Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05A860362FEF11F098F453A9DAE4EC9C.roa
File: 05A860362FEF11F098F453A9DAE4EC9C.roa (raw, json)
Hash identifier: BRb/F2Xq34E0ZkXsK0DH94ImdrAio6Ik0mi+aX3JoFM=
Subject key identifier: 19:5E:B7:A4:65:0C:51:FF:10:CC:1A:5F:E5:D4:46:E2:BD:37:66:51
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1AB6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05A860362FEF11F098F453A9DAE4EC9C.roa
Signing time: Tue 13 May 2025 11:40:09 +0000
ROA not before: Tue 13 May 2025 11:40:04 +0000
ROA not after: Thu 13 May 2027 11:40:04 +0000
asID: 46337
IP address blocks: 154.16.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6838 (0x1ab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 13 11:40:04 2025 GMT
Not After : May 13 11:40:04 2027 GMT
Subject: CN=68232f99-f019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:12:68:51:0f:f7:53:81:ae:7c:1c:f1:5f:
ff:65:07:0f:fd:1e:8b:30:d2:8b:6d:8a:c3:be:60:
67:ee:14:bd:b5:27:16:42:72:17:29:8c:cb:f4:0b:
db:49:73:b5:19:09:9f:12:48:fb:f1:a9:db:62:80:
73:74:cd:f4:7b:a0:8b:ee:b3:03:d7:9b:2b:92:f3:
68:b7:c6:a1:0a:f0:26:e3:b9:cb:76:ff:69:17:db:
18:68:55:ee:59:fe:8f:5e:6c:b7:fb:2b:6e:ff:5e:
23:a3:f2:d7:6f:70:4a:2f:42:31:10:25:f4:c8:dd:
34:b7:23:41:1d:f4:fc:cc:2e:da:92:c2:fe:ff:38:
02:6e:6b:31:83:cd:bd:14:d2:7e:5e:d5:67:8f:4f:
f3:f0:b0:3d:92:ac:be:1a:59:38:82:2f:0f:ec:79:
95:c9:2b:9a:0f:e1:21:46:6b:f5:a7:5a:d5:c9:6e:
b8:ee:65:71:60:14:88:f1:bb:49:9f:c1:42:d3:ec:
c5:53:9f:25:20:e2:3c:c2:64:32:1c:cb:d4:08:35:
8a:b7:ee:4f:42:e9:3d:7c:78:25:92:ea:74:93:bd:
8f:4f:77:72:d6:97:66:ae:52:97:af:47:1b:1d:65:
91:e0:f6:86:a4:5a:e5:8a:9f:7d:51:0a:62:11:02:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5E:B7:A4:65:0C:51:FF:10:CC:1A:5F:E5:D4:46:E2:BD:37:66:51
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05A860362FEF11F098F453A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.112.0/24
Signature Algorithm: sha256WithRSAEncryption
84:07:b0:ea:be:3a:dc:3e:0a:c4:6a:57:73:07:36:63:92:d8:
37:64:31:4a:49:e5:80:e4:9f:ba:71:53:0f:e3:85:cd:03:02:
eb:0f:dc:55:1d:d2:4f:07:ee:31:b6:8a:96:df:3c:e9:00:6a:
4e:fc:8d:3f:89:b9:60:2a:e2:a8:1b:ae:06:9f:33:58:5d:e4:
89:25:b5:2d:ec:0d:62:cd:e7:81:b2:39:62:c8:b0:c6:24:56:
72:8a:ce:6c:7e:7e:95:df:e6:ba:13:08:ab:15:61:f4:27:22:
36:5b:c2:6f:4c:8a:6e:7a:23:6d:90:13:48:0c:de:1e:c4:9a:
bb:ae:e0:78:c6:95:2d:b4:7b:a7:04:f8:c1:df:72:fd:63:44:
91:dc:b4:60:96:63:1a:fe:57:d7:cb:6c:09:15:6b:4b:b8:50:
c6:21:6d:8f:d4:59:f4:2d:aa:1a:f8:c5:45:62:bf:86:c8:58:
94:70:60:d2:6b:2a:62:c5:6c:2c:9c:94:67:ad:a3:90:fa:8d:
37:bf:9b:57:bc:69:a3:e4:30:e7:b4:d1:c3:e8:85:54:aa:de:
ab:44:46:65:39:62:ee:9d:a4:34:c3:d5:52:65:10:ac:95:74:
d1:66:3a:eb:a0:84:27:55:41:fb:61:0a:e2:31:a7:cf:3f:5d:
b0:00:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:42:11 2025 by rpki-client