Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B81044C6E47911EF9DC2A56A762E951A.roa
File: B81044C6E47911EF9DC2A56A762E951A.roa (raw, json)
Hash identifier: ebAd0Ej8f5hnOSs5Zigejf/h3+8z23osV7ET2vwASp0=
Subject key identifier: 70:B8:17:32:23:63:02:E8:94:E6:92:9E:DE:8D:E2:F1:7D:F8:69:D0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05B5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B81044C6E47911EF9DC2A56A762E951A.roa
Signing time: Thu 06 Feb 2025 11:01:30 +0000
ROA not before: Thu 06 Feb 2025 11:01:27 +0000
ROA not after: Fri 06 Feb 2026 11:01:27 +0000
asID: 149208
IP address blocks: 196.251.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 6 11:01:27 2025 GMT
Not After : Feb 6 11:01:27 2026 GMT
Subject: CN=67a4968a-eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:6a:d9:ed:8d:05:19:69:13:f5:a9:3e:31:
49:00:5c:58:18:bf:12:f1:28:85:ff:f2:2e:ba:cc:
bf:20:08:88:e7:c9:06:24:7c:d0:d2:7c:90:ea:d7:
be:04:d4:98:71:1f:00:f0:2d:8b:42:14:c4:b2:4a:
9f:5e:85:be:51:e5:58:22:b6:ff:c4:81:03:c9:d4:
86:b5:6a:0f:a0:68:15:ef:82:f3:b6:46:23:e5:f7:
6a:82:65:13:20:92:79:78:4a:0d:07:86:32:06:a6:
86:da:e0:9d:36:dc:41:8d:ff:c7:3d:13:9c:a1:c9:
b1:49:a6:41:97:93:d8:4b:8d:fe:3b:0a:18:38:75:
e7:8b:de:3f:ee:4c:be:cd:07:c4:4b:7b:7a:99:22:
89:05:27:b4:34:88:79:e8:0b:16:58:d1:84:48:0f:
35:5e:47:85:1e:42:78:3e:81:7e:ac:2c:ed:07:70:
c2:83:f7:e7:31:f9:fd:44:df:4f:48:2e:87:2f:d7:
a5:de:d7:a4:bf:86:5d:eb:9e:9d:d7:92:f5:2c:15:
e1:b5:60:11:29:18:64:34:a2:bf:f4:e5:28:28:c9:
40:e3:54:61:06:ae:06:cf:aa:11:66:97:86:9e:ba:
f3:f5:05:39:1a:c8:37:a5:39:76:29:36:19:a8:43:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:17:32:23:63:02:E8:94:E6:92:9E:DE:8D:E2:F1:7D:F8:69:D0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B81044C6E47911EF9DC2A56A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c7:1c:db:7d:44:5d:42:d7:89:be:28:c4:be:5b:31:a5:67:
fc:00:46:ff:2d:c5:27:22:86:4f:65:2e:4b:55:1d:46:f7:47:
63:51:91:d0:c1:9c:23:67:3b:13:a9:4a:a5:ba:11:cf:9f:57:
4c:72:42:ba:be:17:a3:e6:40:2a:7b:b1:52:ef:8d:bc:98:e6:
65:27:d7:f9:06:ac:09:fe:5a:7e:31:5d:13:a7:5f:05:6d:c5:
f3:28:67:7f:4a:86:19:18:e2:58:eb:8e:70:11:97:f5:35:2d:
24:8e:3a:53:40:b5:0a:5a:34:b4:a6:9b:72:2c:4d:d0:b8:e3:
03:f9:9e:a9:d1:c6:30:a8:d9:48:61:83:3e:f3:2c:bd:54:d7:
b8:3f:83:10:21:af:cb:57:c4:8e:10:c3:91:3e:23:89:68:cc:
6b:5d:79:05:f9:e1:90:91:41:7a:16:c6:0e:0b:dd:a7:0c:0b:
93:03:74:d2:01:08:40:3c:95:27:58:ad:09:e6:23:34:1d:c9:
28:66:80:3c:17:46:77:23:83:0a:7b:26:3c:f6:af:e7:1a:63:
a6:0f:10:1d:06:ff:66:37:ae:06:ff:c7:9d:86:e4:f7:3c:c2:
85:d6:6a:db:f9:13:e1:09:8d:57:48:e4:52:d6:e3:ba:79:90:
3f:75:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:13 2025 by rpki-client