Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17CEAE8802EE11F08A6E2D4F762E951A.roa
File: 17CEAE8802EE11F08A6E2D4F762E951A.roa (raw, json)
Hash identifier: 22987c3YNdK1V+MHoKukNX2Ig2Tv0zvumir5QjoFzOA=
Subject key identifier: AC:C0:2C:A1:05:38:24:BD:D5:71:85:23:14:61:89:D6:48:72:50:56
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0716
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17CEAE8802EE11F08A6E2D4F762E951A.roa
Signing time: Mon 17 Mar 2025 05:10:07 +0000
ROA not before: Mon 17 Mar 2025 05:10:03 +0000
ROA not after: Tue 17 Mar 2026 05:10:03 +0000
asID: 401120
IP address blocks: 196.251.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Apr 2025 02:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 17 05:10:03 2025 GMT
Not After : Mar 17 05:10:03 2026 GMT
Subject: CN=67d7aeaf-2701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:28:a6:97:76:d7:2d:18:e9:31:ea:24:2e:
c8:71:2c:d0:38:f2:1d:00:8e:d0:c4:ff:73:57:98:
ca:a1:32:d9:79:7a:bb:88:31:ce:17:5f:28:a4:06:
13:2e:54:f7:d8:f3:0a:99:75:da:9c:15:78:3f:95:
80:3b:22:2f:68:70:78:6e:e1:e5:3b:81:ec:13:aa:
98:84:17:fb:8c:58:c1:f1:a6:6d:0f:93:e7:2e:89:
9c:78:fe:3e:03:4a:d6:13:8f:9f:11:8f:3d:f7:af:
37:0d:8d:de:fb:fe:02:e6:e8:cd:ce:11:2d:ec:4b:
3e:34:8f:42:70:4f:56:3b:7d:63:4e:81:66:5b:18:
e9:68:c1:24:c5:b9:78:b8:45:90:59:ac:52:f8:3e:
26:0a:8c:e3:1c:de:f3:98:02:d3:2e:d8:42:df:9a:
73:93:7e:b3:48:2c:42:71:d1:57:1b:75:2c:01:dc:
d5:2a:1b:d9:ff:79:4c:ee:d3:ab:36:53:1f:6a:56:
07:b1:24:80:8b:d6:f0:e7:38:b9:0c:bd:27:91:0d:
f4:d1:69:43:d2:9a:02:9a:73:98:2e:bc:8d:4e:56:
54:fa:30:c5:61:3d:d9:86:11:57:5a:d0:36:a9:a3:
12:dc:93:6d:e6:df:3e:dd:af:e7:84:56:e1:a5:77:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C0:2C:A1:05:38:24:BD:D5:71:85:23:14:61:89:D6:48:72:50:56
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17CEAE8802EE11F08A6E2D4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.83.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bc:5a:89:6e:05:7f:40:8f:84:ce:3c:7a:5c:f8:d9:c7:e6:
57:dd:3a:07:77:b9:f5:85:3f:cf:db:05:78:c4:fc:30:ac:04:
13:09:c5:6e:cc:d0:3d:bf:d1:85:b7:17:a9:6b:e5:f9:c9:bf:
33:49:11:88:cb:67:a6:fe:2f:13:7b:39:77:4a:b9:d6:b7:25:
92:93:f7:43:1b:ca:83:91:bc:2e:7a:22:91:46:db:f3:24:96:
7a:68:98:52:2e:42:ed:5b:bb:34:a5:d1:cf:18:d8:36:79:5b:
d6:82:7d:7c:7e:13:0d:ef:9b:df:24:1d:f4:c6:08:22:12:7b:
ad:35:04:78:df:55:b8:d2:e3:2c:34:29:58:78:8f:38:d6:f2:
04:37:dc:05:cd:0c:16:b2:62:7c:a5:ad:33:0d:e3:22:2a:3c:
73:e3:e5:57:07:eb:68:57:fd:ee:cc:72:66:5e:22:e7:6c:2b:
55:a9:ca:46:ea:2a:b6:35:b0:ea:4d:44:cf:0a:f5:46:64:c5:
35:82:35:bd:39:6d:3b:6f:46:63:d3:7b:1b:d2:54:8d:b6:af:
13:12:c9:6a:8d:c9:4a:86:81:46:c7:ff:c5:0e:31:d4:2b:c7:
0d:9d:86:97:5c:e4:91:98:ac:7a:89:bc:ab:be:a2:40:c3:a8:
ce:aa:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:07:54 2025 by rpki-client