Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BDCF31AAE87B11EF92595CAB762E951A.roa
File: BDCF31AAE87B11EF92595CAB762E951A.roa (raw, json)
Hash identifier: 7ElJSTzYf0MBFJCPs++0CTjQrnkDPRw1zg/EbhCOKNs=
Subject key identifier: BC:E2:BF:0C:D6:E2:CE:6F:79:9E:F4:23:52:25:94:F0:1B:D8:15:15
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05FD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BDCF31AAE87B11EF92595CAB762E951A.roa
Signing time: Tue 11 Feb 2025 13:26:04 +0000
ROA not before: Tue 11 Feb 2025 13:25:59 +0000
ROA not after: Wed 11 Feb 2026 13:25:59 +0000
asID: 401109
IP address blocks: 196.251.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1533 (0x5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:25:59 2025 GMT
Not After : Feb 11 13:25:59 2026 GMT
Subject: CN=67ab4feb-c30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:68:17:74:6a:59:91:55:a4:8a:93:b9:47:
2e:7f:dd:dd:4f:ff:45:cf:97:19:41:a5:a9:85:cf:
1b:ec:66:81:bf:f1:07:39:b5:c3:30:5d:8d:65:2b:
a3:b3:14:ae:18:a8:57:a6:58:60:a4:8f:3e:1b:f7:
e5:5c:83:3b:a7:60:58:c6:81:9a:90:51:b3:fe:69:
db:a8:bf:35:ff:ee:d4:7a:8b:ad:fc:ec:28:61:95:
87:af:a9:ed:98:78:8b:57:a2:a1:df:07:a0:12:a9:
92:bd:56:e5:39:fc:0f:06:ef:99:06:38:8a:16:6b:
2e:d6:c6:22:dd:7d:c9:a3:eb:7f:a6:c5:64:4e:e8:
bb:55:73:62:66:a9:7f:25:9e:07:17:52:47:17:f2:
6a:19:28:5d:60:15:38:e2:3b:dd:58:8b:44:64:1b:
e1:0d:60:4e:a8:b0:96:b7:d9:49:5c:b7:7a:9b:42:
66:8f:12:89:02:d4:8b:3f:92:b8:35:6d:e5:3b:3a:
49:c9:2d:f8:58:a7:8f:f8:a6:74:aa:26:c0:04:1f:
91:a6:79:3c:c1:cb:3a:a3:ad:f0:4b:09:5f:0f:e6:
39:81:5e:8f:4a:92:e5:06:e2:85:d0:da:6f:9d:5b:
10:8d:aa:fe:ae:57:61:92:8c:40:c0:f1:2c:b1:29:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E2:BF:0C:D6:E2:CE:6F:79:9E:F4:23:52:25:94:F0:1B:D8:15:15
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BDCF31AAE87B11EF92595CAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.92.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6b:e0:b2:fa:62:ae:1f:e3:39:13:08:6d:f6:46:ed:3c:06:
ad:5b:77:ed:be:2e:be:0b:c2:f3:85:cb:ea:70:f0:ad:f6:40:
e2:94:cd:9c:07:ac:b9:15:62:d2:6a:13:b3:5c:64:e3:99:8d:
d1:5f:77:4e:54:08:55:dd:14:5d:10:36:dd:66:77:19:19:db:
b3:9d:3d:85:6c:a6:e9:8b:e8:c1:6d:27:a5:dd:e0:83:60:a2:
99:a2:6f:1b:e1:2e:a9:ab:a6:0d:99:dd:2f:40:2f:d0:7f:35:
e3:4f:9f:cb:55:e6:80:14:cc:62:f2:8f:a0:c5:b5:26:c4:cf:
90:9c:d1:bc:3c:94:11:9f:14:11:00:bc:7e:1a:9b:b0:c0:b0:
a2:9a:f2:07:26:eb:76:0e:84:04:e5:a5:1d:fa:da:d3:45:4b:
83:0e:50:61:a6:8c:58:4d:7f:77:f3:ea:02:24:75:8b:f0:88:
b1:66:9a:3e:80:c8:f2:5a:e6:e0:d4:01:0f:79:48:ea:89:11:
21:b4:55:15:25:ac:d5:82:d5:4f:30:87:f1:a8:83:ff:a7:f9:
91:13:7b:c2:86:f5:19:aa:2e:fd:97:1f:e6:09:10:79:49:f2:
c3:33:aa:bb:49:55:36:9b:fd:28:34:10:42:0c:75:27:c0:08:
93:5e:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:39:03 2025 by rpki-client