Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A1739CB4054811F09B3EC994762E951A.roa
File: A1739CB4054811F09B3EC994762E951A.roa (raw, json)
Hash identifier: YeGhfQ2nf/Suw1IYaLrEeBzD+c7GGksp/U96WlcJ4gk=
Subject key identifier: BB:EB:A9:BD:76:26:C1:17:A3:73:4A:02:39:DE:3A:CD:43:D2:BD:C2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0776
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A1739CB4054811F09B3EC994762E951A.roa
Signing time: Thu 20 Mar 2025 05:03:15 +0000
ROA not before: Thu 20 Mar 2025 05:03:12 +0000
ROA not after: Tue 01 Dec 2026 05:03:12 +0000
asID: 401115
IP address blocks: 196.251.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910 (0x776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 20 05:03:12 2025 GMT
Not After : Dec 1 05:03:12 2026 GMT
Subject: CN=67dba193-58e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:ab:2d:ce:fb:29:5b:99:97:73:79:af:85:
ba:c9:e8:c2:7f:e1:4e:74:51:c3:1c:1a:49:09:bc:
b1:a4:da:05:f4:38:df:bb:0e:c1:d0:40:50:65:ee:
f7:7a:b8:04:9d:dc:14:f5:f0:ac:2c:6d:27:5b:f4:
77:52:32:e9:4c:d7:b6:e5:3f:67:66:c0:83:07:7c:
c6:e1:68:3a:76:2c:44:84:7c:93:78:5a:07:af:bc:
4b:8c:ba:a3:62:b9:34:10:d2:39:d9:47:44:69:7a:
7d:fe:bf:d8:3a:67:3b:7c:65:2e:16:5e:91:d8:b6:
c9:a2:55:2e:c5:32:94:b7:98:f0:49:11:90:c7:a7:
9b:70:18:01:d9:34:8d:09:ef:93:f0:a1:54:d1:f1:
8c:e0:31:36:ab:56:a7:e0:83:da:ff:ee:d8:77:92:
26:50:d3:13:d4:76:c5:fe:20:8f:fc:c3:1d:d9:46:
f5:c4:41:65:20:da:e8:72:07:54:e8:3d:e3:c0:78:
68:ec:46:a7:8c:3b:c0:0c:b1:cb:e0:22:cd:6a:8c:
32:fe:1b:41:a7:b9:cb:7d:93:04:8d:57:c9:37:96:
dd:fe:b1:dd:12:f8:21:ec:ff:98:f1:b8:01:51:79:
b8:6e:ba:44:d4:ef:de:84:52:db:e4:41:2d:41:1e:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:A9:BD:76:26:C1:17:A3:73:4A:02:39:DE:3A:CD:43:D2:BD:C2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A1739CB4054811F09B3EC994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.71.0/24
Signature Algorithm: sha256WithRSAEncryption
67:72:6a:f4:4c:c8:f9:e4:86:d0:85:99:72:c8:11:db:21:b8:
fc:fc:f3:d7:29:86:7b:6a:64:73:6b:40:cb:6d:22:3a:f2:8b:
a0:be:38:a9:81:58:f1:48:83:4f:ac:93:57:1e:f7:dc:0b:c7:
ea:99:85:9d:ec:32:86:da:6a:56:71:1c:3e:32:4b:c5:41:ca:
82:6d:84:ab:07:4e:c5:4b:ee:3d:5c:54:9c:0a:82:6b:9f:1b:
5b:3b:0a:75:0e:c3:a6:79:7b:ce:c4:b2:da:1b:a9:3b:f6:c1:
cd:72:a1:13:63:ab:38:99:38:bb:1d:69:be:97:6a:c0:2c:a6:
be:42:6e:66:0c:b5:0e:c0:bb:b3:40:e9:9e:ff:90:00:f1:ce:
39:7a:14:57:73:6e:54:0f:cb:b1:da:97:e3:eb:0f:d5:77:16:
23:6b:8f:3e:34:8f:18:29:67:4c:50:fb:83:86:57:af:96:14:
5d:d6:e4:49:3e:ac:89:12:1b:db:7b:89:6b:72:62:7b:2c:df:
3f:07:5c:60:90:76:82:4b:53:ef:39:13:39:58:3e:f2:4a:83:
92:c2:1a:6b:69:41:e1:5e:df:85:04:ef:1b:40:cd:98:6e:7f:
7d:b6:a0:db:f5:4e:52:11:c0:86:f6:67:78:12:34:ac:8b:50:
bb:29:66:8d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjAwNTAzMTJaFw0yNjEyMDEwNTAzMTJaMBgxFjAU
BgNVBAMTDTY3ZGJhMTkzLTU4ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB4astzvspW5mXc3mvhbrJ6MJ/4U50UcMcGkkJvLGk2gX0ON+7DsHQQFBl
7vd6uASd3BT18KwsbSdb9HdSMulM17blP2dmwIMHfMbhaDp2LESEfJN4WgevvEuM
uqNiuTQQ0jnZR0Rpen3+v9g6Zzt8ZS4WXpHYtsmiVS7FMpS3mPBJEZDHp5twGAHZ
NI0J75PwoVTR8YzgMTarVqfgg9r/7th3kiZQ0xPUdsX+II/8wx3ZRvXEQWUg2uhy
B1ToPePAeGjsRqeMO8AMscvgIs1qjDL+G0Gnuct9kwSNV8k3lt3+sd0S+CHs/5jx
uAFRebhuukTU796EUtvkQS1BHtnZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUu+up
vXYmwRejc0oCOd46zUPSvcIwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0ExNzM5Q0I0MDU0ODExRjA5QjNFQzk5NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+0cwDQYJKoZIhvcNAQEL
BQADggEBAGdyavRMyPnkhtCFmXLIEdshuPz889cphntqZHNrQMttIjryi6C+OKmB
WPFIg0+sk1ce99wLx+qZhZ3sMobaalZxHD4yS8VByoJthKsHTsVL7j1cVJwKgmuf
G1s7CnUOw6Z5e87EstobqTv2wc1yoRNjqziZOLsdab6XasAspr5CbmYMtQ7Au7NA
6Z7/kADxzjl6FFdzblQPy7Hal+PrD9V3FiNrjz40jxgpZ0xQ+4OGV6+WFF3W5Ek+
rIkSG9t7iWtyYnss3z8HXGCQdoJLU+85EzlYPvJKg5LCGmtpQeFe34UE7xtAzZhu
f322oNv1TlIRwIb2Z3gSNKyLULspZo0=
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:12 2025 by rpki-client