Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7F554A1C08A211F0B8B34379762E951A.roa
File: 7F554A1C08A211F0B8B34379762E951A.roa (raw, json)
Hash identifier: PfJfAXQzXqeanWPvfefO2ddV1TyYkHzDqCCV693NXUE=
Subject key identifier: AB:48:A7:55:40:8A:43:99:D4:EA:3F:60:57:16:1E:6A:D1:F1:07:3D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07E4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7F554A1C08A211F0B8B34379762E951A.roa
Signing time: Mon 24 Mar 2025 11:24:06 +0000
ROA not before: Mon 24 Mar 2025 11:24:03 +0000
ROA not after: Tue 24 Mar 2026 11:24:03 +0000
asID: 2914
IP address blocks: 196.251.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:24:03 2025 GMT
Not After : Mar 24 11:24:03 2026 GMT
Subject: CN=67e140d6-3d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:98:85:98:67:be:72:01:26:bb:1a:5d:1d:
64:89:91:49:ee:da:3e:d7:a3:3d:53:cd:7b:94:a6:
ae:b1:21:f6:81:70:16:5a:6f:16:6b:c7:30:79:05:
26:50:63:89:02:f6:dd:b8:bf:13:bc:4b:aa:9e:e0:
04:fb:61:19:d5:f7:a6:ea:a5:bd:7d:de:1a:35:07:
22:f6:5a:9b:e7:1c:46:16:21:cc:66:13:e7:30:2a:
c0:23:71:be:c2:d5:35:2a:24:5f:e6:0d:20:f6:6a:
3d:b5:00:40:20:fc:c5:87:62:ea:67:ea:11:49:e5:
e2:fd:e8:f3:e4:30:76:28:ce:06:1c:58:55:b0:38:
3b:c3:c2:e5:a4:41:a3:ed:0d:d9:6a:02:94:6a:ce:
e9:bc:1b:05:6f:be:3f:35:4f:07:75:9e:92:a6:7b:
05:25:90:5b:14:f3:1e:6d:0c:fe:f6:0a:f4:06:64:
8d:29:a7:ba:ea:da:c8:85:e5:a3:eb:04:6b:2c:5f:
11:23:9c:0c:71:da:71:32:2c:e6:8a:a6:e6:4f:ff:
a6:af:82:db:00:13:c9:99:f6:a1:59:51:89:ee:77:
31:0d:a5:ac:e9:7c:02:d4:6d:8d:a9:b8:f2:de:d2:
87:d6:2e:a7:be:e0:6d:8b:8c:ae:9e:6a:53:fa:8b:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:A7:55:40:8A:43:99:D4:EA:3F:60:57:16:1E:6A:D1:F1:07:3D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7F554A1C08A211F0B8B34379762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.110.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5e:22:31:11:56:6a:c1:1c:d3:4c:f1:e6:b0:77:7b:c7:45:
44:72:6e:b0:27:39:0b:dd:5e:fa:58:0d:a2:47:36:da:a3:0e:
cf:9e:5e:4f:f1:16:73:b7:0a:dc:5a:21:37:49:a6:64:7b:1f:
3a:bd:3a:0f:c7:00:05:d6:3c:73:90:43:93:df:ef:6a:96:22:
96:10:3e:62:e5:0b:d7:23:06:b9:e9:e4:96:ac:fc:56:22:f5:
b6:69:92:ef:c7:6b:7e:7d:f7:ce:21:d5:eb:3a:09:a4:37:04:
a8:40:b5:c9:8b:74:bd:41:53:72:27:54:9b:5f:c6:9a:8c:87:
17:26:0a:46:d1:cb:14:39:95:0f:c0:01:fe:92:3f:83:38:21:
df:2b:e3:81:1d:b5:1a:77:38:80:d9:9a:11:3a:7b:a6:69:9d:
1e:58:30:03:3e:07:14:44:8d:82:ef:cc:2a:59:3b:30:db:41:
62:29:01:02:23:71:d8:21:dd:b8:66:15:26:3a:56:74:89:bc:
c4:bc:a5:93:d7:c2:f0:9a:d7:17:da:35:76:69:98:46:42:f0:
a7:d7:88:8a:c7:2b:85:41:84:64:ed:c8:5d:43:fc:97:25:d8:
26:08:4d:2c:e7:a7:7e:15:fd:45:7e:a0:f5:11:76:11:c7:bb:
62:4a:89:31
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjQxMTI0MDNaFw0yNjAzMjQxMTI0MDNaMBgxFjAU
BgNVBAMTDTY3ZTE0MGQ2LTNkMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWjpiFmGe+cgEmuxpdHWSJkUnu2j7Xoz1TzXuUpq6xIfaBcBZabxZrxzB5
BSZQY4kC9t24vxO8S6qe4AT7YRnV96bqpb193ho1ByL2WpvnHEYWIcxmE+cwKsAj
cb7C1TUqJF/mDSD2aj21AEAg/MWHYupn6hFJ5eL96PPkMHYozgYcWFWwODvDwuWk
QaPtDdlqApRqzum8GwVvvj81Twd1npKmewUlkFsU8x5tDP72CvQGZI0pp7rq2siF
5aPrBGssXxEjnAxx2nEyLOaKpuZP/6avgtsAE8mZ9qFZUYnudzENpazpfALUbY2p
uPLe0ofWLqe+4G2LjK6ealP6iyLjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUq0in
VUCKQ5nU6j9gVxYeatHxBz0wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzdGNTU0QTFDMDhBMjExRjBCOEIzNDM3OTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+24wDQYJKoZIhvcNAQEL
BQADggEBABVeIjERVmrBHNNM8eawd3vHRURybrAnOQvdXvpYDaJHNtqjDs+eXk/x
FnO3CtxaITdJpmR7Hzq9Og/HAAXWPHOQQ5Pf72qWIpYQPmLlC9cjBrnp5Jas/FYi
9bZpku/Ha359984h1es6CaQ3BKhAtcmLdL1BU3InVJtfxpqMhxcmCkbRyxQ5lQ/A
Af6SP4M4Id8r44EdtRp3OIDZmhE6e6ZpnR5YMAM+BxREjYLvzCpZOzDbQWIpAQIj
cdgh3bhmFSY6VnSJvMS8pZPXwvCa1xfaNXZpmEZC8KfXiIrHK4VBhGTtyF1D/Jcl
2CYITSznp34V/UV+oPURdhHHu2JKiTE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:21 2025 by rpki-client