Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BDAE79EE77D11EFB4AB0CBB762E951A.roa
File: 6BDAE79EE77D11EFB4AB0CBB762E951A.roa (raw, json)
Hash identifier: ssNBZwZj/O4+EOXIaCk9m+RGbnRVQ3FIrOkQ/0IEj8Q=
Subject key identifier: 9C:4D:79:CF:07:A7:34:9C:20:73:CA:DE:9C:18:79:C8:93:95:44:92
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05C3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BDAE79EE77D11EFB4AB0CBB762E951A.roa
Signing time: Mon 10 Feb 2025 07:05:34 +0000
ROA not before: Mon 10 Feb 2025 07:05:30 +0000
ROA not after: Tue 10 Feb 2026 07:05:30 +0000
asID: 43260
IP address blocks: 196.251.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1475 (0x5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 10 07:05:30 2025 GMT
Not After : Feb 10 07:05:30 2026 GMT
Subject: CN=67a9a53e-98cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:48:6c:5e:51:99:ba:a0:81:77:95:62:02:af:
3b:24:ec:c8:99:e4:3d:d7:6a:d5:82:58:d9:4f:b1:
23:09:f0:6e:70:31:6f:36:51:52:e7:1c:ee:82:e8:
a0:19:0c:38:56:cd:47:9d:30:87:0b:5f:d6:c0:d4:
bd:63:04:c5:3a:e3:fd:df:2f:03:84:30:d1:4e:5f:
61:69:f7:2c:0f:7b:3c:cd:23:2c:e4:09:16:59:8b:
ee:1e:22:5c:a2:83:f2:73:ff:f5:88:e7:2a:02:89:
16:03:b1:3e:a2:dc:70:8a:47:80:ad:6e:fd:fb:d9:
57:2e:7c:92:ef:80:1e:f3:ff:fe:26:0c:3f:f4:85:
e2:2f:0e:ce:62:d6:b9:af:f0:5c:f6:db:13:02:e7:
4a:67:01:a7:a0:df:af:a9:cd:64:c5:90:2a:87:91:
e0:9a:6b:fb:08:c2:6d:83:4c:70:ea:2b:07:f0:1e:
06:44:ee:11:62:ff:47:c0:3f:be:b6:c7:76:d7:8e:
aa:00:62:82:21:e7:a4:eb:43:97:a5:ef:ba:2c:07:
f6:11:48:3b:d0:d0:d2:2d:6d:f2:14:1b:1b:2c:63:
4f:a9:59:f1:2d:b2:3b:11:91:2c:ee:bc:3a:f8:52:
5b:2f:2b:f6:5a:67:b4:5a:ac:6b:5a:40:b3:00:69:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:79:CF:07:A7:34:9C:20:73:CA:DE:9C:18:79:C8:93:95:44:92
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BDAE79EE77D11EFB4AB0CBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:94:2c:89:df:2b:d9:d8:b5:35:a4:d1:1f:04:42:4a:00:21:
4b:57:45:e0:80:39:44:a6:ec:fe:fd:50:e7:48:91:5c:0f:5c:
2e:18:a9:01:17:90:19:c5:ae:62:5f:d4:d8:90:5f:f7:01:71:
8a:9a:e6:10:05:a5:f0:b8:41:0d:fe:9a:22:9b:26:6a:22:81:
a5:bc:b0:bf:a1:b2:fb:dd:c5:b2:04:ba:59:41:84:5f:4d:cd:
7a:a0:4e:d6:fd:88:ad:50:41:de:db:21:cd:07:d9:48:cb:13:
96:30:c1:ee:88:0c:b7:8b:ea:34:9a:cc:6e:53:51:6f:ea:98:
41:65:4e:d8:09:ab:16:0e:15:94:c0:45:2d:7c:c5:eb:99:61:
d4:6a:36:93:c4:5f:17:e5:e2:af:f3:85:7b:49:ed:55:4e:33:
2b:a2:f6:68:1a:ec:3c:04:23:b2:7f:d6:88:16:1c:90:ed:44:
c1:2b:56:ed:c1:a3:6e:d5:31:e6:a8:90:bd:7c:c8:d7:c4:21:
6a:62:39:32:42:f4:57:c9:fc:54:ae:d2:c9:12:da:ea:b3:fc:
e1:f5:3f:27:ea:fb:57:b6:36:93:cf:e6:4a:f0:4f:74:fe:f6:
38:c0:06:34:66:35:99:35:cd:cb:53:c3:b7:d8:83:e0:ce:fe:
63:65:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:53 2025 by rpki-client