Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FDCA8A1C30B911F09A9F1F78DAE4EC9C.roa
File: FDCA8A1C30B911F09A9F1F78DAE4EC9C.roa (raw, json)
Hash identifier: pIdZPa4wyi0di+ZAZHH3fQNgkiywHCqkNwSVX1s5G3E=
Subject key identifier: 7D:D7:E3:B6:74:4D:A3:2A:06:3C:88:22:2F:13:78:4F:B3:DE:72:35
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1ACA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FDCA8A1C30B911F09A9F1F78DAE4EC9C.roa
Signing time: Wed 14 May 2025 11:53:04 +0000
ROA not before: Wed 14 May 2025 11:52:59 +0000
ROA not after: Fri 14 May 2027 11:52:59 +0000
asID: 138997
IP address blocks: 154.16.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6858 (0x1aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 14 11:52:59 2025 GMT
Not After : May 14 11:52:59 2027 GMT
Subject: CN=68248420-c506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:0a:99:1e:da:37:44:2d:8a:5c:12:14:82:
87:79:8f:82:d0:bc:66:31:15:66:ed:3c:7e:ea:a9:
f8:ea:18:fa:0b:80:f5:b2:3a:4a:22:fd:04:96:08:
cf:55:5a:ce:f3:be:c8:25:38:75:27:46:fa:61:81:
3a:a8:a6:04:50:fd:15:2d:81:ce:0f:fe:35:38:98:
bd:cb:43:1e:eb:a3:ac:d4:85:b1:54:8f:dc:f1:bf:
75:5f:b1:02:c5:c3:db:a8:73:ac:75:69:f4:f5:e4:
71:c6:80:60:43:38:43:12:42:95:36:b1:e4:5c:13:
bd:3b:4a:53:28:2f:b3:3c:1a:a7:8c:e0:9e:65:72:
0e:74:a8:0f:59:ed:9e:29:a9:44:21:8b:2b:6e:d8:
69:64:91:17:47:01:49:59:22:3f:0c:a9:38:a5:a0:
52:bc:a0:f9:d0:54:df:5f:1b:1e:fd:48:ff:10:21:
88:e6:da:0e:1e:fb:3a:ff:1f:b6:41:b2:cd:39:f3:
57:71:68:e7:99:31:6b:b8:12:27:bf:fb:38:5a:33:
8e:9c:d2:66:51:a6:45:d1:47:88:d1:d9:89:7a:16:
2c:d9:25:c0:b1:56:c0:90:70:d8:9f:3f:ae:3c:4e:
97:24:f5:bc:ec:77:43:f9:db:96:d9:8a:77:4d:2c:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D7:E3:B6:74:4D:A3:2A:06:3C:88:22:2F:13:78:4F:B3:DE:72:35
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FDCA8A1C30B911F09A9F1F78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.232.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:30:40:56:e3:74:e6:db:e6:3e:87:cb:08:f8:f1:94:7b:b9:
88:c9:41:ac:10:99:6f:ed:8d:f2:99:e9:84:7e:93:90:4d:5b:
5f:ea:bf:9a:fc:03:34:51:15:68:ed:e7:bd:a6:e7:c6:46:a4:
8a:55:d9:34:8c:31:89:2e:2f:34:7a:33:97:39:9c:f3:c9:a8:
67:00:bf:3a:e7:c3:94:5d:48:cb:3d:f6:1b:49:fa:a6:39:79:
30:1c:32:c9:14:48:7b:a2:0a:bb:2a:be:60:f3:e6:89:36:8e:
f6:da:02:bf:f9:d8:b9:55:47:b4:ec:61:d6:f5:89:ef:b5:1b:
38:73:48:f7:dc:c8:c5:2c:36:21:b0:86:b1:1b:c2:37:e2:bc:
ec:ff:79:56:51:3b:fd:06:19:27:4f:16:31:a0:e6:8e:75:a7:
2d:ca:f0:f8:0d:5e:32:45:2c:c0:fc:07:6f:89:6e:e8:c3:fd:
ec:9b:91:4c:8a:10:81:8d:1a:e8:4d:6e:27:03:2a:24:f3:6e:
b8:af:a0:55:03:7c:7b:02:6e:4a:e2:4b:2b:46:7b:85:c8:bc:
6e:db:12:f0:7c:2b:18:55:6a:eb:60:0d:bd:a1:84:25:e3:f3:
43:54:6a:d8:7b:70:ff:4b:90:a9:42:ae:0f:ca:02:98:e9:45:
4b:d5:1b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:25:10 2025 by rpki-client