![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F74C544E434E11EF922F407F762E951A.roa
File: F74C544E434E11EF922F407F762E951A.roa (raw, json)
Hash identifier: 2Bj/BhQO/FkqwhBOxplmvdIJbdSvpFqTG4M+hmbV250=
Subject key identifier: FE:6C:A9:3C:09:7E:F9:9C:08:1B:FB:20:6B:C1:82:04:FE:0F:EB:A6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1731
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F74C544E434E11EF922F407F762E951A.roa
Signing time: Tue 16 Jul 2024 08:39:51 +0000
ROA not before: Tue 16 Jul 2024 08:39:47 +0000
ROA not after: Thu 16 Jul 2026 08:39:47 +0000
asID: 397423
IP address blocks: 154.16.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5937 (0x1731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 16 08:39:47 2024 GMT
Not After : Jul 16 08:39:47 2026 GMT
Subject: CN=669631d7-4fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:6a:8a:91:a3:2b:89:31:61:aa:43:d7:d9:
d5:b7:dd:6b:59:08:c6:4a:8a:67:a4:0d:35:a8:95:
91:2b:03:7d:5a:1a:fa:c2:2f:ce:a7:eb:7b:08:0f:
41:70:1d:0c:18:59:da:1c:0e:bc:ce:ed:e8:70:d2:
33:c5:90:b6:d2:a2:ab:8d:74:bf:3e:20:db:56:ed:
6a:d7:6b:5b:cc:e3:0b:0b:fb:fa:6c:38:95:52:ba:
57:aa:6c:b4:96:3b:61:ff:1d:5a:02:d4:c8:da:5f:
ab:05:df:7a:ed:8d:26:41:e5:3f:41:c5:ba:1f:80:
c6:d6:36:26:8d:6d:60:b4:a1:f7:1e:b7:4c:94:82:
24:94:06:fd:ba:09:22:32:e9:77:e2:30:25:7c:b4:
9c:76:65:f6:4d:44:12:6b:b2:b8:eb:ee:27:ac:b5:
57:4a:d9:36:cc:59:36:b0:02:a4:22:51:e9:18:bb:
5f:56:32:0d:e2:04:8c:62:bb:2f:8c:05:8f:c2:da:
94:cf:e4:c2:d6:77:45:64:43:53:e2:38:c4:22:ff:
2e:65:b4:39:8d:2d:7e:16:a8:bf:71:cb:d8:7e:f2:
26:c4:b6:35:42:83:c1:1c:bc:5d:ce:03:7e:11:ee:
76:a2:10:10:ba:3c:24:a0:6c:c3:1b:9e:1a:84:94:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6C:A9:3C:09:7E:F9:9C:08:1B:FB:20:6B:C1:82:04:FE:0F:EB:A6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F74C544E434E11EF922F407F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.168.0/22
Signature Algorithm: sha256WithRSAEncryption
73:3f:86:c8:a2:44:e6:45:39:e9:31:10:78:8b:7e:3b:84:6a:
4f:96:0d:27:b0:ec:75:28:35:78:14:45:28:81:92:29:53:34:
99:f0:8d:40:e0:85:39:58:2d:60:05:d9:1c:a2:38:e8:17:b1:
37:c7:73:ae:17:95:0c:28:e5:4e:b2:39:f5:2a:2f:2a:2a:11:
91:bb:e6:85:b3:e1:8d:c0:26:cd:a3:94:96:d5:fb:a9:e6:d6:
10:00:5b:63:b5:cf:2c:f6:ab:c0:f0:7c:09:55:41:14:76:69:
f2:3b:d7:37:60:3e:fa:7b:6e:67:de:05:31:7d:fd:fc:b0:66:
c2:df:d6:0c:31:b9:ac:d9:d7:5f:27:c0:f8:e7:9e:74:70:d4:
cf:01:53:a5:52:62:b8:1f:ed:6f:e3:82:7d:4f:ce:cc:07:b1:
08:1e:af:d8:a1:d3:92:82:7f:75:d8:d9:0e:f2:75:83:c4:d9:
96:03:a8:cb:db:e5:6d:a2:72:1b:ca:c5:ee:8c:08:a9:94:88:
87:19:6f:4e:21:3f:5c:47:ba:30:d5:81:a7:f9:00:a3:7f:db:
b2:ef:8a:6e:a1:8f:15:80:4f:e7:71:ae:91:64:2f:6f:5a:8c:
3b:84:57:08:0f:9e:63:f8:3a:af:0f:a5:28:46:1f:63:d1:5d:
29:70:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:57 2024 by rpki-client on console-fra.rpki-client.org