Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/244435C8661911F089459FE0DAE4EC9C.roa
File: 244435C8661911F089459FE0DAE4EC9C.roa (raw, json)
Hash identifier: tCdyAxmWLQ0RBnKFYK2hxxaWHt47lS7r9+wIlNSf4xs=
Subject key identifier: E9:B0:2B:F1:E9:F9:46:1D:80:65:93:99:1E:29:F4:7A:28:14:25:FC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C82
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/244435C8661911F089459FE0DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 09:57:42 +0000
ROA not before: Mon 21 Jul 2025 09:57:37 +0000
ROA not after: Sat 04 Jul 2026 09:57:37 +0000
asID: 398704
IP address blocks: 196.251.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Jul 2025 00:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 21 09:57:37 2025 GMT
Not After : Jul 4 09:57:37 2026 GMT
Subject: CN=687e0f16-d780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:1b:6c:3b:a6:59:03:bf:f9:d3:79:21:72:
aa:57:36:3f:6d:22:2b:70:31:2b:ca:5c:f7:74:1e:
8e:15:14:e4:c8:ca:b1:3b:0c:f5:3d:e3:5c:e7:a4:
81:5a:ee:5e:06:f4:ad:54:e9:55:b8:43:5d:06:5c:
7d:d2:d7:bc:f2:de:64:c1:c9:ba:c1:3e:db:d0:6d:
29:1a:dc:45:16:97:f2:03:5c:d9:85:2e:85:10:6d:
7d:a1:71:f7:04:74:7e:85:3e:d0:f9:3c:a7:69:7b:
20:af:e8:8d:22:3f:79:18:ed:0c:eb:c1:9c:4c:3e:
80:de:30:04:70:db:64:7e:20:0b:26:4a:e9:3a:6a:
74:98:40:20:5b:22:4b:2b:3a:83:21:0a:bc:97:c8:
de:13:23:e8:5b:9b:81:51:4e:66:d8:22:0a:e4:96:
36:dc:a7:b4:3d:7b:89:2a:a2:d0:eb:be:c4:c4:aa:
d5:d0:fc:28:02:18:8c:57:cd:ba:27:de:05:f1:f3:
55:f1:b9:06:34:6d:6c:43:2f:ad:7f:d4:70:af:6d:
2a:57:eb:df:ec:df:1b:6d:1d:3b:b7:c3:0c:6a:9e:
5b:c3:72:ec:af:eb:1f:d8:a3:a1:d5:4d:00:b9:f4:
f5:09:bd:b8:a8:da:50:20:06:de:ab:31:02:a5:36:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:2B:F1:E9:F9:46:1D:80:65:93:99:1E:29:F4:7A:28:14:25:FC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/244435C8661911F089459FE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.109.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:28:36:85:13:05:35:66:5a:b2:bb:05:3f:f2:cd:5c:41:d1:
50:20:4d:94:c4:9e:94:a1:43:47:f1:6f:ff:fe:f7:d2:bc:d3:
d4:db:22:f7:34:23:5a:ee:42:80:89:bd:b1:01:55:5d:fe:4b:
93:84:10:45:cb:42:bd:52:28:52:84:3d:b0:81:ab:fd:06:8a:
e1:13:9c:2d:80:a8:ed:ce:b2:48:12:e9:01:78:2e:f0:86:2b:
e2:15:2a:59:0e:f6:a5:16:30:64:a2:89:fc:73:c4:16:99:41:
12:10:d9:9f:3b:47:78:fb:46:a7:86:e8:61:32:7c:49:b9:82:
55:ee:a5:0d:7e:a8:24:3f:71:25:3b:5e:f9:60:90:11:cd:1f:
b0:55:bb:a9:79:92:76:70:f2:9a:6f:fd:48:af:a8:a1:a0:e6:
2c:cb:84:04:1d:dc:ef:7e:32:03:79:9e:77:62:9d:cc:14:17:
c5:8c:2d:46:d7:d3:f9:0c:9b:e1:81:e1:0a:44:fd:e5:ae:67:
10:93:2e:17:ab:4c:8c:e3:0b:2e:93:d8:1d:e0:44:1b:cf:49:
9d:0c:8a:41:75:78:0e:38:a4:fc:c7:33:b3:87:25:01:9f:e4:
ad:50:a9:68:40:44:67:e2:b6:66:68:22:4b:ff:2b:f4:67:d0:
67:1d:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:09 2025 by rpki-client