Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6DAF7ED6E87C11EF87A309B0762E951A.roa
File: 6DAF7ED6E87C11EF87A309B0762E951A.roa (raw, json)
Hash identifier: WMNvMyOeUE6eRynU+4Ds49vrdkKNUlnReTeKQHueQuM=
Subject key identifier: BB:88:6E:D7:BE:E6:2B:0B:DD:2B:42:62:EA:37:27:54:F3:94:0F:7D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 061B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6DAF7ED6E87C11EF87A309B0762E951A.roa
Signing time: Tue 11 Feb 2025 13:30:59 +0000
ROA not before: Tue 11 Feb 2025 13:30:54 +0000
ROA not after: Wed 11 Feb 2026 13:30:54 +0000
asID: 401116
IP address blocks: 196.251.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1563 (0x61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:30:54 2025 GMT
Not After : Feb 11 13:30:54 2026 GMT
Subject: CN=67ab5112-76b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:1e:aa:a2:81:ea:a4:67:38:47:fe:02:d6:
f4:8b:2e:ce:cd:91:a3:08:99:e3:40:9a:72:d5:0d:
bd:7b:c5:b7:d2:b7:e0:00:7c:81:71:44:fe:57:a0:
e1:db:a6:77:8b:a4:12:0a:b0:74:33:9e:68:68:c1:
46:b4:43:79:87:e6:ae:97:aa:45:33:29:6c:93:3e:
dc:4a:0e:38:aa:3b:24:e3:41:f5:a6:94:3b:3c:b4:
98:58:33:db:4c:17:9e:8d:e3:e8:f3:9e:ae:d5:1d:
2d:f3:87:3f:92:fa:5d:4e:9c:93:68:a8:70:55:e3:
81:58:9b:a3:31:c1:2c:01:f9:41:42:89:cd:8e:78:
22:7c:0d:6b:2a:55:04:34:64:07:77:64:2c:4c:2e:
bd:91:8e:13:32:4d:22:60:bd:d0:92:a0:c4:cd:1e:
99:3b:a8:40:2e:02:7f:e4:96:91:3c:1f:29:31:e8:
b3:22:0b:c1:01:cf:bf:e4:27:c4:fd:9a:4e:f9:53:
cf:5a:18:ed:2b:73:68:3f:31:06:b4:0d:40:2e:ce:
bb:cc:e7:59:66:d4:df:ec:82:93:d1:e7:5d:75:a9:
a7:03:49:04:72:8f:9d:c5:46:d5:60:54:e0:93:36:
30:a9:58:57:22:d8:51:f4:51:85:85:b6:cf:e3:be:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:6E:D7:BE:E6:2B:0B:DD:2B:42:62:EA:37:27:54:F3:94:0F:7D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6DAF7ED6E87C11EF87A309B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f1:ac:d0:3f:28:59:13:02:d7:08:c3:3f:d0:54:50:bc:4c:
25:56:ed:2b:9c:f1:ef:c5:19:a9:4b:e5:05:c6:ad:7f:be:f0:
b9:90:9f:b6:56:e5:13:8e:b8:44:84:ef:ee:3d:ad:c1:5c:5d:
7d:33:9a:97:af:48:ce:e7:5c:ca:8f:d0:d8:e9:03:68:be:77:
52:cf:b6:29:9d:2b:e8:c9:02:3f:09:1a:82:e7:6a:8d:a0:2f:
35:ca:6d:35:8d:ba:fe:55:85:67:4d:d0:4c:49:15:f3:b7:87:
49:5d:b0:d9:79:13:cb:58:f0:0d:1b:38:a4:44:8a:ca:f1:b4:
4f:f3:7f:2a:88:0f:8e:24:9f:c5:e8:4a:f2:fb:a3:30:78:e1:
87:50:87:7a:1a:bd:ff:4a:5a:32:7f:34:e8:4c:b0:bb:74:49:
12:b6:81:4c:e1:a8:6d:c6:5d:10:7b:d8:da:95:ef:97:aa:e2:
8e:53:21:53:34:80:c1:49:15:cc:61:4d:52:a3:f3:ab:30:75:
4e:6f:37:71:6f:81:43:0a:73:7d:d9:93:e9:52:d0:42:ac:ef:
f7:c5:c7:2c:93:66:c4:99:c2:24:47:0c:d7:cb:bf:26:17:0a:
b1:c7:f4:f6:68:f5:dc:3f:94:9a:d2:a9:2e:26:c9:b3:b8:4c:
26:bc:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:33:49 2025 by rpki-client