Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2DC22456EAA511EF832CD845762E951A.roa
File: 2DC22456EAA511EF832CD845762E951A.roa (raw, json)
Hash identifier: U3x/l87h79Z9m3YVSTwysgts2B6u3GdNEDHPxDDw+qA=
Subject key identifier: 90:1A:E2:FF:C5:F4:F8:17:78:63:41:E9:5E:4A:D0:32:23:BF:08:80
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0652
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2DC22456EAA511EF832CD845762E951A.roa
Signing time: Fri 14 Feb 2025 07:27:43 +0000
ROA not before: Fri 14 Feb 2025 07:27:39 +0000
ROA not after: Sat 14 Feb 2026 07:27:39 +0000
asID: 329007
IP address blocks: 196.251.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 14 07:27:39 2025 GMT
Not After : Feb 14 07:27:39 2026 GMT
Subject: CN=67aef06f-5e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:5c:24:dc:05:e2:ef:7e:14:d9:cc:37:1e:
f7:02:5d:f4:93:7e:5d:c3:80:82:97:ac:5c:2c:b7:
b5:77:bc:b5:6f:9c:e5:86:10:84:a4:de:6d:5d:d2:
92:ac:a5:2d:b5:87:d8:50:c5:fb:47:0f:9f:49:bd:
74:73:9b:bb:5d:e6:26:f2:8c:1b:6b:b9:ce:ed:46:
fd:fc:ff:5c:a1:de:ec:e9:91:06:93:f6:84:a7:bb:
ed:e6:a9:f2:07:5c:38:0a:9e:67:e8:f0:e2:0d:15:
ab:17:c0:d6:bd:2f:84:67:49:b2:b5:7a:01:9f:e3:
26:e2:c6:92:12:eb:44:ae:42:b5:ac:ad:71:b2:3a:
76:a7:43:65:70:95:e9:c1:ba:de:6d:d9:2b:1f:3b:
71:23:fd:a5:fb:3e:5e:d1:cd:06:d8:51:95:a0:b1:
a2:f0:4b:12:bd:74:86:f5:e4:c1:07:7b:1e:45:db:
fd:2d:b9:1f:88:8d:55:ce:3e:02:d2:20:1b:59:51:
87:63:77:29:14:32:e7:9c:10:91:55:9b:64:61:98:
30:de:e5:55:48:ac:c2:06:1c:fb:b2:32:82:48:a2:
68:e1:89:49:e6:b5:42:98:a0:48:df:77:7c:aa:2e:
10:8d:08:97:09:8b:e8:08:14:95:3a:78:79:e6:b1:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:E2:FF:C5:F4:F8:17:78:63:41:E9:5E:4A:D0:32:23:BF:08:80
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2DC22456EAA511EF832CD845762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.97.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e0:b3:83:fe:29:8e:6f:a7:f4:a7:b7:5d:f8:14:6c:62:10:
1b:fa:c3:4b:34:35:57:14:04:66:23:eb:fe:52:68:60:68:43:
58:ca:3d:60:21:58:36:47:79:c8:ae:7e:28:c5:65:5b:fb:20:
dc:8d:03:82:00:af:9c:d2:0a:b8:7c:25:ef:12:4f:21:da:ad:
a8:f0:c5:67:cb:6c:ec:aa:8f:5e:36:29:0d:fa:ec:35:d6:77:
58:d1:18:1a:77:53:32:72:e4:dd:48:13:4a:da:e8:70:d3:dd:
9f:10:eb:30:95:81:85:be:f6:bd:b7:ed:9d:c2:fe:a1:c6:49:
20:5f:06:6c:84:73:ef:76:be:be:b9:a5:b8:08:66:5d:d6:36:
9b:ec:1e:ea:ab:01:4b:9c:76:11:19:40:63:40:fd:7f:90:99:
89:1b:0a:20:0b:d5:f0:09:7c:e5:0f:fc:d0:a5:3f:d4:4d:65:
59:d3:f9:78:55:66:a4:60:a0:ed:a2:5b:01:24:27:c2:9e:d2:
57:6f:e1:ee:15:d7:27:fd:ed:52:c7:11:0d:24:bd:ad:5b:ee:
bc:5c:57:35:34:d2:92:f8:cf:54:12:04:95:8f:ed:4c:ff:cc:
0a:7d:18:4e:26:aa:1c:2e:82:a9:0b:bf:0e:ef:aa:90:95:61:
a7:4c:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:33 2025 by rpki-client