Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FC33C8008A311F0BE3DFF7C762E951A.roa
File: 0FC33C8008A311F0BE3DFF7C762E951A.roa (raw, json)
Hash identifier: EfLUchcJdYaBooHhvmmKUNQAhhs8SSZ4OQValDpvWg0=
Subject key identifier: B2:CA:8B:5E:78:E4:1E:71:AB:CA:C9:E2:F6:12:57:13:7E:0C:74:7E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07EA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FC33C8008A311F0BE3DFF7C762E951A.roa
Signing time: Mon 24 Mar 2025 11:28:09 +0000
ROA not before: Mon 24 Mar 2025 11:28:04 +0000
ROA not after: Tue 24 Mar 2026 11:28:04 +0000
asID: 2914
IP address blocks: 196.251.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:28:04 2025 GMT
Not After : Mar 24 11:28:04 2026 GMT
Subject: CN=67e141c9-8187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:c1:33:45:2e:9d:f6:74:27:7f:a3:13:6a:
0d:a9:14:7e:75:e9:0d:bf:9d:e7:b5:86:bf:f0:d5:
50:29:3e:58:2d:a6:80:f8:67:86:87:aa:aa:f0:e3:
c1:f8:0b:5d:f0:d7:94:e8:b5:bc:7f:1f:34:ee:4f:
9d:8f:71:f3:c3:63:7b:c6:18:b0:33:a7:14:03:4b:
ab:54:1e:22:d9:34:7a:5d:b2:77:c8:d7:e7:6f:cf:
fc:c2:33:04:a1:19:0a:fc:20:20:61:79:92:97:d0:
46:60:41:4a:f6:01:6c:ca:38:9e:9b:76:f3:6a:28:
64:63:ba:d0:83:13:2c:bb:cc:90:f4:42:75:bc:91:
cb:22:dd:2e:8d:9d:9d:31:d6:39:d1:14:e3:b4:68:
cc:ef:eb:e9:ff:1e:bd:31:b0:07:f5:59:90:8c:cb:
68:ad:a8:58:4e:b0:82:31:71:ef:6a:d9:3d:68:6e:
e3:8c:c3:d0:71:66:4e:6f:d1:2e:89:f0:da:b3:a2:
da:be:82:e9:7a:df:3d:eb:e9:de:be:bc:39:68:95:
05:fd:70:06:0f:32:fa:f7:15:03:81:a8:93:72:3e:
e2:c9:f9:01:e8:16:84:5b:cf:1c:06:6a:fc:7e:7d:
b2:eb:fb:2a:a0:9a:af:ae:ce:0e:89:0b:f3:77:fd:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CA:8B:5E:78:E4:1E:71:AB:CA:C9:E2:F6:12:57:13:7E:0C:74:7E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FC33C8008A311F0BE3DFF7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
55:eb:63:fe:eb:95:4a:97:9e:f0:d2:64:d5:c4:73:36:ab:b0:
1b:08:85:47:06:68:c8:45:58:cf:19:b0:9f:05:af:f1:e8:bf:
f5:c4:84:06:92:19:f9:a9:2b:2b:59:8a:43:ef:c6:5a:28:96:
b3:d6:c2:aa:c0:13:8a:3b:40:38:3d:ef:78:1d:2d:db:ef:ee:
38:fd:46:10:47:70:f0:3f:3f:64:a2:a8:fd:ec:72:77:ca:11:
f6:2c:a1:9c:ed:a0:fc:97:48:70:74:b7:91:48:1b:e7:f3:8f:
7c:55:41:ca:10:a7:3e:e4:c0:c5:8d:b9:ba:ca:e5:52:31:31:
ee:c5:7e:8b:a9:50:a3:72:b6:bc:a7:0d:42:3c:3f:cb:87:2e:
21:20:01:1b:de:15:ab:35:f7:f4:64:59:5a:62:e3:87:f3:b0:
3e:fb:5f:6c:07:08:4d:a4:ac:94:c2:e0:93:2c:bf:c6:49:06:
d9:b7:2b:34:83:24:8c:2e:33:62:02:64:0f:4b:9e:f9:fe:2f:
8d:cb:c1:a7:15:6e:dc:1f:51:ec:52:01:62:92:d6:7e:a9:73:
31:32:14:37:15:0d:4e:a2:9e:53:f4:56:14:82:f2:47:ad:b8:
a2:14:5e:ce:7f:51:d6:cd:ee:a0:ae:ee:23:73:75:91:45:16:
38:7b:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:05:36 2025 by rpki-client