Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A22000E236E611F0805233CBDAE4EC9C.roa
File: A22000E236E611F0805233CBDAE4EC9C.roa (raw, json)
Hash identifier: 5nYd8ZQwWqlCypdsiEomIh4kC7r2jiXDYaVRxiK+Nrk=
Subject key identifier: F1:BD:8D:DF:38:F7:4B:4F:08:C1:CB:41:E2:8F:03:DD:41:13:B7:C0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1AE6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A22000E236E611F0805233CBDAE4EC9C.roa
Signing time: Thu 22 May 2025 08:27:44 +0000
ROA not before: Thu 22 May 2025 08:27:39 +0000
ROA not after: Mon 22 May 2028 08:27:39 +0000
asID: 213734
IP address blocks: 154.16.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Jun 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6886 (0x1ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 22 08:27:39 2025 GMT
Not After : May 22 08:27:39 2028 GMT
Subject: CN=682ee000-5b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:2c:75:db:53:b2:70:d6:bb:17:dc:b6:03:
5f:6f:f9:64:c8:03:00:b6:a0:24:4e:fd:2e:7e:87:
e6:47:fb:5c:a7:a7:74:72:d1:ca:00:b7:8a:8d:e7:
9d:60:e6:92:a2:59:6a:17:96:1d:ab:de:c9:ad:cb:
67:8e:09:73:a3:7d:6b:a8:c6:8b:4b:c0:8d:4f:2f:
15:12:90:36:78:6f:ad:af:71:2e:d0:e6:83:9b:3e:
b3:a8:df:5f:69:a9:dd:55:d3:c1:3b:d2:6e:1e:4b:
ca:d7:10:1d:7b:78:c5:ae:a6:e4:be:2c:cf:1e:c8:
5c:56:95:88:25:f1:8a:0a:7f:3d:5d:15:13:fa:96:
ae:78:c1:53:2e:60:fd:9e:b7:58:b4:fc:93:f2:73:
63:d1:da:06:4c:9d:8c:2e:8d:39:e1:5a:2f:4f:03:
5b:e8:c6:4e:ae:00:4e:63:9b:a7:09:de:d7:ae:b6:
d4:af:17:a4:27:88:9e:bb:e9:f1:d2:54:9c:80:39:
3c:d6:76:e0:87:4b:03:b3:d1:d8:72:7d:49:9c:09:
cf:52:44:2f:cc:c2:89:e9:d4:8f:99:83:76:ca:6a:
94:3a:e1:be:6c:c6:e1:73:8c:57:49:96:9b:ab:44:
26:48:10:8e:ea:0a:05:35:df:ae:b7:c0:86:c3:16:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BD:8D:DF:38:F7:4B:4F:08:C1:CB:41:E2:8F:03:DD:41:13:B7:C0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A22000E236E611F0805233CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:70:a8:9f:68:60:fd:e2:eb:7c:b8:1f:46:14:12:ab:61:a6:
b3:07:8a:46:76:4b:ba:d9:9b:b2:62:d0:45:dd:f5:fd:98:8c:
ce:d8:dc:23:7a:86:06:ce:c9:1f:41:89:f8:d8:b8:c2:a0:63:
4f:28:f1:c4:c3:97:f3:86:f5:4f:d6:fc:f1:cd:89:7d:5e:4c:
52:c5:0c:60:1d:77:d3:6c:5b:6a:69:df:56:41:11:df:78:55:
97:a0:f6:17:55:9b:26:d7:27:5c:4e:3d:63:db:42:d5:8d:62:
34:b1:81:0a:5a:7b:fc:2b:c3:74:e7:3c:32:0f:b6:ad:7f:31:
bc:4a:b9:c6:58:06:95:3a:90:9e:9f:64:14:f3:8d:a4:a0:72:
c4:53:57:47:65:09:3d:68:69:7b:40:bd:5d:1e:1d:de:9f:69:
1c:ee:54:39:3a:53:28:8e:93:4c:47:85:64:2e:d6:ca:23:67:
2f:5f:68:4c:82:30:65:de:37:94:72:d4:cb:90:21:59:60:60:
cb:57:a3:0a:09:41:86:99:d0:8b:d3:5b:05:2a:62:6a:2f:f1:
c5:a5:66:e7:12:98:03:e6:89:2e:f8:1b:dd:06:7a:a4:66:13:
43:3b:d2:eb:70:00:18:4c:d2:d6:eb:5e:33:7f:52:9a:16:df:
9a:d7:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:02:43 2025 by rpki-client