Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/380BDA9E08A311F08B156E7D762E951A.roa
File: 380BDA9E08A311F08B156E7D762E951A.roa (raw, json)
Hash identifier: GEFdDTvXOPjNUEzJqF7w62+imTQb8nxjKPBVeGcI/C0=
Subject key identifier: 86:31:53:27:51:60:57:4B:E6:05:51:D0:15:61:65:C8:DC:C0:40:9C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07EE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/380BDA9E08A311F08B156E7D762E951A.roa
Signing time: Mon 24 Mar 2025 11:29:17 +0000
ROA not before: Mon 24 Mar 2025 11:29:10 +0000
ROA not after: Tue 24 Mar 2026 11:29:10 +0000
asID: 2914
IP address blocks: 196.251.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:29:10 2025 GMT
Not After : Mar 24 11:29:10 2026 GMT
Subject: CN=67e1420d-09e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:e4:58:3b:82:90:c7:4e:bc:38:63:da:8d:
08:e9:d8:f1:b7:67:ca:34:ed:58:ed:5e:97:ec:4e:
0a:e4:d7:06:a3:4d:6d:75:16:4c:c0:8f:01:8e:09:
89:e2:e8:24:e0:bf:90:39:58:78:21:fa:95:c6:75:
52:b1:ed:d9:93:e9:46:48:b6:3c:50:7b:6b:4c:7e:
08:44:40:8a:98:e1:2b:24:04:06:ba:4b:54:87:ec:
8d:78:fb:29:88:a8:d1:a4:b6:cf:0a:c1:0f:37:59:
d5:dd:75:42:df:a2:10:b7:26:12:ea:22:38:1e:3c:
df:4e:b3:10:f5:f9:cd:93:1c:d7:2e:1c:25:52:04:
dd:03:c3:7f:98:c8:08:d1:b5:ba:cf:54:db:77:b1:
77:16:2b:01:b8:6a:27:71:be:39:4e:1a:ce:26:2b:
24:9e:9f:41:a3:13:81:fc:a4:a0:98:b0:b5:41:34:
7a:22:4d:cc:79:5b:96:20:a1:55:15:de:21:5c:27:
83:26:55:5e:f6:3b:cd:d7:60:41:d5:9f:74:42:51:
ae:4d:72:99:59:2c:89:04:36:48:a5:e0:cc:2e:e3:
5c:a6:80:3d:b0:43:d1:c2:fd:b0:00:c9:cd:0b:a4:
16:4b:35:96:64:e9:f3:30:15:cf:e0:ca:82:82:ec:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:31:53:27:51:60:57:4B:E6:05:51:D0:15:61:65:C8:DC:C0:40:9C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/380BDA9E08A311F08B156E7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.77.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9d:0d:f3:ca:08:a4:b9:7b:96:ac:50:34:31:61:0b:38:b5:
7b:b4:a0:58:08:56:4d:62:2c:13:9a:c4:7d:16:24:f2:a8:cb:
c8:d8:de:b9:c7:be:b5:1a:93:47:2f:4c:0e:fe:2d:86:96:95:
ba:0c:3d:8b:e0:88:da:e7:b5:88:18:e9:ca:a5:7e:18:65:aa:
4d:31:39:35:b9:6f:8b:35:cd:3c:ee:82:67:0d:8c:0f:a5:14:
b2:db:f8:a1:99:d3:6d:21:ac:bc:a3:ed:43:40:eb:a9:c7:9a:
63:18:bc:f4:30:ec:76:1d:70:91:a4:04:f5:d2:e6:9f:3b:c4:
61:fa:a9:45:79:99:aa:97:61:b5:28:3b:b4:15:15:cc:0d:ba:
37:b9:2f:c8:87:cc:3e:ee:87:5b:82:46:9a:35:e2:19:d1:5a:
77:f0:16:15:08:db:84:33:ad:9c:ed:b9:05:a4:72:40:05:0c:
36:68:c0:8b:f3:8a:98:12:fd:eb:ee:24:7e:28:69:54:a0:cc:
2e:9b:91:33:da:72:32:b3:72:bd:f2:85:32:40:c0:65:7c:3f:
40:24:38:ae:80:48:1d:31:18:d4:0e:93:8d:99:fd:e4:f8:8f:
69:5e:e5:5e:28:ce:24:49:9b:ee:7a:8c:44:49:43:a1:9e:4b:
bd:b7:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:58 2025 by rpki-client