Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1DD88DC83D6111F0BEBDA0EFDAE4EC9C.roa
File: 1DD88DC83D6111F0BEBDA0EFDAE4EC9C.roa (raw, json)
Hash identifier: 34rJWE1pYI0/JkjdU5wp4gPIu0GSvK1SAklbsmZEVS0=
Subject key identifier: 17:7F:16:4E:CB:91:1A:21:68:00:F7:F6:3D:9A:59:E1:A9:4F:C9:CC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AF1
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1DD88DC83D6111F0BEBDA0EFDAE4EC9C.roa
Signing time: Fri 30 May 2025 14:19:37 +0000
ROA not before: Fri 30 May 2025 14:19:33 +0000
ROA not after: Fri 29 May 2026 14:19:33 +0000
asID: 208485
IP address blocks: 196.251.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2801 (0xaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 14:19:33 2025 GMT
Not After : May 29 14:19:33 2026 GMT
Subject: CN=6839be79-6636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:76:64:14:a2:8c:40:62:ed:f6:5a:75:93:6c:
7f:b2:75:86:35:37:1d:48:19:4a:35:3c:d8:e9:64:
9c:1e:e4:6b:1b:66:67:4a:30:e5:e4:3f:a0:30:94:
00:3a:8a:5d:23:93:7d:bb:b0:65:97:c1:2f:8a:03:
1e:9c:0b:1c:02:01:e2:86:e3:0e:ea:4a:b6:1f:42:
03:67:e8:5e:52:e4:e9:82:52:fc:ed:4a:7a:9b:5e:
a0:b6:25:c2:e4:7a:ed:6c:e4:eb:58:ad:41:74:ce:
f0:3a:e5:8e:59:51:da:53:f8:96:af:2c:eb:6d:05:
c8:e9:f9:ca:b3:3a:6c:31:ce:e8:ef:ff:8b:b6:6b:
e3:b1:fd:06:ff:02:f8:5e:9b:3a:4d:57:d0:03:99:
63:2b:82:2a:06:d5:b3:fd:75:cb:02:45:63:af:9a:
de:6b:0a:ee:78:5a:95:e7:2a:07:8c:3f:5c:8f:b3:
2c:41:c9:d5:6d:b6:83:ab:d0:1e:05:35:79:ed:54:
87:61:8f:c4:01:74:96:44:fd:e0:a6:31:3a:ea:0b:
2d:16:ad:9f:b7:73:48:e8:bf:ca:d7:e6:5f:4b:c9:
f4:d6:99:7f:7a:d9:82:a3:7d:eb:67:fc:7d:8a:f6:
cf:44:57:76:a0:e4:6c:ad:fd:83:26:1c:be:5e:ba:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7F:16:4E:CB:91:1A:21:68:00:F7:F6:3D:9A:59:E1:A9:4F:C9:CC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1DD88DC83D6111F0BEBDA0EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.105.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2a:04:b5:31:8a:8b:85:52:37:17:00:6c:ae:0b:da:20:8a:
7f:75:6c:ef:a0:18:98:06:e9:e4:5e:ae:c3:96:6f:3a:28:43:
e1:3c:a7:55:f3:15:71:9c:9c:ff:0e:d9:41:4b:b9:7d:4b:cf:
39:a6:af:71:84:66:0c:32:15:14:b7:e9:fb:c7:0f:dd:96:df:
15:c3:4f:6f:b8:c1:a0:9c:8b:2b:cc:b8:1e:7f:0d:b2:f6:83:
1a:f7:98:1b:fb:d6:fd:4d:1b:79:66:22:7e:f6:f0:68:31:72:
a7:d2:49:aa:90:a5:6b:56:f3:c3:11:b1:86:bb:b1:3b:f4:cf:
3e:17:4e:11:cf:68:70:55:e0:1b:36:e8:6b:f1:f9:72:ea:88:
18:4d:f4:7a:9e:35:8c:b4:06:72:eb:83:9a:13:ee:a6:01:c4:
5a:43:4b:e1:46:e3:f7:13:30:94:e8:09:5e:67:4f:90:aa:a1:
d3:6d:45:69:ec:21:44:06:72:98:69:84:05:92:b5:87:bf:b3:
97:48:dc:11:4c:e2:89:c8:57:db:11:a5:0d:0c:00:e7:e2:d5:
78:be:d4:bf:c0:cc:9a:c9:f0:f4:4e:98:b8:e2:94:fe:6f:f0:
f9:d4:15:a9:c1:9d:10:be:4b:e6:d7:9d:6b:93:5e:35:e3:7d:
6f:d1:a0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:08 2025 by rpki-client