Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F465716636E611F085DF40CDDAE4EC9C.roa
File: F465716636E611F085DF40CDDAE4EC9C.roa (raw, json)
Hash identifier: 2YDVrwV/wyiDsv1NWPsojR6Wt1is1CysZpzmth/evjQ=
Subject key identifier: E2:5A:58:FD:F4:CF:0A:F8:C2:7D:25:75:1E:FA:71:39:4F:58:6E:C9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1AE9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F465716636E611F085DF40CDDAE4EC9C.roa
Signing time: Thu 22 May 2025 08:30:02 +0000
ROA not before: Thu 22 May 2025 08:29:57 +0000
ROA not after: Mon 22 May 2028 08:29:57 +0000
asID: 213734
IP address blocks: 154.16.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6889 (0x1ae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 22 08:29:57 2025 GMT
Not After : May 22 08:29:57 2028 GMT
Subject: CN=682ee08a-b885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:bb:31:de:0c:12:c0:58:45:17:fe:d0:40:
85:64:7b:ae:10:b7:c3:5e:10:37:da:2a:43:08:fb:
ae:71:f6:38:98:21:5d:5f:f0:e2:04:cb:8f:6f:40:
fa:6b:e6:56:f7:90:f2:cd:67:cf:5c:6f:a3:c4:d3:
72:98:02:1e:6a:91:e9:39:a2:01:1f:e9:79:3b:f3:
90:d3:42:ed:16:62:ff:f4:1d:48:a2:8f:5b:e8:6b:
01:ce:0d:11:fa:22:b9:d6:e2:0c:b1:61:92:ea:e4:
7b:eb:a3:26:3a:21:fa:54:ed:32:47:47:12:b2:be:
36:70:60:10:91:d0:5b:1d:67:01:95:74:db:81:6d:
e5:9d:a0:31:41:8a:8f:45:f2:6d:37:49:e9:ca:11:
ea:22:5d:33:3a:88:f7:3c:3e:e1:96:e4:6d:33:45:
e7:ca:a1:43:24:4a:95:22:1e:28:f0:03:6e:81:cd:
b5:19:35:df:c3:15:2d:eb:4d:3f:8e:a0:48:a4:e4:
6d:9c:b6:ac:cd:5c:82:26:0a:7f:da:55:88:63:a6:
60:d8:67:8c:16:dc:43:37:62:bc:8e:31:82:50:0f:
60:3c:89:a0:8e:6d:27:b5:b5:51:79:4a:6c:03:4b:
b6:12:26:f7:38:82:f7:78:35:98:37:af:4b:4e:71:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:58:FD:F4:CF:0A:F8:C2:7D:25:75:1E:FA:71:39:4F:58:6E:C9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F465716636E611F085DF40CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:35:35:13:63:45:9f:d5:6f:e1:22:c2:5c:08:84:92:eb:ce:
e2:07:46:2a:81:6d:c2:3d:0d:50:6f:7e:be:8f:64:f7:21:c8:
f1:cb:5e:7b:e5:93:2f:33:0f:14:a6:6b:9e:bb:3b:3f:5e:b3:
f5:74:23:e3:47:c4:f0:f0:41:27:98:4d:69:52:30:09:1a:89:
c1:f5:ae:10:7f:b1:75:ee:ed:ae:8c:89:83:aa:4a:f7:bc:c4:
22:78:dd:e4:c9:36:54:e2:51:9f:61:80:b8:4a:89:80:16:65:
14:1d:d7:c4:a2:1a:17:bc:14:82:57:b1:0b:31:ef:88:25:0d:
0e:f5:30:a0:59:0d:bf:0d:13:df:cc:f4:ec:2f:23:7d:1a:47:
e0:1b:11:1b:1c:66:13:6a:bd:89:33:5a:a6:94:d6:1d:7f:a0:
de:41:a3:a7:3d:14:73:b9:05:68:b3:06:9f:78:66:c9:f9:71:
f9:8a:11:a2:b6:e3:7b:ef:fd:fe:dc:91:1c:6d:df:94:f2:f4:
eb:15:77:7b:26:c2:b1:73:94:b8:05:73:19:ec:a5:40:8a:9c:
e8:9b:ea:63:ed:36:03:19:12:0a:8a:a2:69:c2:ff:71:4e:8e:
4f:26:75:a4:9e:11:d9:14:3a:4f:da:19:0b:ee:83:95:23:e3:
47:b9:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:13:50 2025 by rpki-client