5:f5:ef:
63:b5:29:6b:12:9d:86:99:69:20:a4:b0:fd:44:2c:4e:14:2c:
53:df:d7:dc:1c:82:cb:71:c7:d7:6b:51:d2:3a:b6:d9:e8:42:
70:9a:92:4a:2a:8a:50:83:3f:59:78:71:18:7b:34:ce:ad:dd:
ae:83:9f:08:eb:d6:8f:a3:24:ad:42:c0:a2:c0:ad:ab:aa:6c:
d6:d1:87:21:e7:9f:f3:ee:6a:c7:71:12:91:47:f4:30:4a:59:
cc:08:07:69:4a:37:91:5b:af:bf:c4:5c:45:0a:42:13:c1:33:
52:e9:e9:59:93:09:7f:7c:0b:df:7a:60:06:7d:d2:b7:9e:a9:
82:f8:df:01:21:47:9d:30:51:bf:6d:22:62:fb:f7:b1:4c:21:
74:55:fb:95:88:76:02:80:fd:c2:47:d3:17:a9:69:49:d3:0a:
ca:f9:61:f6:eb:82:86:65:e7:c0:eb:e9:ba:48:b9:88:ed:3d:
79:d8:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:29:39 2025 by rpki-client