Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71CBC44208A311F094061981762E951A.roa
File: 71CBC44208A311F094061981762E951A.roa (raw, json)
Hash identifier: kUgnDtBcqylOuC/53sUSoZY8bRNgw5oyoAiFz6kuLtE=
Subject key identifier: 3B:E5:C5:20:0A:28:18:D1:E8:8B:16:99:08:2A:D3:95:B3:4A:3F:7F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07F2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71CBC44208A311F094061981762E951A.roa
Signing time: Mon 24 Mar 2025 11:30:54 +0000
ROA not before: Mon 24 Mar 2025 11:30:45 +0000
ROA not after: Tue 24 Mar 2026 11:30:45 +0000
asID: 2914
IP address blocks: 196.251.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:30:45 2025 GMT
Not After : Mar 24 11:30:45 2026 GMT
Subject: CN=67e1426e-4fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:d8:8c:b2:fb:a2:1c:df:8f:9b:f4:5a:e5:
b9:c8:8b:6a:2d:ad:06:96:15:b1:82:a8:4a:6b:04:
c8:ca:32:ee:2b:c4:09:22:41:b3:c7:88:08:9b:d7:
61:18:aa:a6:82:97:7b:97:f3:62:cf:13:eb:46:77:
50:0a:93:62:c4:89:61:62:6e:f7:4c:84:70:7c:19:
ae:6f:43:77:dd:8c:60:1f:38:03:14:6f:b3:46:9f:
f2:8a:05:15:4b:f2:8f:d0:0b:5f:f6:d0:bc:d3:bd:
a1:2f:13:b5:28:e5:0b:01:85:21:7b:46:2e:97:3d:
81:61:31:de:ce:2e:af:d4:a3:f3:4f:57:37:23:cf:
d3:39:e9:0a:e6:5a:f0:b6:c6:85:58:f5:e6:82:21:
62:35:43:cb:49:b8:08:1e:94:4c:73:f2:6d:7a:e5:
1c:d6:e9:a6:4e:5e:16:de:bd:38:90:8e:f9:13:ad:
ed:6b:30:47:54:2b:0a:34:b3:c4:57:4e:25:5f:85:
d2:74:e7:cc:96:3b:2d:58:a8:b6:c9:d5:9f:56:1d:
0c:27:f3:ad:ba:3a:2c:86:d5:40:58:49:77:cf:a4:
cf:23:0c:94:1f:35:c2:f7:a3:8b:6e:0e:ea:71:83:
95:a8:dc:2d:c8:ff:f2:7f:71:a0:3a:55:ba:34:9b:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:C5:20:0A:28:18:D1:E8:8B:16:99:08:2A:D3:95:B3:4A:3F:7F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71CBC44208A311F094061981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.78.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:83:ef:d4:8d:fa:05:83:02:cd:fc:cb:e4:3d:9a:ab:21:7b:
fa:0a:d5:c1:15:ca:81:39:fd:78:00:52:24:54:78:1b:36:ed:
b8:57:c5:04:c7:5b:12:1b:ec:92:aa:b6:88:68:17:5a:3d:3f:
cc:dd:a7:a4:5a:58:a5:7d:31:37:f6:46:cf:1a:a1:d5:75:50:
7d:0b:3c:1a:dc:80:a7:bb:64:9d:49:82:16:52:f0:ca:28:c0:
d8:ef:2b:c1:fe:0a:0c:7c:3e:e2:84:ec:23:de:f0:1a:12:5f:
62:da:9d:ef:bb:b9:03:1a:ba:a1:dc:93:46:22:35:53:9a:8f:
98:73:65:92:d7:7c:83:be:f9:8f:63:f5:77:c0:59:f0:a3:8b:
11:0f:a7:5c:5c:cc:b4:5a:29:81:c1:95:21:37:e8:91:52:d0:
56:47:bd:56:3f:95:4e:85:d0:c2:5b:ab:f9:52:52:26:82:60:
5e:25:f3:f3:d5:eb:e9:b0:13:2a:d1:98:7a:8e:6e:68:23:d1:
bf:f5:7f:55:55:ff:03:6c:65:2d:a3:7d:f2:d3:da:be:83:0f:
de:c5:ad:da:b5:10:62:6f:7d:92:57:d6:78:85:77:92:98:65:
03:7d:4e:ad:95:ec:98:2c:56:01:d1:2f:ba:e5:19:d4:6a:95:
4a:6d:df:2c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjQxMTMwNDVaFw0yNjAzMjQxMTMwNDVaMBgxFjAU
BgNVBAMTDTY3ZTE0MjZlLTRmY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeydiMsvuiHN+Pm/Ra5bnIi2otrQaWFbGCqEprBMjKMu4rxAkiQbPHiAib
12EYqqaCl3uX82LPE+tGd1AKk2LEiWFibvdMhHB8Ga5vQ3fdjGAfOAMUb7NGn/KK
BRVL8o/QC1/20LzTvaEvE7Uo5QsBhSF7Ri6XPYFhMd7OLq/Uo/NPVzcjz9M56Qrm
WvC2xoVY9eaCIWI1Q8tJuAgelExz8m165RzW6aZOXhbevTiQjvkTre1rMEdUKwo0
s8RXTiVfhdJ058yWOy1YqLbJ1Z9WHQwn8626OiyG1UBYSXfPpM8jDJQfNcL3o4tu
Dupxg5Wo3C3I//J/caA6Vbo0m8sVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUO+XF
IAooGNHoixaZCCrTlbNKP38wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzcxQ0JDNDQyMDhBMzExRjA5NDA2MTk4MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+04wDQYJKoZIhvcNAQEL
BQADggEBAMmD79SN+gWDAs38y+Q9mqshe/oK1cEVyoE5/XgAUiRUeBs27bhXxQTH
WxIb7JKqtohoF1o9P8zdp6RaWKV9MTf2Rs8aodV1UH0LPBrcgKe7ZJ1JghZS8Moo
wNjvK8H+Cgx8PuKE7CPe8BoSX2Lane+7uQMauqHck0YiNVOaj5hzZZLXfIO++Y9j
9XfAWfCjixEPp1xczLRaKYHBlSE36JFS0FZHvVY/lU6F0MJbq/lSUiaCYF4l8/PV
6+mwEyrRmHqObmgj0b/1f1VV/wNsZS2jffLT2r6DD97Frdq1EGJvfZJX1niFd5KY
ZQN9Tq2V7JgsVgHRL7rlGdRqlUpt3yw=
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:12:38 2025 by rpki-client