Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4AC7E15008A311F09146027F762E951A.roa
File: 4AC7E15008A311F09146027F762E951A.roa (raw, json)
Hash identifier: O9V8k8CyZry9YxCZIfVjpG3keUrzRH5D0XV3H894h30=
Subject key identifier: CD:96:9C:34:30:46:C1:1D:85:E2:3D:BF:56:2C:7D:24:2F:A8:3C:75
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07F0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4AC7E15008A311F09146027F762E951A.roa
Signing time: Mon 24 Mar 2025 11:29:48 +0000
ROA not before: Mon 24 Mar 2025 11:29:44 +0000
ROA not after: Tue 24 Mar 2026 11:29:44 +0000
asID: 2914
IP address blocks: 196.251.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:29:44 2025 GMT
Not After : Mar 24 11:29:44 2026 GMT
Subject: CN=67e1422c-a0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:46:ab:87:4f:18:00:de:39:dd:a6:7e:77:cb:
69:c6:21:40:74:d9:81:79:42:69:a1:f4:09:8c:00:
72:62:8c:2c:9d:29:01:62:c7:d3:b1:94:85:c4:9f:
ff:2e:e8:cf:92:09:9e:8a:14:f6:d9:a9:3f:10:63:
91:3c:b1:c9:d3:63:9b:89:76:dc:79:34:34:a2:ac:
53:20:ae:72:f7:2d:20:66:32:07:e1:2a:78:12:c4:
17:8a:14:f3:fe:31:65:5c:dc:0b:94:97:69:f5:9d:
e4:87:9a:a8:54:ee:d8:bf:1a:3c:4c:ba:e7:f2:f0:
4d:29:f9:28:5b:34:77:29:51:4b:64:71:33:b5:99:
3a:3a:b8:ad:d2:84:b1:76:30:15:0a:b6:51:7c:a5:
d6:10:f0:d4:4d:54:84:f3:70:50:8d:2b:96:ea:94:
28:6e:d0:9e:93:38:74:98:ca:32:76:1e:84:d1:e1:
f6:63:9e:4b:5c:7b:39:e9:36:74:91:f7:08:bb:cb:
c2:4c:d2:73:f9:84:bf:4c:41:40:6e:d0:10:ba:f3:
43:56:4f:d7:26:dd:ec:cc:04:09:40:5e:2f:49:36:
cd:a7:03:1c:3f:c3:fc:99:fa:77:df:a8:c0:ed:b0:
ed:df:f4:4b:f3:29:50:ce:1c:62:70:d5:68:9f:8e:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:96:9C:34:30:46:C1:1D:85:E2:3D:BF:56:2C:7D:24:2F:A8:3C:75
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4AC7E15008A311F09146027F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.79.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:43:97:03:f3:b4:2c:fa:80:53:bc:d1:1d:f6:50:71:39:37:
bd:c8:74:45:ec:3a:67:d4:c1:bd:01:9e:b8:b8:fc:1b:93:5f:
70:55:f7:0b:ad:44:11:7b:50:4b:af:cf:fa:7c:52:86:f8:25:
b9:0c:c3:cc:8c:3f:4c:92:f8:11:15:4c:2f:df:c3:88:18:98:
9b:d8:2c:b2:e3:df:70:e9:d1:cc:91:e2:98:d1:8b:5b:95:5b:
5f:85:96:29:f7:44:25:25:b6:2b:07:7e:0e:f2:0b:bb:3f:54:
a8:ac:ef:78:d4:5a:0d:53:28:ad:c3:bb:0c:28:99:ef:fc:c7:
f9:30:8b:50:20:b3:b5:2d:ee:f7:30:a4:35:fd:0c:23:a3:be:
04:16:e1:4a:73:db:25:c0:fa:08:e7:37:28:2d:b5:9c:db:d2:
0b:a2:0a:62:3d:da:6a:36:0a:2d:01:49:14:55:0d:78:31:1f:
31:8b:60:99:2a:04:27:37:59:2c:4e:bc:c4:98:44:b4:6a:19:
ea:eb:29:3d:28:ee:21:e8:d4:64:34:55:c3:53:c5:31:b8:71:
b5:23:21:a4:a2:f6:ae:fc:94:d7:31:c8:1a:78:08:a5:2d:74:
93:a7:ad:37:16:8b:05:ee:cc:7f:eb:65:35:76:1d:02:65:e8:
3e:00:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:33 2025 by rpki-client