Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6445B73408A211F0A0F0F678762E951A.roa
File: 6445B73408A211F0A0F0F678762E951A.roa (raw, json)
Hash identifier: GFn1X/gV250u1ktgzGvdCCCKsvfKhZmorOTGfzrXBC8=
Subject key identifier: 3B:AF:49:AD:4E:32:E6:BB:29:EF:77:15:16:1E:39:66:FF:17:9E:3F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07E0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6445B73408A211F0A0F0F678762E951A.roa
Signing time: Mon 24 Mar 2025 11:23:21 +0000
ROA not before: Mon 24 Mar 2025 11:23:17 +0000
ROA not after: Tue 24 Mar 2026 11:23:17 +0000
asID: 2914
IP address blocks: 196.251.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2016 (0x7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:23:17 2025 GMT
Not After : Mar 24 11:23:17 2026 GMT
Subject: CN=67e140a9-e29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:a0:ad:f3:63:9a:79:c2:f3:75:de:0a:dc:
b9:14:9f:66:53:8f:4e:00:7f:eb:c1:fd:a5:23:6f:
44:7c:d2:39:59:df:29:a0:a4:e5:e3:b9:58:82:84:
00:28:b8:2f:fb:cc:01:6e:24:1b:d9:fa:8e:75:62:
11:3c:32:4f:f1:da:11:7e:1b:25:f6:3c:e2:6b:d2:
8a:f3:fc:bb:5d:8a:64:53:d6:81:f2:fe:09:7a:c9:
a0:77:5e:60:0c:a9:1c:9b:33:94:f8:a8:34:04:e5:
f7:d5:48:d6:74:9d:a1:f5:d0:9d:96:bb:f7:8b:92:
4d:05:c8:76:c3:e8:a7:25:14:94:de:65:61:37:6e:
ba:0b:18:0b:9b:d5:5d:0c:09:2f:a3:70:60:11:85:
2c:a1:ce:83:2a:f5:3f:99:92:17:7f:55:33:23:a5:
91:93:e0:32:fb:69:b7:3e:66:d8:70:2b:8d:98:69:
a3:4c:24:b7:21:9d:39:c4:60:06:58:7f:57:b9:22:
d9:86:5b:e8:0a:13:fe:6a:7f:f6:0d:e4:6a:cd:8a:
85:ba:65:50:61:34:4d:39:e3:1a:cd:df:a4:28:5a:
34:f4:55:93:a4:44:dd:1c:10:7d:4b:42:ff:86:01:
e9:cb:87:27:5c:92:59:f9:75:fb:45:ff:b2:67:42:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AF:49:AD:4E:32:E6:BB:29:EF:77:15:16:1E:39:66:FF:17:9E:3F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6445B73408A211F0A0F0F678762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.107.0/24
Signature Algorithm: sha256WithRSAEncryption
38:22:70:bf:63:04:71:ae:a7:d4:f6:22:70:74:5d:20:cb:b0:
ee:e7:dd:ee:ef:4a:7b:d1:cb:22:98:16:f3:a6:57:8f:1e:46:
f9:38:4b:38:b9:90:65:d6:98:67:4e:63:af:54:d6:10:62:0a:
4d:25:4c:32:b4:b6:42:d8:74:b0:53:f4:a4:13:ea:e8:68:51:
d9:9f:44:5c:1f:e1:5c:81:24:ff:b5:2b:23:24:74:4a:f8:a2:
70:32:6e:cf:1f:c4:34:8c:f2:06:ff:42:4a:72:0d:2b:fb:a6:
40:04:22:46:7f:57:82:05:8f:11:9f:5a:c0:87:c1:70:6d:b5:
3b:cf:79:db:ce:83:49:04:c3:08:d1:52:0d:31:73:64:9d:93:
e2:3d:f5:fe:16:e9:a9:74:d5:9a:9d:f4:8d:87:ab:a6:66:d9:
20:b6:08:88:73:42:7f:4b:4e:17:07:14:8f:b2:db:a3:de:31:
d5:2f:01:c4:4e:46:ed:45:ed:c8:07:cb:c4:06:bf:d4:08:80:
32:f1:66:aa:63:2b:ea:5f:be:46:86:bc:fc:be:fc:18:bb:26:
9e:eb:6f:df:7b:75:84:fa:64:40:5a:49:a0:de:a4:71:6f:88:
0b:dc:d4:cf:19:f4:40:33:a8:78:25:76:c0:d1:10:0d:53:de:
9c:56:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:39:11 2025 by rpki-client