Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/78FF06EEE87C11EF8E8B11B0762E951A.roa
File: 78FF06EEE87C11EF8E8B11B0762E951A.roa (raw, json)
Hash identifier: mNIK1lyoWmkF+qL/FpUdJzMNFc/sFQ+T9ZkAixOo7bc=
Subject key identifier: 13:A1:D0:2D:41:7F:65:47:02:E8:B3:EF:DC:A8:FC:32:09:44:E9:8B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 061D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/78FF06EEE87C11EF8E8B11B0762E951A.roa
Signing time: Tue 11 Feb 2025 13:31:18 +0000
ROA not before: Tue 11 Feb 2025 13:31:14 +0000
ROA not after: Wed 11 Feb 2026 13:31:14 +0000
asID: 401116
IP address blocks: 196.251.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:31:14 2025 GMT
Not After : Feb 11 13:31:14 2026 GMT
Subject: CN=67ab5125-65a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:91:7e:ad:bb:99:d3:3e:36:a4:a0:f3:b5:
4b:ae:c6:fd:b0:86:c5:6b:13:a1:8f:fb:86:7a:f2:
b3:38:87:bb:2f:7a:41:10:00:48:d3:02:55:84:ec:
77:37:c8:5d:62:5b:75:e4:84:18:0a:75:15:08:f3:
e0:a9:4a:e6:1d:10:b6:bb:4d:6b:9d:a6:1e:7b:71:
a7:44:b0:66:d0:67:36:79:2e:01:6c:19:58:03:51:
95:8c:7f:9e:b5:bd:9a:2b:95:36:d7:d8:21:95:34:
64:f0:2e:a1:13:17:96:0d:a7:23:45:84:88:56:a9:
5a:8e:c4:64:48:81:86:3c:36:55:0b:6a:ed:9e:35:
29:56:19:e2:7c:5c:12:0f:fd:86:8a:5a:59:c2:f4:
11:75:89:a1:bb:dc:0d:9c:37:24:75:2a:25:1e:7a:
ff:a1:7e:6f:00:2c:01:23:f1:1d:16:22:49:25:42:
35:05:e8:1c:ad:90:38:91:81:dd:11:82:6c:bd:e2:
d4:15:39:a4:ff:da:8a:de:96:17:27:46:42:0a:ba:
39:fa:a7:26:41:89:f1:2d:c7:12:79:05:4d:f9:05:
a2:f9:08:34:28:68:ad:65:0e:98:da:f4:a0:17:10:
c0:25:97:d8:42:93:c0:b5:76:4d:44:76:cb:01:c0:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:D0:2D:41:7F:65:47:02:E8:B3:EF:DC:A8:FC:32:09:44:E9:8B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/78FF06EEE87C11EF8E8B11B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.114.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9d:1f:2a:42:ef:94:61:58:98:f3:be:67:77:2b:6b:64:ce:
e4:84:68:74:77:58:31:f5:25:71:54:79:69:2d:6a:d8:92:d8:
f2:46:8c:14:71:d5:8b:30:eb:d3:6b:f1:2f:ef:97:10:bb:f7:
3e:c3:75:4b:93:b8:a6:c1:b0:8a:14:ef:2f:34:33:c8:8f:db:
bf:00:dc:5a:79:94:4a:56:e7:09:83:f3:ba:68:4f:5c:97:4b:
0b:ff:a4:b2:eb:b7:b5:de:c5:f4:10:5f:e2:fd:6e:56:3f:c1:
95:f8:2c:ac:e3:fa:06:2c:60:c8:c4:07:c0:36:cb:d4:11:ed:
b6:63:d7:cb:25:ae:8c:b0:16:43:cd:37:39:bc:e6:e5:65:71:
90:69:b3:e1:2c:42:d2:a4:a8:b9:b8:72:ad:57:4c:52:d2:84:
e0:e2:41:53:29:da:a1:1f:22:11:c4:ec:e5:71:80:05:cd:33:
f3:92:0d:22:00:dc:d0:5a:13:95:cc:78:77:d4:4b:bb:11:2c:
3c:7d:63:59:7f:4a:e2:2a:23:ca:29:ac:38:86:4c:ad:43:57:
e3:f7:ba:98:43:05:35:6f:ca:19:22:a0:16:dc:33:01:89:89:
3f:46:ed:95:ed:83:3e:0b:70:a5:ca:a9:32:7b:41:77:c4:4d:
91:3c:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:52 2025 by rpki-client