Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/46F6DB44252711F0A4ED4C83DAE4EC9C.roa
File: 46F6DB44252711F0A4ED4C83DAE4EC9C.roa (raw, json)
Hash identifier: 752NJ6okyJbd+qdgXgPvEF03zMm6e/8aNZcwA2PQ4Wk=
Subject key identifier: 6F:65:11:98:9A:AE:CC:03:7C:11:5C:90:61:B7:76:37:41:64:FF:B1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1AA1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/46F6DB44252711F0A4ED4C83DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 18:25:08 +0000
ROA not before: Tue 29 Apr 2025 18:25:02 +0000
ROA not after: Thu 29 Apr 2027 18:25:02 +0000
asID: 212238
IP address blocks: 154.16.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 04 May 2025 01:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6817 (0x1aa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 29 18:25:02 2025 GMT
Not After : Apr 29 18:25:02 2027 GMT
Subject: CN=68111984-38c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:6b:93:26:3d:42:1e:ce:af:7f:64:2d:3e:
f9:d1:49:3f:6d:04:92:3c:84:50:81:4f:89:b8:30:
0a:01:b1:cd:78:c1:18:97:4f:eb:d1:ce:0c:bb:d3:
a0:c6:af:da:bc:b7:34:a8:c7:13:fb:60:ee:9d:1d:
bf:cc:1e:cd:7f:bd:3c:f6:6e:f4:1a:6b:f5:ea:30:
40:d7:b5:85:b8:6e:1a:09:81:a3:8b:d2:29:80:f7:
df:ee:50:3d:57:82:1e:3b:a3:4f:5e:61:3a:52:c6:
6e:89:86:5b:43:d4:d0:e8:dd:db:96:e6:0a:09:7b:
24:11:c8:cd:26:bd:31:4c:3f:bb:b5:e6:b9:1e:42:
d1:92:cd:3c:3f:e1:7d:dd:78:7b:55:ca:7a:b3:0e:
8a:71:82:54:dd:e5:c0:92:a1:d9:fe:e0:00:5a:fa:
61:06:3c:be:63:17:24:be:32:6e:72:2a:66:76:69:
e6:2b:5b:23:b5:53:f2:4c:34:4d:d5:9d:df:4d:a1:
fc:07:d2:c9:5e:51:9e:7f:8d:de:e0:8a:45:74:fb:
b4:15:81:9a:37:a0:e3:ab:1a:47:9b:b2:ea:aa:31:
9f:af:d1:24:84:f0:35:06:ea:59:df:f5:4d:47:01:
d0:1b:80:28:d4:8a:65:13:96:4e:70:66:f1:57:31:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:11:98:9A:AE:CC:03:7C:11:5C:90:61:B7:76:37:41:64:FF:B1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/46F6DB44252711F0A4ED4C83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.228.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d4:ff:41:aa:86:36:e3:82:71:ae:2d:1a:ea:a0:3f:f1:4b:
6a:cd:db:8c:56:c6:ed:c0:66:eb:15:8f:19:ba:c9:e5:82:ca:
28:33:13:ce:f8:68:2f:80:4d:2b:2d:7d:37:cd:3c:61:08:8a:
67:c4:99:66:87:90:e0:c5:cf:f7:e7:7d:8c:56:6b:cc:8d:7a:
c6:51:4f:09:6f:80:ce:5f:18:1a:7b:12:44:81:4d:44:76:f3:
3d:1a:1a:37:48:67:d4:aa:6c:30:e1:ac:2e:f0:14:f8:2f:ea:
f5:38:0b:04:03:7e:94:69:45:c4:b0:bf:67:61:e7:3e:22:3d:
49:c0:1b:9a:aa:98:69:ef:6f:4b:c3:f7:9d:bd:62:ec:b6:a7:
60:97:7b:52:a4:28:de:ee:bb:f1:53:05:fa:10:90:89:c5:bb:
78:57:71:da:c4:85:58:dd:f8:c7:09:84:65:87:dd:f5:17:a4:
0b:56:35:3a:73:18:6a:50:f3:21:b6:9d:31:79:bb:2a:b5:17:
98:91:57:0c:5a:dd:51:0d:56:c2:d2:b3:05:64:ef:84:39:12:
94:90:fb:a2:8e:f7:a5:30:d2:47:d3:73:2c:1b:d5:fe:0a:95:
56:79:25:92:fe:56:ce:28:5c:1a:a2:a5:5f:f6:7a:b0:a0:f7:
e8:be:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:59:00 2025 by rpki-client