Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BDC6D15AE87A11EFA55151A6762E951A.roa
File: BDC6D15AE87A11EFA55151A6762E951A.roa (raw, json)
Hash identifier: zv/gPGipq3k7+04nGXtwQ7aYqlAmInaihGFYLU1EcIo=
Subject key identifier: 1F:14:1A:66:AC:AC:3F:79:F1:8E:43:D2:BD:27:45:C8:B9:E8:98:94
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05F5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BDC6D15AE87A11EFA55151A6762E951A.roa
Signing time: Tue 11 Feb 2025 13:18:54 +0000
ROA not before: Tue 11 Feb 2025 13:18:43 +0000
ROA not after: Wed 11 Feb 2026 13:18:43 +0000
asID: 401120
IP address blocks: 196.251.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:18:43 2025 GMT
Not After : Feb 11 13:18:43 2026 GMT
Subject: CN=67ab4e3e-d8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:e7:92:1a:4d:bd:b2:12:64:90:d6:18:bb:
5f:91:31:d5:b3:59:f7:ba:be:b1:5d:86:4f:26:f0:
02:24:c1:46:fb:2f:82:35:63:3d:73:4f:48:a6:90:
51:7b:e1:38:23:9b:84:32:f9:a0:0c:f1:ea:33:b8:
39:89:47:33:f2:30:7a:23:16:2a:56:63:42:50:56:
ec:12:19:9e:c7:5c:ee:d6:d7:04:79:fb:37:0c:1a:
e2:2d:6d:cd:ad:59:e2:61:8f:92:39:53:68:c1:b8:
60:d3:46:5a:c8:fe:eb:d0:90:01:e7:6d:48:04:cd:
43:1d:65:47:fa:2a:5d:54:ba:83:e3:b7:7f:f8:94:
c6:2d:bd:4b:05:e6:4e:42:90:89:27:53:33:1f:bd:
0f:99:52:e1:ad:4a:90:72:6e:be:b4:e7:a4:93:ce:
b1:07:bb:fb:79:27:27:4c:79:38:5c:2e:92:2b:e6:
b7:5f:d7:cd:cb:f6:70:13:0f:fc:5b:4c:72:e3:f0:
8e:86:85:d3:c1:54:38:0f:f3:28:31:b2:26:04:5a:
8f:9e:68:f7:93:57:ae:d2:d6:f5:79:d1:9d:20:51:
2a:75:c2:9c:eb:52:f1:ec:68:4b:3a:9c:fc:24:e5:
3b:d3:59:7b:20:14:fe:08:4f:8c:e4:ac:47:67:50:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:14:1A:66:AC:AC:3F:79:F1:8E:43:D2:BD:27:45:C8:B9:E8:98:94
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BDC6D15AE87A11EFA55151A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:41:89:76:38:f8:74:66:69:f5:28:89:7d:11:8e:62:b6:9b:
71:4d:cd:f3:09:7e:e0:fd:cd:39:5d:a3:d0:dd:ef:ce:bb:a5:
e5:5e:e0:5f:1c:6b:b3:26:c1:7a:b4:51:20:f9:5e:6f:98:c1:
dc:d3:51:a1:4b:3d:3f:8a:0d:24:22:01:3e:a4:2b:ed:7e:e7:
ea:b7:93:9d:77:41:3c:f3:42:22:a4:15:41:74:43:9d:d3:38:
ae:c6:6e:99:9c:90:aa:69:01:26:49:6b:96:39:e1:da:ef:8b:
74:4a:84:07:73:81:c0:8c:68:90:f3:32:a2:89:3f:0b:ab:c5:
9d:de:5c:86:84:e8:a6:b5:75:1d:24:ed:7f:4a:6f:34:21:36:
5f:68:76:f5:83:a5:2f:46:cd:0e:e9:43:8a:e0:5a:9f:13:44:
31:6b:3f:a4:e6:24:46:48:59:57:7b:75:00:2f:14:37:51:7e:
e6:a9:c7:89:f0:88:e7:ce:62:bd:8f:49:75:a0:1d:b5:99:62:
5a:20:3f:81:14:65:52:90:29:7e:6c:3c:77:85:83:8c:f9:74:
8b:e5:52:fe:a3:07:be:17:c8:a3:b5:21:fd:de:7f:08:63:45:
7e:42:32:48:3c:c3:ac:2b:e7:35:90:b5:8b:73:30:87:60:21:
e0:e0:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:47 2025 by rpki-client