Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6E683843AEF11F0B754AE90DAE4EC9C.roa
File: D6E683843AEF11F0B754AE90DAE4EC9C.roa (raw, json)
Hash identifier: zh8WHb/xjWt4++osC7RUrmD9e+mHKpBe+BiFprFqrhw=
Subject key identifier: C4:CB:7D:17:9B:4B:91:98:89:39:79:D8:C4:DE:9A:C5:C0:B8:3A:76
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B03
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6E683843AEF11F0B754AE90DAE4EC9C.roa
Signing time: Tue 27 May 2025 11:43:43 +0000
ROA not before: Tue 27 May 2025 11:43:38 +0000
ROA not after: Thu 27 May 2027 11:43:38 +0000
asID: 61317
IP address blocks: 154.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Jun 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6915 (0x1b03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 27 11:43:38 2025 GMT
Not After : May 27 11:43:38 2027 GMT
Subject: CN=6835a56f-786b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:c9:42:4c:b5:3c:ff:ef:14:34:98:1f:c1:
db:1f:8f:59:ad:2f:df:e7:9e:aa:75:87:c5:4e:2c:
62:a8:4f:97:8b:cd:cb:c0:fa:1e:00:8d:55:99:c7:
dd:87:61:f2:9a:d9:8e:94:bf:cc:90:38:72:27:0e:
cc:70:4b:b2:03:bc:16:11:f0:32:64:ae:cf:99:d9:
a5:96:e3:36:80:84:00:5a:0f:bd:8d:10:25:20:a2:
e9:0b:91:03:be:34:f0:a7:41:61:93:f5:23:a1:3d:
8f:4f:78:4b:fc:3b:d8:ca:89:00:bd:34:b0:10:e9:
88:15:36:44:15:51:27:ea:ad:77:3c:28:34:ab:b1:
e0:74:c2:36:94:64:2f:55:38:66:58:2a:0f:24:c6:
13:3a:22:6d:ee:0d:5b:bb:b1:49:36:57:5c:e7:c9:
f4:ef:1b:22:19:d5:0e:61:a1:09:61:6a:47:41:0d:
2e:5a:58:ad:9f:18:4a:e2:55:a3:8a:ef:d6:7d:27:
4a:d9:ee:a5:7c:3e:e7:9e:d9:df:ab:c3:b4:b3:47:
8f:8f:ad:c5:26:ec:b3:11:bb:da:28:d5:c5:98:3c:
03:cd:a7:f8:db:30:2c:31:71:dc:f5:74:3c:83:84:
d0:0e:4b:51:83:22:a7:dd:2b:fc:cd:27:2c:2a:cc:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CB:7D:17:9B:4B:91:98:89:39:79:D8:C4:DE:9A:C5:C0:B8:3A:76
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6E683843AEF11F0B754AE90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:06:03:06:69:ff:e6:2b:ba:15:60:dc:ab:ed:13:7a:77:6c:
2d:a1:c8:9d:e6:31:2a:a3:26:b5:0d:c4:b5:dd:18:42:6c:9d:
7b:7c:6b:f5:af:b7:15:96:ae:0c:e6:b1:48:fe:77:01:55:9e:
ed:42:b7:7b:84:ef:14:22:1d:e4:2f:7a:3b:a2:4b:6e:55:06:
e0:48:20:b7:f2:1f:4d:f1:1b:04:1f:ab:36:4d:fc:56:a0:ba:
02:d2:8d:87:db:af:e7:ed:01:2a:3f:5a:73:3b:20:a0:2a:9f:
6b:6d:ca:b6:52:bc:57:21:bb:9b:e0:13:d5:61:07:85:86:89:
27:8b:ea:bb:29:67:bd:e5:b4:d6:d1:35:cc:84:94:58:3f:8c:
d0:8a:bc:a6:88:92:97:62:18:1a:b0:e1:34:73:58:19:3c:3c:
2e:11:b4:6c:c0:35:84:63:93:8d:7d:dc:b0:ea:ba:b3:e8:5a:
09:f4:51:06:9f:84:ca:c2:d5:4a:93:15:29:98:28:0e:82:8e:
2c:dc:25:4f:a1:18:77:b7:06:f8:03:59:1d:4d:ed:38:d3:58:
2e:45:4e:c8:7d:b1:8a:ea:9f:59:29:7e:3e:9e:41:b8:ed:56:
fe:c8:76:b1:8a:9c:a8:bc:8e:48:65:b2:8e:2e:84:1f:3f:50:
fe:65:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:02:24 2025 by rpki-client