Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C94D0EE4563A11F0A2198EAFDAE4EC9C.roa
File: C94D0EE4563A11F0A2198EAFDAE4EC9C.roa (raw, json)
Hash identifier: 2pWx8ltnM7Y4lPPlSBe/b9SVCqljcb1KxI7bXrL6gPI=
Subject key identifier: F2:7C:6B:48:85:42:18:D0:E9:D2:39:2A:29:7E:92:8E:32:3C:F5:A4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B4A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C94D0EE4563A11F0A2198EAFDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:18:14 +0000
ROA not before: Tue 01 Jul 2025 05:18:09 +0000
ROA not after: Thu 01 Jul 2027 05:18:09 +0000
asID: 823
IP address blocks: 154.16.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 01:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6986 (0x1b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 1 05:18:09 2025 GMT
Not After : Jul 1 05:18:09 2027 GMT
Subject: CN=68636f96-069a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:cc:a7:fb:29:d3:d7:ae:ce:6c:15:b4:6f:
ab:e3:cc:a0:44:aa:f4:d8:87:fa:06:19:ee:ad:73:
c8:3f:8b:8d:cc:36:ea:c1:67:bc:33:f2:be:29:64:
8a:e9:6c:8d:66:08:a9:f8:6c:58:f5:c5:eb:1b:34:
66:21:37:70:0b:00:a6:86:81:38:fd:ef:27:52:31:
14:01:84:46:02:8e:5e:dc:da:e1:1d:61:42:c6:37:
dc:98:75:f4:27:8f:fa:84:59:ac:b4:8c:8c:d9:41:
2d:73:da:6f:05:50:f7:41:28:4a:88:3d:82:76:23:
05:f3:53:05:4e:2a:a3:05:06:e3:8b:74:75:bb:43:
2a:d8:fa:92:49:25:2a:2a:ef:ae:e9:ed:60:3b:fe:
d1:1e:36:b6:2d:5c:e7:88:2d:38:79:a9:8d:40:47:
77:a6:b6:35:0d:3b:38:b3:08:55:74:4f:13:9b:93:
6f:84:ee:7b:6e:30:6c:a1:7b:e8:de:5b:e0:c0:f6:
cf:55:69:ba:b5:96:d4:c4:53:32:5d:5d:e5:a8:bd:
54:71:24:94:70:e2:24:8c:6d:ff:7e:c6:4f:74:0e:
97:51:bd:a2:4f:9b:b2:c4:95:11:69:a3:68:c3:89:
b4:13:90:de:c4:81:98:7e:b0:82:12:4e:79:09:61:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7C:6B:48:85:42:18:D0:E9:D2:39:2A:29:7E:92:8E:32:3C:F5:A4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C94D0EE4563A11F0A2198EAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.249.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cb:43:df:78:ea:c8:8e:66:bc:60:a7:75:5a:5b:47:45:78:
b7:09:f9:60:33:e3:8f:42:f1:88:95:64:d9:da:a7:ad:69:51:
17:a9:74:8a:a1:6b:4b:19:47:26:62:c3:51:cf:65:54:1b:ef:
15:36:ac:21:65:07:c2:9e:44:13:2c:8d:37:5d:ed:8d:e7:99:
74:77:70:d4:fb:66:d8:af:57:f8:08:16:95:4a:f6:39:ea:fe:
23:6d:53:ef:86:bd:5f:95:1b:a6:74:b9:28:2c:63:4b:b9:47:
93:b9:a1:f6:fd:02:80:83:8c:01:a6:fe:38:9c:d9:88:2d:92:
7a:c9:8a:e9:ca:16:d0:39:fc:86:47:a1:e6:ca:8d:0f:3c:3e:
18:0b:33:25:38:71:32:76:42:5a:db:ce:94:cd:ac:59:e9:3a:
81:06:4a:55:23:7d:24:77:c4:8c:8d:94:2a:36:8b:02:1f:4d:
cd:f9:bc:3a:6c:cc:89:33:39:05:64:29:46:d6:5a:b9:e3:ee:
f3:df:77:77:c8:10:25:99:98:cc:ea:08:ea:9c:b3:b5:01:b9:
a3:da:6b:58:87:da:5d:b9:a3:ad:dc:21:31:07:62:36:d7:0d:
23:42:42:d7:07:af:b4:5a:a0:2b:de:3c:9e:36:33:e8:bb:36:
53:c2:18:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:50:53 2025 by rpki-client