Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBDF774C08D211F0BC779D9B762E951A.roa
File: CBDF774C08D211F0BC779D9B762E951A.roa (raw, json)
Hash identifier: NZ23VE5sTtu0HDRZFareL5KIDU/mynabniLIGwZIzmI=
Subject key identifier: 03:6D:72:11:A5:D2:F7:65:FD:EA:5F:AC:A7:CF:5E:DD:34:0A:C3:1F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A62
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBDF774C08D211F0BC779D9B762E951A.roa
Signing time: Mon 24 Mar 2025 17:09:50 +0000
ROA not before: Mon 24 Mar 2025 17:09:46 +0000
ROA not after: Fri 24 Mar 2028 17:09:46 +0000
asID: 29614
IP address blocks: 154.16.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6754 (0x1a62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Mar 24 17:09:46 2025 GMT
Not After : Mar 24 17:09:46 2028 GMT
Subject: CN=67e191de-5bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:47:65:b7:4e:73:ed:9f:bd:89:cd:26:a1:
59:56:e2:74:7f:48:77:8d:59:28:58:d1:53:d9:9d:
2d:ff:c6:6e:b7:fd:9a:96:f3:77:07:c1:59:74:7b:
34:ec:78:57:74:8d:5d:bd:b0:6d:d6:6c:35:8e:84:
49:81:52:75:29:11:ff:2a:33:13:06:05:a7:0f:e9:
06:36:45:b6:fd:0c:f4:53:57:c7:6d:9c:ce:f2:fb:
22:cf:e8:be:b9:65:10:b8:f5:b6:0f:61:7e:6f:95:
37:9d:95:ab:46:b1:88:34:b4:1f:40:80:c3:d3:42:
18:cb:15:e3:1f:8f:34:d9:ea:69:d0:bb:d2:a3:83:
1d:2c:20:e6:57:e4:65:54:91:3c:47:4b:67:b5:02:
46:9f:54:9d:ee:06:b3:03:2b:b7:30:8a:54:2f:49:
c8:12:1b:c5:bd:d9:4b:ad:1c:20:df:d5:b4:40:b7:
bf:8f:97:8c:26:1a:15:a0:76:79:9a:e1:53:67:93:
77:6d:35:c4:f6:41:df:21:9a:45:bb:a1:2f:86:ee:
b8:8c:6d:70:c5:ae:bc:b4:22:d8:b9:bd:af:8c:eb:
fe:a5:0b:0e:e5:e8:82:b5:af:7c:e6:fb:ed:6e:24:
dd:58:09:fe:8a:23:b0:d6:5c:da:e6:fd:7c:66:e2:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:72:11:A5:D2:F7:65:FD:EA:5F:AC:A7:CF:5E:DD:34:0A:C3:1F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBDF774C08D211F0BC779D9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f7:45:e9:d5:f3:ef:d8:66:55:3e:7b:70:bc:c2:cb:b2:47:
b6:b9:5d:f1:97:d2:a5:08:e5:24:58:e7:68:8e:1b:4f:7c:0e:
a9:78:cf:ca:70:3a:da:2d:a8:0f:dd:c4:58:aa:44:37:1b:a3:
dc:2a:c0:fb:27:6a:eb:aa:26:d5:3f:27:0b:03:a7:3f:c8:61:
3b:70:38:80:fb:ad:ea:5e:1b:18:3b:b9:46:da:01:07:d8:3a:
5e:5c:68:c5:b0:00:fa:7a:9f:ac:4c:0c:dd:b3:e3:0c:0a:0a:
07:25:c3:8e:b7:03:7e:64:b3:4b:d5:78:0b:28:b8:09:a8:e3:
77:c7:0f:9d:2e:5f:ee:59:66:07:ac:18:0f:01:32:5d:c8:49:
1c:73:76:6c:33:6f:76:69:35:4a:ff:b7:22:6e:86:ad:18:a2:
73:13:5c:0d:81:86:23:4c:98:52:03:20:c5:e1:30:19:b6:d8:
ba:6a:b3:c9:70:ed:f0:57:43:8c:a8:78:da:ff:8e:85:43:ad:
e3:78:ae:6c:97:0b:25:f9:eb:8f:02:4e:a3:e7:63:66:69:7f:
aa:64:91:e3:1d:ac:ee:fb:d8:6e:b6:e2:da:39:af:6a:d1:0d:
df:61:21:d7:c9:65:d9:4c:a9:9f:6d:06:e9:a1:3c:da:97:8b:
53:b3:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:26 2025 by rpki-client