Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B61C94C0EB911F0854BE2B4762E951A.roa
File: 0B61C94C0EB911F0854BE2B4762E951A.roa (raw, json)
Hash identifier: TjFynEvG6hZ6gr/cyF5dlB9FWYHxWiY3oqlnWP6XHIM=
Subject key identifier: DA:DF:C9:9E:4B:D3:D9:BF:EC:9E:ED:9F:94:E4:A3:F7:33:53:CC:78
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A6F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B61C94C0EB911F0854BE2B4762E951A.roa
Signing time: Tue 01 Apr 2025 05:20:37 +0000
ROA not before: Tue 01 Apr 2025 05:20:32 +0000
ROA not after: Thu 01 Apr 2027 05:20:32 +0000
asID: 834
IP address blocks: 154.16.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6767 (0x1a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 1 05:20:32 2025 GMT
Not After : Apr 1 05:20:32 2027 GMT
Subject: CN=67eb77a5-3018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:37:e2:6d:b7:df:3d:bb:27:06:bd:9e:0a:
0b:75:88:e2:b8:4d:b2:e0:eb:98:ac:44:1c:24:70:
d4:87:4e:2f:d2:7d:ee:f4:3d:ba:34:a3:4b:58:b6:
a3:67:6f:2e:86:c1:b6:be:76:92:40:02:35:d8:04:
48:2c:e6:4a:d9:1c:6e:de:01:f4:a5:6b:02:f9:a6:
b3:0b:40:2d:9f:75:d1:40:da:16:3c:c7:1f:ed:14:
ae:de:8c:6f:31:f0:6e:a3:13:dc:24:47:37:a6:78:
c2:dd:a8:c0:8c:ce:84:64:e7:01:9f:6d:ea:e6:0e:
4c:2e:89:a0:52:f4:ff:d2:71:9b:10:49:ce:5c:bd:
9c:54:06:74:f2:f0:4c:f8:0a:04:85:7d:c7:36:d9:
3b:5c:64:13:e5:fd:f8:c1:a4:c5:f9:60:ac:30:a1:
10:7e:7e:c7:2f:7f:83:b6:ff:b9:56:0c:53:6a:66:
90:8b:7a:bf:09:68:99:84:ae:cc:25:48:f9:da:8f:
2f:17:d4:1f:fb:3c:6f:77:8f:4f:2b:e3:09:63:93:
82:15:7c:01:31:96:96:00:f6:b3:6d:00:bc:d1:0d:
d6:a9:38:1b:e4:0b:b8:d2:54:41:ba:3e:2b:64:b8:
66:4d:e4:44:cc:81:ea:9f:ab:b4:3f:07:60:e7:9f:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DF:C9:9E:4B:D3:D9:BF:EC:9E:ED:9F:94:E4:A3:F7:33:53:CC:78
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B61C94C0EB911F0854BE2B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:71:ca:95:81:70:5c:f4:19:3d:b1:79:a5:be:bf:bd:4b:e5:
da:b7:bd:87:4d:00:3f:94:76:b3:3a:21:85:fa:a1:f2:9a:72:
2a:70:e6:b5:b2:38:ea:42:cc:7a:61:08:fe:44:1c:92:18:c1:
be:d0:86:ef:9f:34:d8:2a:46:45:97:a8:10:8c:88:d6:4b:64:
23:af:b9:b9:b9:54:83:cb:0e:b0:79:db:ba:64:84:d4:c4:6b:
ba:45:2a:2f:c7:0a:63:a9:46:0c:8e:c5:76:6e:79:2b:17:87:
d8:6b:68:38:7d:5b:86:00:30:31:4a:dd:b2:78:5e:f4:a5:7a:
cc:f0:3d:c4:8e:9b:78:f8:3c:2b:3f:bd:4d:95:31:39:a8:09:
f7:61:92:87:c1:19:01:3d:1f:aa:03:94:30:6f:30:09:82:6d:
91:12:ae:d3:d3:62:86:62:67:92:3d:13:6d:65:f5:4f:a8:0e:
0a:fd:82:25:4d:25:30:0e:a1:b7:d8:f7:92:51:ab:b5:5a:77:
2f:96:a9:0a:c0:d4:35:4e:41:4f:24:ba:14:32:e4:2f:77:f0:
4b:b8:77:7b:35:cc:db:50:d8:f7:2f:f1:18:e3:32:31:45:4b:
08:4e:39:1b:cc:1e:a7:3c:d7:22:e5:ad:77:f9:2e:44:e1:32:
cf:f6:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:33:59 2025 by rpki-client on console.sobornost.net