Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84532FE43AEC11F08E01607BDAE4EC9C.roa
File: 84532FE43AEC11F08E01607BDAE4EC9C.roa (raw, json)
Hash identifier: LAl3XZcN2hXdCZGA4dlxdRnwEomIhJiTT+uyz+ElgE0=
Subject key identifier: CC:E4:30:0B:9D:81:C8:66:61:62:AC:B2:B3:8C:03:AF:6D:FA:9A:32
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1AFA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84532FE43AEC11F08E01607BDAE4EC9C.roa
Signing time: Tue 27 May 2025 11:19:56 +0000
ROA not before: Tue 27 May 2025 11:19:51 +0000
ROA not after: Thu 27 May 2027 11:19:51 +0000
asID: 48314
IP address blocks: 154.16.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6906 (0x1afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 27 11:19:51 2025 GMT
Not After : May 27 11:19:51 2027 GMT
Subject: CN=68359fdc-acdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:e9:84:d8:77:c2:5b:a2:4e:83:e9:dc:8a:
df:c9:c3:49:67:4a:04:96:7e:c9:33:98:f8:ca:5b:
62:7f:9a:2f:74:c5:95:da:68:1e:d5:fb:3b:18:4b:
48:89:d5:3a:c1:81:be:03:f5:70:d7:09:e6:a7:27:
c3:85:ae:c2:e5:fe:ca:b7:a3:f2:c2:cc:a6:34:82:
7b:9f:74:16:e9:46:16:d3:ce:73:d3:03:71:0b:d1:
f6:5e:54:5c:9b:94:bb:47:af:1a:bf:0b:f3:56:c3:
bb:9d:7c:8b:52:e2:86:6f:14:00:90:29:8a:6a:4b:
df:09:f8:e7:86:36:dc:0d:90:b0:04:ca:a2:54:64:
7d:82:4f:c0:b8:e1:79:57:41:a6:3a:18:7a:cc:1b:
3e:a0:25:ea:54:3c:bf:70:cd:9e:b4:eb:81:d7:5d:
47:85:4f:5d:3b:d0:4c:91:33:83:88:02:5a:86:88:
3b:16:06:47:34:c7:80:88:f3:69:e1:07:29:6f:0c:
ed:07:cf:65:be:5f:27:05:9e:ba:8f:68:a5:7a:5b:
d7:61:71:7a:9d:02:5e:61:43:21:78:9c:a6:6d:f9:
46:dd:11:06:65:3c:84:29:50:96:50:ee:07:a7:16:
d0:51:6c:cb:32:77:d8:e4:56:ab:18:fb:82:51:13:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E4:30:0B:9D:81:C8:66:61:62:AC:B2:B3:8C:03:AF:6D:FA:9A:32
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84532FE43AEC11F08E01607BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4f:a5:f0:6e:20:d2:e1:c8:06:8f:58:f9:4d:ef:30:89:aa:
18:e0:64:39:63:92:b0:79:cf:b8:2e:f0:fe:1d:b8:01:36:b8:
d2:b0:a3:f2:cb:92:5c:b4:27:29:e6:19:5d:56:91:15:fc:01:
e8:b7:d8:bc:aa:9d:1c:b7:ba:1e:36:de:c4:8a:73:c9:39:7f:
4e:19:bd:86:81:04:71:5d:4b:97:d9:7a:b2:cb:99:7f:5f:2a:
52:e6:75:41:63:d8:5e:c5:70:3c:ce:16:47:b4:b5:ad:e0:60:
c4:b0:db:23:63:a5:2a:7d:c6:d9:20:d1:19:3a:81:40:44:0f:
03:94:6e:fd:a4:67:06:e6:6a:82:ce:cd:64:9f:ae:0c:99:bc:
1c:3d:95:ce:81:ba:d8:c6:d7:05:ce:f7:b2:54:53:4d:16:9f:
c5:64:ad:5a:3c:f2:95:1b:6d:8a:97:7f:7d:87:c8:bd:88:12:
85:83:a7:32:de:df:e0:b7:bf:c6:5b:e9:91:c6:3a:0d:e7:f5:
55:4e:94:10:c0:d1:59:f1:e3:a7:28:9a:9d:01:00:5e:d5:e4:
00:f1:ff:25:e5:84:b7:3e:b7:b2:bf:cb:c1:72:ee:0a:f8:d8:
35:fd:51:43:41:85:09:d7:10:42:a4:53:c1:33:88:cf:26:d8:
17:13:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:26:50 2025 by rpki-client