Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2485307002EE11F08AE1324F762E951A.roa
File: 2485307002EE11F08AE1324F762E951A.roa (raw, json)
Hash identifier: zLXDaCerTbu0HTDBhDh+hU0vfOr0/8K4Bye8O29rJ/s=
Subject key identifier: 81:11:54:6E:25:EF:11:2F:2F:E5:D9:79:8E:CB:BD:5A:C1:66:EB:44
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0718
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2485307002EE11F08AE1324F762E951A.roa
Signing time: Mon 17 Mar 2025 05:10:29 +0000
ROA not before: Mon 17 Mar 2025 05:10:25 +0000
ROA not after: Tue 17 Mar 2026 05:10:25 +0000
asID: 401120
IP address blocks: 196.251.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 17 05:10:25 2025 GMT
Not After : Mar 17 05:10:25 2026 GMT
Subject: CN=67d7aec5-9b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:9e:c5:64:c0:7a:0e:1a:34:6d:db:ce:3c:
7a:55:b1:6d:23:c2:54:79:ad:e3:61:90:6b:b3:9f:
43:d2:86:c8:d9:0c:f9:73:35:62:a9:e9:c0:f6:f5:
26:c9:a5:e8:31:8f:22:47:16:79:f6:36:20:ac:c1:
df:dc:db:bd:cd:ab:a7:da:59:fd:c6:ce:a1:e1:04:
31:c9:fb:62:09:8b:fa:68:64:72:1a:d5:a7:60:05:
a0:d5:41:51:1c:50:47:3a:ac:ec:58:6a:e8:73:9a:
95:6c:ec:6e:98:2d:44:aa:da:ea:a0:e6:51:59:e9:
a6:46:65:c7:8a:67:8f:4a:cf:a4:b1:05:ff:08:89:
2a:b5:8e:42:23:74:50:19:ad:2a:f1:bd:bd:57:a5:
00:36:12:74:2b:0d:80:f2:40:18:86:23:91:21:82:
6c:71:fd:40:a3:5b:c7:de:0a:5d:b9:f1:e7:d4:9a:
96:72:ae:64:18:2a:7f:2d:2a:3d:be:90:92:99:fd:
12:c6:5e:b3:48:49:59:32:71:4d:16:52:da:7d:69:
e5:3c:22:86:e4:bb:d1:c0:47:eb:41:63:c9:a2:ba:
ae:8a:f6:59:5e:01:b5:7e:9f:58:02:7b:f1:fe:f6:
ad:8c:bb:6f:5a:41:1b:81:02:c2:14:2b:a8:5a:25:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:54:6E:25:EF:11:2F:2F:E5:D9:79:8E:CB:BD:5A:C1:66:EB:44
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2485307002EE11F08AE1324F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:ac:85:37:d8:54:fb:36:02:e0:00:63:1e:49:59:a0:7f:77:
ea:7e:30:51:46:fe:d1:e3:b0:3d:16:87:ec:55:45:e2:b8:19:
2c:77:e3:f5:f1:fd:84:61:c9:a5:7b:19:ae:80:b2:bb:88:7b:
e6:2c:b7:84:bd:a2:5f:2c:47:93:b5:e8:01:1b:db:c9:2f:2d:
6f:ff:db:ee:10:28:68:00:f3:93:84:12:37:2a:85:41:3a:a3:
d9:2c:0e:eb:ff:91:60:39:d3:d1:69:44:15:f4:cd:25:a5:86:
60:de:d8:cc:81:21:21:ee:be:14:be:f4:b5:ac:3e:fa:0f:26:
be:0c:27:d3:ed:f6:84:d3:2e:86:0b:10:6f:0f:b4:7c:02:55:
80:b2:75:b1:37:f1:ac:a4:26:06:fe:23:3a:80:6a:2f:2e:b9:
73:fd:71:05:21:9b:8d:b7:3c:de:df:41:d9:4a:b9:45:84:a9:
40:da:fc:a3:49:66:78:12:5d:ca:e0:70:7c:68:f4:82:3d:98:
6e:a5:f1:52:65:fc:c4:88:4a:b3:e7:d1:43:d5:5d:90:91:dc:
60:ac:cf:c2:35:35:06:6b:6c:e5:33:d0:96:52:0c:c4:b8:86:
2f:2f:27:aa:e0:23:77:3e:30:6b:0e:a8:29:3b:84:30:7d:d2:
e8:01:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:44:50 2025 by rpki-client