Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9BD2596A405011F08D03908BDAE4EC9C.roa
File: 9BD2596A405011F08D03908BDAE4EC9C.roa (raw, json)
Hash identifier: ND03VC3jKr4FkcgY1XFCVZSP3WwHNuuw0dTojdXSfqg=
Subject key identifier: 7D:C7:34:72:7D:68:FA:1D:2F:49:1B:7E:5B:AE:3F:94:F0:07:54:43
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B0B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9BD2596A405011F08D03908BDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 07:59:01 +0000
ROA not before: Tue 03 Jun 2025 07:58:56 +0000
ROA not after: Wed 03 Jun 2026 07:58:56 +0000
asID: 9304
IP address blocks: 196.251.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2827 (0xb0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 3 07:58:56 2025 GMT
Not After : Jun 3 07:58:56 2026 GMT
Subject: CN=683eab45-b4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:94:58:43:01:85:ba:8f:01:22:72:e2:c3:
8c:68:95:dd:86:cd:2f:cf:63:28:4f:f3:29:c9:89:
49:6a:b1:56:19:76:bf:6e:fb:83:d9:45:4f:2f:38:
e2:ae:d8:1e:79:42:2c:fc:b6:b0:75:0d:f4:3f:74:
6b:fa:9c:1b:5e:06:83:ca:21:fa:f2:7b:f7:29:45:
e2:dc:f0:71:24:39:a0:8f:a1:e6:81:ee:26:11:fd:
fc:e9:84:0a:89:fb:3d:3e:ae:d9:13:fc:a5:74:f5:
36:60:fc:ef:b0:f8:16:e4:d7:62:64:6b:5b:9b:23:
2c:3e:58:d1:e4:b2:b6:4f:46:e9:71:c9:7e:5d:05:
5f:b4:c3:9d:e1:16:62:5f:8c:ee:72:4c:6d:56:ad:
8c:34:81:47:e3:98:24:af:85:2a:5c:59:19:40:9f:
46:20:a5:aa:8f:26:df:da:8e:28:67:16:dd:76:b6:
d6:41:ff:d7:2f:be:0a:0a:f0:1d:11:3c:5a:94:3f:
89:cc:c7:0b:99:ac:ca:3c:d2:d2:5b:0d:c1:02:9f:
c3:eb:36:8a:e0:5d:be:19:a6:f9:e3:75:c0:d7:44:
2b:53:34:ad:ae:4e:ed:eb:df:18:bd:1b:9a:84:a9:
5b:70:68:b0:82:48:06:72:61:ae:92:aa:5f:98:b9:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C7:34:72:7D:68:FA:1D:2F:49:1B:7E:5B:AE:3F:94:F0:07:54:43
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9BD2596A405011F08D03908BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.119.0/24
Signature Algorithm: sha256WithRSAEncryption
10:05:89:8b:a6:3a:d5:7b:0d:67:1e:43:ae:f6:2f:46:00:73:
f6:e1:30:c6:0f:b4:2e:83:05:13:de:ac:96:4c:c5:99:a1:db:
9c:aa:95:db:f9:4c:56:8a:e2:64:bc:6e:f2:21:e9:84:bc:b7:
16:e7:ef:d0:68:9f:8d:c0:05:91:af:6d:47:67:8c:98:76:72:
ad:c7:27:e9:f7:f0:14:63:7c:60:84:35:b2:76:85:b1:9f:39:
57:87:b4:79:a3:2b:19:14:59:b5:28:e0:2c:f2:e5:6e:f1:84:
a2:ff:ce:c4:f0:26:01:7a:04:0e:8b:f0:ac:b9:5e:40:8e:be:
53:9e:48:04:a8:ce:0b:df:8c:cc:e2:db:27:a9:91:8a:53:9b:
5e:ba:47:d5:6d:93:a9:04:ae:ea:4c:57:da:27:90:13:aa:60:
d7:8b:9e:9e:7c:ea:d9:71:07:e9:87:fc:93:ad:c0:69:a5:ba:
ab:b6:89:35:78:d7:96:ce:60:92:b0:ce:fc:e1:15:3b:1a:6d:
81:00:67:e8:56:71:88:b8:43:44:7f:72:31:29:49:a6:dc:14:
e3:a9:2a:7c:7f:e5:35:e2:7b:7d:e0:fe:d3:a8:96:cb:e0:da:
8d:dd:47:0b:a5:85:bb:98:10:66:02:54:71:56:ff:7d:db:06:
2c:5e:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:31:37 2025 by rpki-client