Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B86FFFB0ED2011EF8687C26A762E951A.roa
File: B86FFFB0ED2011EF8687C26A762E951A.roa (raw, json)
Hash identifier: PYMrgdzbxPZ5c07qLDhS4kTyRBcVZGopVSRDVAntRto=
Subject key identifier: 7D:6C:1D:2F:D8:77:8F:87:CF:0F:E8:07:2E:8E:76:B4:B5:72:68:12
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0663
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B86FFFB0ED2011EF8687C26A762E951A.roa
Signing time: Mon 17 Feb 2025 11:17:06 +0000
ROA not before: Mon 17 Feb 2025 11:17:02 +0000
ROA not after: Tue 17 Feb 2026 11:17:02 +0000
asID: 208485
IP address blocks: 196.251.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 11:17:02 2025 GMT
Not After : Feb 17 11:17:02 2026 GMT
Subject: CN=67b31ab2-7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:09:4b:d9:93:6d:40:39:b4:40:2f:db:d1:
43:23:05:68:f7:04:93:4f:a1:8e:10:d9:9b:6d:79:
90:05:cd:84:87:7b:a1:62:9e:5c:2c:8b:6f:26:d0:
b1:23:36:2f:cd:97:20:1b:4f:fc:25:29:c4:6a:70:
d4:9a:b7:0d:80:c2:64:e8:b7:0b:96:d8:bf:ba:57:
23:d8:b4:c6:be:09:1b:e6:b2:a6:b1:03:eb:84:42:
c9:f8:7c:d1:93:9b:1c:56:3c:99:ba:48:c7:83:4f:
9e:25:43:00:5a:5a:f9:ea:69:bb:7f:07:a6:76:78:
b7:c9:7f:07:a7:ff:ec:7f:7b:fd:b3:b8:00:b9:6d:
9b:73:76:6e:94:98:61:15:50:55:c1:e1:1d:4c:45:
38:b6:7d:39:9e:3d:ce:b6:76:c2:7e:af:f6:d3:40:
2b:c3:b6:e6:98:cd:90:b0:ec:07:12:36:4d:d8:7f:
e4:dd:14:f9:fc:0c:e6:b7:1a:e4:9d:a0:e1:1e:23:
d5:2b:aa:ab:ee:af:12:07:d1:56:9e:c6:0e:d3:e4:
1b:25:d3:54:d5:46:6e:1e:76:cb:87:17:6b:96:45:
f7:a8:ff:27:7f:49:95:3a:53:e4:b7:78:d5:db:9a:
d1:1b:fc:fc:b6:18:69:0c:4d:bc:95:b9:90:c4:c9:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:1D:2F:D8:77:8F:87:CF:0F:E8:07:2E:8E:76:B4:B5:72:68:12
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B86FFFB0ED2011EF8687C26A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.100.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ad:eb:cb:8a:a4:88:c2:c7:c7:78:fb:be:52:0e:a5:73:a9:
a5:2b:2f:7d:6c:ec:a5:67:31:54:21:ef:d2:20:54:b9:27:2c:
3a:5a:21:3f:2a:f8:7c:18:65:98:17:8a:e4:d5:10:b5:62:a1:
58:19:a8:37:56:5f:99:7e:8e:83:e1:6c:68:68:88:03:b3:61:
57:0b:45:61:c6:60:5f:b4:9f:ce:73:10:66:40:b2:68:c8:b6:
3b:09:73:c4:b5:bf:6f:82:94:5d:44:b0:f6:e3:11:58:ba:97:
55:87:8a:c4:87:01:82:c0:f3:d8:45:e4:b0:ee:6c:d7:ab:eb:
b0:19:64:86:31:6c:ad:bf:c3:fb:d3:cc:1c:a8:37:b2:2a:bf:
d5:2b:f6:f7:1c:1b:f6:f2:df:3f:8e:c7:d5:63:bd:a9:b9:a7:
6e:82:a8:80:97:2d:f2:25:fe:0a:0a:3f:92:a6:00:ff:1e:e6:
9a:8f:50:6b:d5:07:c9:e2:fa:81:cb:f4:4b:89:ab:74:a4:5f:
f8:1e:1c:dc:36:af:dd:59:0e:82:da:81:02:4f:78:87:dd:9a:
31:03:02:e7:f7:6a:c5:01:93:6d:c7:e7:2e:04:8a:0c:7c:13:
2f:bc:26:fe:8b:cd:51:42:a3:e2:f4:ac:38:ce:94:d4:ba:32:
96:d7:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:10 2025 by rpki-client