Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FF42F72460111F09D4ED384DAE4EC9C.roa
File: 8FF42F72460111F09D4ED384DAE4EC9C.roa (raw, json)
Hash identifier: oV33JFw/3CSoG/LRDV7esdB0GFLeR+qO2NA5hlb5hR8=
Subject key identifier: BA:2E:8C:8E:2D:41:9A:BC:6E:30:68:16:FD:E6:A2:48:62:05:01:1E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B27
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FF42F72460111F09D4ED384DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 13:48:18 +0000
ROA not before: Tue 10 Jun 2025 13:48:13 +0000
ROA not after: Thu 10 Jun 2027 13:48:13 +0000
asID: 61112
IP address blocks: 154.16.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6951 (0x1b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 13:48:13 2025 GMT
Not After : Jun 10 13:48:13 2027 GMT
Subject: CN=684837a1-b6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:36:2b:84:55:2f:6f:53:07:e4:3f:db:0e:
c0:f7:98:7f:7a:13:45:b8:8b:1b:2e:ed:bd:bc:09:
39:1f:ad:3f:ce:3f:ba:dc:c0:04:e0:64:14:d7:c9:
60:36:ce:83:d8:0b:01:ba:8c:ab:32:aa:61:17:bc:
25:13:80:eb:64:d1:c0:34:54:33:0b:7f:0f:1b:54:
44:84:b1:70:47:ae:c5:27:96:cb:4f:78:e6:b4:74:
10:4b:c7:60:90:5f:52:4a:04:90:a9:ae:4c:ad:74:
58:11:f5:f8:55:7c:cd:68:55:7c:02:4f:3d:6a:60:
06:3e:60:32:14:46:1d:32:dc:f4:c0:d1:05:0b:95:
c5:76:52:ca:31:1c:6f:a0:14:58:f8:f5:9c:f6:50:
0d:2f:c0:7e:20:25:34:ad:8f:27:36:57:a8:37:fd:
f2:24:49:f0:ac:ae:5c:f7:85:f3:3b:91:87:71:cf:
a0:b2:40:a7:27:f8:23:82:dc:76:ac:27:52:6a:f6:
40:ac:1d:5d:60:15:cc:57:c2:03:73:d3:09:22:b9:
75:aa:d8:6e:21:68:21:e8:80:72:3f:97:ca:e8:2a:
ba:08:ca:e9:e7:0d:1a:b8:21:a6:6e:c3:3c:c3:31:
e8:4f:c1:27:1b:80:b7:bb:00:e4:84:6b:4d:f7:b4:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:8C:8E:2D:41:9A:BC:6E:30:68:16:FD:E6:A2:48:62:05:01:1E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FF42F72460111F09D4ED384DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.248.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a5:e7:f6:58:45:79:66:fa:e2:df:07:f2:34:08:33:cd:2e:
8d:d7:6e:69:b9:0e:8e:c5:04:86:6d:5f:80:16:08:10:23:a0:
44:4d:c1:dc:6a:48:58:d8:99:d1:f1:32:4a:18:bf:6a:32:b4:
b3:49:86:b7:38:2f:13:91:06:d3:9c:c8:07:f5:2e:8a:e7:5f:
37:c1:6a:11:d8:70:03:36:33:1d:51:1f:53:ea:84:c6:4f:7e:
ff:43:d6:4d:21:4a:f0:e2:56:ed:96:0d:cb:c1:e8:65:32:0d:
a8:5c:96:30:b6:f7:9e:5b:c2:69:3c:6b:eb:e6:fa:8d:c0:82:
fa:35:d8:5c:1d:96:16:f7:f4:29:2e:49:80:9a:32:fd:99:33:
d0:2f:ce:9f:dd:e3:e4:80:e5:36:64:f8:5f:b8:cc:f4:c4:b5:
50:e0:5c:db:4f:a9:6e:b3:70:d9:e7:25:41:93:a2:ff:2e:f9:
87:52:37:6e:b8:e0:e0:d5:c8:d0:40:7a:f2:5d:ec:e9:87:d0:
0a:68:cb:d3:df:21:af:a9:f4:57:34:7a:bb:7d:b6:21:36:96:
7c:92:46:6e:1f:c7:19:84:55:58:4c:e8:a9:ab:0d:20:96:9b:
80:21:4e:2a:59:a8:ae:9f:8c:30:64:6d:46:35:29:d4:b2:8c:
56:f1:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:16:39 2025 by rpki-client