Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/82A7B72802ED11F08E8AD44A762E951A.roa
File: 82A7B72802ED11F08E8AD44A762E951A.roa (raw, json)
Hash identifier: pRX3rrYxQoXsInwyCbtw6gOJg3j6LS1XHE3WU3VMzcw=
Subject key identifier: 20:EE:F6:23:73:EE:4F:A7:88:FF:5A:18:D6:96:FB:C1:8E:26:15:0E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 070E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/82A7B72802ED11F08E8AD44A762E951A.roa
Signing time: Mon 17 Mar 2025 05:05:57 +0000
ROA not before: Mon 17 Mar 2025 05:05:53 +0000
ROA not after: Tue 17 Mar 2026 05:05:53 +0000
asID: 401120
IP address blocks: 196.251.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 17 05:05:53 2025 GMT
Not After : Mar 17 05:05:53 2026 GMT
Subject: CN=67d7adb5-a71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:cc:4e:ba:bb:46:85:3b:fd:56:71:4f:84:
39:42:48:b2:e5:b0:e4:f7:2e:a7:d7:76:94:8b:5a:
7d:c3:2c:ed:f6:7c:97:11:e9:7c:c0:bd:30:f7:c7:
96:b1:0f:27:b7:3e:21:ad:1a:7a:fa:e5:d6:f0:5b:
e1:b4:5e:49:07:90:2a:2a:80:44:bb:85:7a:42:f5:
75:77:d9:b9:05:a9:9e:1d:7d:1b:ec:2d:a9:dc:a0:
63:cf:c6:38:a9:74:ca:58:73:35:2e:22:18:01:dd:
18:a4:82:e0:58:f8:66:b8:d1:e2:19:58:95:0c:4e:
dc:af:27:75:0f:4c:2e:76:39:ed:0a:3a:3d:1b:b8:
9d:59:d2:0a:e5:80:7a:7c:97:7b:ac:2a:e2:3c:23:
ba:f0:c6:81:5e:77:18:7f:56:e2:4e:5c:98:fa:d6:
9f:fa:1f:97:d8:e4:df:26:96:05:8f:12:d3:ab:6d:
e1:42:9f:be:58:03:bb:bc:42:2e:c6:b8:b4:0d:92:
7c:b0:00:86:f4:85:90:a7:d9:2f:51:a2:8d:ee:1c:
d8:59:6d:24:ed:c4:6a:be:20:a2:54:ff:19:fd:b3:
b9:a7:21:e8:c1:41:9c:66:e1:cc:6a:c8:e4:8a:1f:
0e:74:45:96:e4:94:e2:13:64:b1:b0:1e:93:42:59:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EE:F6:23:73:EE:4F:A7:88:FF:5A:18:D6:96:FB:C1:8E:26:15:0E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/82A7B72802ED11F08E8AD44A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.72.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8a:46:0c:2d:46:1f:4d:eb:45:9a:24:49:89:80:5f:ba:c8:
d5:6d:20:4a:71:f1:3b:c6:c5:1a:9f:41:f3:98:d8:17:b1:cf:
5f:5c:c5:af:25:94:1b:6f:c9:bc:58:43:fe:d3:c1:02:b6:c2:
e0:9c:37:0d:97:46:46:76:28:1f:0a:70:f5:90:e8:e8:53:4e:
cd:b9:31:91:83:91:d6:99:5c:20:2c:d9:9d:a7:ab:48:ac:c4:
fd:76:81:a4:e9:bb:4a:19:de:4a:f2:fc:70:c7:4d:d7:8a:8c:
61:58:ca:80:ef:5f:4e:d9:af:40:13:3b:60:52:6d:1b:f4:8b:
b6:c9:39:9e:0f:80:48:ac:67:22:8f:0d:54:62:92:a1:04:a9:
a1:e2:02:42:e3:76:dc:a7:f1:75:c3:11:5c:56:f2:7f:90:c9:
3a:3b:9e:77:e4:51:d9:7f:9d:fc:dc:b6:4e:7e:a7:36:87:62:
8e:3b:d6:80:7e:07:ae:0f:23:63:2e:3e:07:44:62:5c:33:b7:
78:c8:8b:77:1b:77:41:d4:11:5b:c6:db:d1:e1:51:60:bc:09:
b8:b4:26:c8:3e:a1:71:05:25:25:25:2e:7a:ae:02:a4:ce:2b:
79:41:1d:23:e2:f8:8c:ed:d2:91:03:c6:86:bf:fb:8f:4f:5f:
8b:c8:a7:60
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMTcwNTA1NTNaFw0yNjAzMTcwNTA1NTNaMBgxFjAU
BgNVBAMTDTY3ZDdhZGI1LWE3MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7DcxOurtGhTv9VnFPhDlCSLLlsOT3LqfXdpSLWn3DLO32fJcR6XzAvTD3
x5axDye3PiGtGnr65dbwW+G0XkkHkCoqgES7hXpC9XV32bkFqZ4dfRvsLancoGPP
xjipdMpYczUuIhgB3RikguBY+Ga40eIZWJUMTtyvJ3UPTC52Oe0KOj0buJ1Z0grl
gHp8l3usKuI8I7rwxoFedxh/VuJOXJj61p/6H5fY5N8mlgWPEtOrbeFCn75YA7u8
Qi7GuLQNknywAIb0hZCn2S9Roo3uHNhZbSTtxGq+IKJU/xn9s7mnIejBQZxm4cxq
yOSKHw50RZbklOITZLGwHpNCWZgNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIO72
I3PuT6eI/1oY1pb7wY4mFQ4wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzgyQTdCNzI4MDJFRDExRjA4RThBRDQ0QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+0gwDQYJKoZIhvcNAQEL
BQADggEBAHaKRgwtRh9N60WaJEmJgF+6yNVtIEpx8TvGxRqfQfOY2Bexz19cxa8l
lBtvybxYQ/7TwQK2wuCcNw2XRkZ2KB8KcPWQ6OhTTs25MZGDkdaZXCAs2Z2nq0is
xP12gaTpu0oZ3kry/HDHTdeKjGFYyoDvX07Zr0ATO2BSbRv0i7bJOZ4PgEisZyKP
DVRikqEEqaHiAkLjdtyn8XXDEVxW8n+QyTo7nnfkUdl/nfzctk5+pzaHYo471oB+
B64PI2MuPgdEYlwzt3jIi3cbd0HUEVvG29HhUWC8Cbi0Jsg+oXEFJSUlLnquAqTO
K3lBHSPi+Izt0pEDxoa/+49PX4vIp2A=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:55 2025 by rpki-client