
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/458724923D6111F08DEF26F0DAE4EC9C.roa
File: 458724923D6111F08DEF26F0DAE4EC9C.roa (raw, json)
Hash identifier: DUle2WSub7xXnMAhKdzUuRK/oL7taz1iVOwwFqaAnhA=
Subject key identifier: 87:EC:84:16:4B:AF:21:27:CA:F4:24:90:43:D4:D7:40:77:3A:A4:A0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AF3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/458724923D6111F08DEF26F0DAE4EC9C.roa
Signing time: Fri 30 May 2025 14:20:44 +0000
ROA not before: Fri 30 May 2025 14:20:39 +0000
ROA not after: Fri 29 May 2026 14:20:39 +0000
asID: 208485
IP address blocks: 196.251.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 14:20:39 2025 GMT
Not After : May 29 14:20:39 2026 GMT
Subject: CN=6839bebc-549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:6c:7b:9a:cf:f8:c5:a0:bd:30:11:69:f2:
2e:10:84:0b:e0:fa:04:ee:12:e0:28:67:50:9e:39:
8d:8b:f8:4b:86:96:d4:95:a5:60:8d:ae:ce:5e:b6:
2f:75:af:ba:ae:06:32:0c:3e:ce:8a:f4:3f:f7:c9:
55:40:53:f7:7e:86:be:e1:22:66:35:a6:c1:a6:1a:
70:84:a9:73:41:0b:f0:6f:00:d8:f4:4a:30:f2:f2:
20:a2:28:21:c4:6e:41:82:e9:84:0e:66:68:a8:39:
b2:d2:a0:0d:1c:0e:45:cf:ae:e4:3f:ea:0a:b3:37:
41:65:20:ac:29:0b:36:c5:9f:6e:c8:bf:65:54:d3:
4d:12:58:d6:93:52:66:d4:80:ba:83:c4:cb:99:89:
98:ab:a6:af:05:ea:64:7f:c6:7a:0c:65:8f:2f:8f:
78:76:d8:c5:59:46:34:dd:82:9a:e5:a3:38:9a:64:
9a:c0:8c:7d:27:c0:a0:09:ba:02:ed:e1:83:ca:99:
0b:ae:e2:5a:ce:3f:cd:c4:78:46:59:cb:c2:b1:36:
a8:2d:90:6c:f1:c6:8e:20:d2:a3:b3:7b:b7:70:56:
a0:07:c5:db:6e:57:bb:46:a4:61:33:b5:a2:6e:dc:
08:fb:3b:af:3a:84:b6:19:1e:5e:fc:1a:97:fe:c0:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EC:84:16:4B:AF:21:27:CA:F4:24:90:43:D4:D7:40:77:3A:A4:A0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/458724923D6111F08DEF26F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ec:d0:18:83:40:47:e2:e1:0a:88:28:07:00:a3:39:1c:69:
4d:63:86:6e:8e:1c:2e:be:71:28:40:41:6f:a9:0b:ae:31:8c:
63:3c:1c:7c:70:67:a9:b5:e5:fa:31:55:a2:6c:f9:f9:fb:18:
0e:e5:01:79:56:05:3b:4f:ed:7a:78:f4:fb:1b:d8:d2:f6:2d:
28:6c:88:b7:5a:1e:cc:99:5f:f2:b9:55:f5:53:fe:36:10:9c:
c8:b1:f2:fd:6b:aa:74:f7:e2:fb:8c:8c:c3:1d:80:59:24:da:
d8:f5:92:f8:8e:bc:00:00:0a:dc:4d:a2:3a:a7:1e:a4:aa:98:
0b:48:31:e8:2d:d6:61:e6:bb:1e:a1:a6:86:a0:d7:7c:47:89:
91:47:fb:43:ba:09:d8:50:0d:53:37:52:c5:29:ab:a8:11:45:
c9:2b:4e:17:6b:cc:64:73:65:79:ab:01:3a:1d:7c:10:2f:51:
ea:0c:48:78:bc:3b:04:47:4d:f9:71:ec:71:d4:f9:ec:75:b7:
c5:78:44:7b:48:8b:28:0b:53:7d:26:56:d5:d7:0f:98:7f:65:
a6:5e:6c:a7:08:37:ca:b3:0d:ad:7f:bd:40:a9:bc:97:34:04:
7d:93:ca:11:02:f3:07:ef:88:bb:e9:66:db:5d:4d:2c:4a:31:
df:59:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:23 2025 by rpki-client