Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2CB5C060460111F0B3CB9182DAE4EC9C.roa
File: 2CB5C060460111F0B3CB9182DAE4EC9C.roa (raw, json)
Hash identifier: DctQ/mWsGuWkiyxxNXI3LtEFwrsMLule1Homv3LtI/o=
Subject key identifier: EB:BA:72:86:C4:23:64:BC:75:E4:FE:19:AC:93:8C:20:DB:01:94:5E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B24
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2CB5C060460111F0B3CB9182DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 13:45:31 +0000
ROA not before: Tue 10 Jun 2025 13:45:26 +0000
ROA not after: Thu 10 Jun 2027 13:45:26 +0000
asID: 211440
IP address blocks: 154.16.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6948 (0x1b24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 13:45:26 2025 GMT
Not After : Jun 10 13:45:26 2027 GMT
Subject: CN=684836fb-b2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:08:e6:4f:b8:e5:6e:90:4d:dd:9d:b1:13:
28:4b:9e:ff:8e:4e:61:55:ce:8e:91:62:5f:e8:fd:
f0:78:7b:92:5b:fc:af:52:fb:3b:b0:3d:07:ea:38:
71:21:5b:ec:66:3b:d6:57:bc:a1:ef:3e:dc:8d:c4:
63:27:39:6a:dd:ac:36:63:38:5b:10:04:c6:d4:34:
e6:41:3c:e6:9c:ee:14:cc:29:46:28:7a:24:01:da:
c7:72:9e:88:a8:f1:c9:02:c1:8a:83:56:72:2f:cb:
d2:a8:60:97:d6:37:f3:60:95:43:e5:06:34:41:44:
d8:a9:6c:37:2c:94:89:d0:29:f7:34:f8:21:70:a5:
9d:be:d8:a1:98:d6:ef:84:1a:ff:d3:65:5c:f2:27:
4a:bc:8e:be:21:52:73:7e:aa:a8:45:77:e6:e6:d6:
c4:b5:fc:17:1a:c6:32:b5:c9:34:3f:c4:66:8e:14:
94:65:d8:05:05:01:9f:11:17:93:3c:d1:71:8b:18:
d8:f7:75:c6:21:47:ce:c7:40:c5:62:4d:96:5e:55:
b5:54:df:d0:9a:9c:7c:42:46:b9:23:04:6c:5e:fc:
28:5b:72:a7:35:a5:ec:c3:0e:39:c2:6f:89:7d:dc:
be:54:95:12:47:d2:f5:d8:58:16:3a:ad:21:d2:f0:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:72:86:C4:23:64:BC:75:E4:FE:19:AC:93:8C:20:DB:01:94:5E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2CB5C060460111F0B3CB9182DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.64.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b1:67:39:68:aa:87:34:cf:5e:50:36:b0:f5:76:6a:c5:22:
39:bb:cc:1d:d0:53:86:e0:f1:9c:86:22:0f:c1:2d:98:6a:a7:
aa:bc:df:ba:23:f2:ea:99:49:7a:ac:44:9c:0f:46:14:95:0b:
d7:7b:fc:c1:81:17:ab:04:b1:b7:c0:8a:f2:33:fd:21:8d:c4:
08:fb:bb:0c:eb:c1:3f:2c:01:51:2f:1c:c8:d7:d0:c7:56:c9:
fb:62:e6:61:3d:2f:3e:f6:c4:b4:00:a6:7f:68:78:26:99:fc:
08:21:37:cc:e5:84:0d:42:ec:70:8c:c2:b2:af:09:c4:65:eb:
20:2e:2b:08:6e:45:eb:dd:83:8c:a2:1b:f7:78:6d:7f:4d:8c:
f0:33:a1:66:93:9f:b6:f0:71:7b:fc:0c:0b:4a:3e:85:fa:05:
f6:59:55:08:75:bc:c0:6f:8f:07:6e:2d:e3:e5:19:7f:cd:fc:
ce:d5:f8:b2:39:a8:b5:1f:44:21:f7:b1:07:e2:95:49:91:9c:
9a:f6:60:cd:09:77:57:57:80:98:1a:b3:35:51:49:d8:9b:bc:
b2:e7:b2:5f:83:f9:f0:97:08:a4:e2:02:e2:b0:31:16:47:c1:
cf:19:84:a0:cf:b8:90:14:62:67:3a:2f:1e:ab:17:af:fb:eb:
ec:0e:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 01:20:13 2025 by rpki-client