Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1712F012563B11F0821DBBB3DAE4EC9C.roa
File: 1712F012563B11F0821DBBB3DAE4EC9C.roa (raw, json)
Hash identifier: 14TGaxUiviQtmqrK77S0pyPMP7tc/7wRmlD1TwWnc+0=
Subject key identifier: 31:2D:60:9D:33:66:BF:64:B4:2C:0C:43:CF:5B:D0:3C:7D:92:F6:0F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B4D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1712F012563B11F0821DBBB3DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:20:24 +0000
ROA not before: Tue 01 Jul 2025 05:20:19 +0000
ROA not after: Thu 01 Jul 2027 05:20:19 +0000
asID: 834
IP address blocks: 154.16.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 01:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6989 (0x1b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 1 05:20:19 2025 GMT
Not After : Jul 1 05:20:19 2027 GMT
Subject: CN=68637018-cdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:37:c3:13:47:d3:e7:d1:37:a7:7c:f7:88:
b2:92:9d:2d:75:6d:f1:3f:63:50:3b:30:41:a7:6a:
fa:53:c4:89:73:9e:4f:2d:14:e3:33:f1:79:4d:de:
56:54:55:94:81:18:e1:b4:61:27:7a:da:99:1f:5c:
97:4b:ac:f1:4b:64:d5:5c:c6:b4:f4:e6:d0:6a:c0:
e9:07:54:26:bd:8d:6e:c2:8b:06:27:c1:0a:b8:4b:
20:86:e2:ca:71:9b:b1:57:c2:17:40:51:13:62:34:
f6:94:b4:99:98:25:f7:60:4b:93:66:2e:58:72:ba:
0e:47:49:03:62:cf:c2:4e:1f:6e:58:11:31:37:91:
12:27:4e:75:df:1c:26:28:4b:02:b8:56:31:a8:27:
7e:cd:57:8e:0a:91:0a:cd:5f:ac:87:73:a3:1c:ca:
89:09:86:69:ea:f4:46:a0:2b:0f:71:73:14:e4:80:
53:82:c1:60:6c:44:1e:a1:f9:6d:18:15:87:46:a9:
94:9c:d4:e8:f5:f4:ea:95:f1:ab:d7:4e:4d:79:0a:
36:47:79:12:45:82:cd:d8:f7:ea:ca:16:7c:44:9f:
3a:36:54:97:5b:e5:d7:cf:24:88:d3:a9:84:e4:1f:
55:58:e8:c7:d8:73:60:07:3c:26:ae:c9:70:90:87:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:60:9D:33:66:BF:64:B4:2C:0C:43:CF:5B:D0:3C:7D:92:F6:0F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1712F012563B11F0821DBBB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:f3:bf:56:c6:cd:87:bd:c9:5b:15:46:27:0d:41:01:39:8e:
e3:68:5f:5b:d7:a3:0b:d6:75:00:bb:31:c8:04:84:91:9d:e3:
61:c2:4a:e5:0d:e5:89:92:93:17:b2:9b:a6:62:e3:e6:98:61:
00:66:7a:fe:5e:e2:47:38:04:1c:48:cb:1a:74:f4:92:25:cd:
4c:ff:de:b6:99:d9:f5:bc:ea:9d:29:a9:53:5a:7f:8a:77:e9:
a3:bd:3a:0f:67:d5:d2:64:49:d7:52:88:dd:31:4e:34:4f:37:
53:dc:10:05:bf:15:f7:4d:69:fb:5c:6d:5a:ad:64:eb:83:79:
d6:19:c4:47:c2:ef:9f:fe:11:79:a9:08:c9:02:ea:7d:2f:3a:
a5:52:22:8f:f7:58:8c:e2:b1:5e:ee:2e:ed:c5:f4:57:bc:b6:
ff:2f:2b:7a:2a:35:b9:c9:18:b7:24:68:da:d6:fd:4d:d2:d6:
f0:a6:3d:e9:c7:8c:73:48:23:38:ee:7c:4c:37:92:21:8b:19:
c9:fa:39:9b:2d:7e:cb:be:7e:27:f9:91:9a:0a:b2:d0:c9:06:
c9:8a:24:3e:cd:e4:49:35:27:5e:fb:36:73:e8:57:66:ee:20:
3a:02:8e:c4:88:61:b5:df:ff:1e:f6:1b:a3:f8:87:2d:62:d5:
b6:ed:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:12:15 2025 by rpki-client