Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3DF6716E85911EFB768FD55762E951A.roa
File: D3DF6716E85911EFB768FD55762E951A.roa (raw, json)
Hash identifier: rc+ljRVNqcKBYQfflBvEehb+QHgPlycAxYKRMfBRQFA=
Subject key identifier: 24:F9:02:1B:D0:DB:55:26:32:A0:12:00:D0:72:46:78:FE:6F:25:6F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19C7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3DF6716E85911EFB768FD55762E951A.roa
Signing time: Tue 11 Feb 2025 09:23:18 +0000
ROA not before: Tue 11 Feb 2025 09:23:14 +0000
ROA not after: Sat 13 Feb 2027 09:23:14 +0000
asID: 61317
IP address blocks: 154.16.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 01:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6599 (0x19c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 11 09:23:14 2025 GMT
Not After : Feb 13 09:23:14 2027 GMT
Subject: CN=67ab1706-2d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:1c:0b:de:6b:71:54:dc:6c:cd:55:f5:7d:
da:5b:1c:9b:d3:dd:04:9b:99:1e:4d:47:d1:64:4b:
bb:95:df:ac:c9:8c:e9:97:20:2a:08:44:76:42:84:
73:56:61:e7:8c:f7:7c:cb:96:51:d4:30:2d:0a:6c:
67:be:17:93:b4:f5:ce:14:3a:eb:98:46:15:99:6d:
14:8c:52:14:ec:e8:da:52:04:63:c1:c7:2e:db:75:
bb:56:fa:36:e8:06:37:b9:6d:49:3a:e0:88:bd:14:
98:39:75:97:d0:70:7a:d1:7c:be:0d:63:6a:ae:c9:
9d:3f:d3:64:01:17:05:b2:2d:be:15:20:e7:4e:b6:
b4:25:c2:0c:d1:0b:76:a9:a1:aa:b5:61:bf:2a:7b:
2c:d7:69:0e:72:6e:eb:dd:aa:80:d0:33:b7:e2:a5:
9f:66:ff:60:d4:39:6a:a0:70:56:b1:60:a4:a6:6e:
55:3c:f9:5f:4e:c1:2e:e4:9e:30:22:dc:db:48:48:
18:af:14:f6:7d:f6:2e:9d:62:e0:15:c0:03:ce:a3:
45:df:93:e4:70:fd:cc:06:71:4f:ad:73:6d:d9:e9:
a8:f7:6c:9c:6a:6b:0b:34:2b:26:58:c0:db:69:b5:
9c:94:a8:96:a0:72:97:2f:00:0d:de:9e:9a:e4:07:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:02:1B:D0:DB:55:26:32:A0:12:00:D0:72:46:78:FE:6F:25:6F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3DF6716E85911EFB768FD55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:0f:16:cf:02:15:db:a7:29:d7:df:a4:45:01:fd:af:7c:0f:
16:b8:15:d9:be:16:66:3a:38:de:44:2e:5e:8b:d3:9e:c5:13:
d1:d9:88:5d:44:bc:f2:32:6a:1a:7e:08:8d:89:36:f7:56:69:
df:1a:ec:c7:83:30:32:50:7f:ff:b2:1e:e9:09:9e:38:52:4c:
85:6a:54:af:3a:ea:55:cb:d5:25:e6:bf:85:c7:81:88:64:71:
5b:24:e5:70:d1:a2:b5:5c:7c:5c:e6:5e:be:35:fa:5c:fd:36:
10:b2:90:8c:e4:aa:5c:78:0c:ee:dc:64:d5:43:10:22:b4:bd:
99:db:e5:ee:77:1a:bc:bc:0a:ca:e8:fc:3e:5e:c3:cc:fb:fd:
9a:be:f0:89:48:ab:96:5f:42:68:bc:ba:a0:06:80:c7:9d:40:
69:74:42:24:5d:3c:56:33:40:1c:3c:e9:1b:8d:07:ae:11:09:
7e:21:9d:d2:ee:5f:9e:0f:9f:81:8e:9a:81:87:ec:5f:07:8f:
bb:49:be:7a:8a:f4:21:1d:73:c2:17:10:5d:21:0e:79:02:42:
d5:54:85:a4:dc:99:ad:62:71:2c:9f:76:fa:d8:76:19:90:6a:
18:df:50:e8:e8:82:3e:58:b7:12:c2:dd:f8:e7:b9:8d:45:47:
b6:52:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:53:05 2025 by rpki-client