Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C123AA7A02ED11F0A7ABA04C762E951A.roa
File: C123AA7A02ED11F0A7ABA04C762E951A.roa (raw, json)
Hash identifier: IrckeyRCT5UdqZUvH9JbvOtw2YmgYKyfoyCf74d/IpA=
Subject key identifier: 9F:B3:9A:80:E9:36:8D:5D:A2:2C:30:AF:DA:24:12:EC:D0:E1:32:D5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0710
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C123AA7A02ED11F0A7ABA04C762E951A.roa
Signing time: Mon 17 Mar 2025 05:07:42 +0000
ROA not before: Mon 17 Mar 2025 05:07:38 +0000
ROA not after: Tue 17 Mar 2026 05:07:38 +0000
asID: 401120
IP address blocks: 196.251.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 17 05:07:38 2025 GMT
Not After : Mar 17 05:07:38 2026 GMT
Subject: CN=67d7ae1e-5b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:22:b9:6a:f8:8c:03:01:4f:5e:14:84:ec:
78:8f:6f:ee:7f:57:19:ea:67:51:77:97:ff:90:60:
c1:f1:b6:13:a3:46:f1:52:c8:68:f2:94:21:91:21:
17:7b:60:10:d5:0a:3f:53:f9:42:72:80:6b:e2:77:
2a:f5:0b:1a:72:59:a7:6a:58:05:c2:67:2e:ad:b0:
72:19:20:0e:0b:08:46:7a:d3:84:64:61:a4:09:08:
34:f8:eb:c3:d9:57:3d:c4:ab:a8:6b:79:e3:bf:c0:
20:9c:7e:c3:64:dd:8f:38:61:33:2f:1d:20:f9:d3:
6a:ff:55:30:d8:c3:0c:61:b1:6b:8d:68:b1:37:a8:
aa:d9:97:cb:bd:cf:ba:49:f4:a3:1b:fb:95:29:3f:
24:6c:1a:bf:64:1d:b0:6a:be:f3:92:d2:d9:33:ab:
b6:f9:fb:80:1e:b2:a7:ab:e0:e4:ec:16:ff:0c:c9:
e2:85:6d:d6:53:62:47:bc:84:4a:c0:82:e4:e1:6f:
4e:b9:d3:96:1a:7c:f2:9c:91:a1:55:93:cf:1f:9a:
58:d5:62:5a:e4:7c:00:c0:74:84:ef:a9:39:56:35:
78:e8:a0:0b:63:8d:63:51:f2:39:0d:4a:3f:6f:5b:
67:0a:14:25:f6:34:8b:54:36:cc:bb:df:91:f7:ec:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B3:9A:80:E9:36:8D:5D:A2:2C:30:AF:DA:24:12:EC:D0:E1:32:D5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C123AA7A02ED11F0A7ABA04C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.73.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:4f:31:97:ed:bb:d1:d4:46:74:61:ba:e5:d5:ee:4a:5b:b9:
b1:85:75:6f:f0:a6:ec:f3:70:c2:6f:ae:11:23:02:5c:0f:3e:
4f:c5:d2:3d:86:32:52:d8:16:aa:8a:c8:f8:c8:91:80:fc:b5:
79:cd:f7:81:d8:9c:9f:8d:46:38:84:88:b9:e5:57:1e:e3:8f:
3c:1f:4f:75:0a:8d:9b:f4:c6:52:dc:a5:ea:7e:aa:c1:a9:73:
eb:8b:65:b0:4a:1f:30:c1:b8:59:06:30:83:e0:96:ee:e1:1c:
14:6e:1e:a8:ff:2e:6b:58:cb:b0:5b:f3:8b:36:88:de:dd:68:
3c:d4:71:0d:fa:dd:ff:b5:fe:da:6f:b3:64:f9:19:c4:a2:ca:
66:18:d0:a6:bd:d4:4c:2d:a4:6c:d2:2f:aa:10:b4:39:02:cf:
c5:c7:95:81:a7:88:e2:3f:18:9f:88:be:46:55:62:60:72:bf:
57:da:2c:32:43:f1:8f:1e:49:ba:40:da:72:b5:e7:e6:e9:f6:
fa:88:70:45:56:d3:90:48:2f:0c:06:0e:71:31:25:9d:a2:14:
e2:34:7d:9f:f2:08:93:e3:57:8f:66:89:a3:b1:f4:b1:42:45:
14:8c:9a:c9:48:64:ec:f3:7e:92:d1:b4:0d:82:68:db:ce:a9:
63:e0:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:58:14 2025 by rpki-client