Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/46C3E730371411F0A97A07EFDAE4EC9C.roa
File: 46C3E730371411F0A97A07EFDAE4EC9C.roa (raw, json)
Hash identifier: AYG+6HmkrjhdWL+g6OSdrYX4YzA3XUT6eAmv6J44htM=
Subject key identifier: DF:7F:03:5D:E1:F2:50:75:EF:19:B3:DA:BF:2A:A2:EC:0D:A8:BA:E5
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 08D6
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/46C3E730371411F0A97A07EFDAE4EC9C.roa
Signing time: Thu 22 May 2025 13:54:28 +0000
ROA not before: Thu 22 May 2025 13:54:23 +0000
ROA not after: Sun 20 May 2035 13:54:23 +0000
asID: 37049
IP address blocks: 41.242.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 01:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: May 22 13:54:23 2025 GMT
Not After : May 20 13:54:23 2035 GMT
Subject: CN=682f2c94-52f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:65:72:d5:4f:bd:99:3e:37:5f:25:34:51:
c6:6f:48:be:a3:4a:d6:0c:77:86:05:3b:81:48:de:
ad:47:44:e5:7d:ca:03:66:a0:ca:97:09:ef:0f:4e:
76:b5:8c:86:9f:ed:31:8d:be:0b:02:b0:af:9e:34:
34:e7:17:6c:cb:69:4b:5f:d4:f4:c5:84:37:a2:cf:
6a:3a:cd:0d:62:45:db:4a:e6:aa:84:45:43:21:fe:
12:d8:ed:d6:fc:79:81:38:cf:8d:86:ee:a0:4a:4f:
2c:8b:8f:1d:cb:38:48:57:f7:a2:a1:88:a0:7a:f7:
07:8f:e9:93:cb:be:39:af:73:bb:51:0f:ba:63:99:
f4:b8:35:05:82:cc:0f:83:da:62:1b:44:2d:20:65:
3c:17:e1:26:34:08:52:88:a0:05:dc:7d:2b:c6:fd:
d3:8f:ed:fe:42:f1:07:c5:eb:62:cc:78:69:fe:41:
ad:c8:b0:2b:36:77:04:20:c0:e6:0b:cd:8e:88:89:
12:71:7c:88:b1:49:24:b7:1d:89:ec:10:b9:9c:31:
11:04:9f:b3:0b:66:6d:4b:92:3b:bd:11:69:a4:98:
fc:1f:38:93:6d:4b:da:72:b9:dc:98:dd:46:ef:ca:
cc:d3:aa:ea:25:f7:df:67:54:18:af:ac:aa:75:de:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:03:5D:E1:F2:50:75:EF:19:B3:DA:BF:2A:A2:EC:0D:A8:BA:E5
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/46C3E730371411F0A97A07EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c7:49:4d:3e:52:c2:2f:0e:92:6d:1c:a2:a6:66:75:d0:de:
0e:10:06:54:49:77:58:06:8c:1d:a6:4d:3b:71:63:b1:98:28:
f7:3c:51:01:da:f3:0f:ea:e4:24:7f:c9:ea:25:8f:5c:81:df:
cd:f5:89:4e:84:53:b6:8f:a8:f7:4f:46:5a:90:b4:03:ec:bb:
92:fa:9b:08:63:32:f8:ca:5a:eb:5b:88:86:3a:bb:08:c8:e8:
b8:8e:f0:92:92:0d:ea:cd:be:29:ac:a5:63:0e:b6:c3:5e:5a:
0d:93:d9:ed:86:43:7f:b0:a1:8e:11:cf:c8:45:ff:43:b7:96:
2f:92:ca:c8:49:68:24:a6:b3:42:ef:b9:6f:96:96:f1:ee:51:
db:44:41:ef:22:78:48:5f:23:c8:ba:5a:93:f7:3d:d0:2e:8f:
84:31:37:e7:54:7a:db:ff:ba:e3:7b:cd:d5:37:47:16:dc:be:
6e:eb:7f:c9:15:ae:73:dc:31:33:9c:9f:19:53:15:68:8e:1f:
5a:64:c2:eb:df:ec:c4:ca:02:3c:b4:14:94:22:2d:6c:67:7b:
1f:54:bc:ad:0e:8e:c9:16:0d:57:47:d1:e0:6d:9b:4a:d5:95:
57:88:58:ff:e1:2e:7b:c3:78:52:97:37:bf:5d:c0:5f:42:07:
af:d7:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:58:11 2025 by rpki-client