Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E6B100D23D6011F09342B3EDDAE4EC9C.roa
File: E6B100D23D6011F09342B3EDDAE4EC9C.roa (raw, json)
Hash identifier: TQdtQyrA8ESZWYkgQLwg+VoRkmqNk129qVqZruPXaPU=
Subject key identifier: 73:F4:A9:8B:D1:2F:C6:46:C7:97:54:31:37:89:4C:5D:39:16:DB:31
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AE9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E6B100D23D6011F09342B3EDDAE4EC9C.roa
Signing time: Fri 30 May 2025 14:18:05 +0000
ROA not before: Fri 30 May 2025 14:18:00 +0000
ROA not after: Fri 29 May 2026 14:18:00 +0000
asID: 208485
IP address blocks: 196.251.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2793 (0xae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 14:18:00 2025 GMT
Not After : May 29 14:18:00 2026 GMT
Subject: CN=6839be1d-e965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:6e:8a:7c:35:86:b9:f7:6d:ea:86:5d:f7:
52:89:6a:c9:ea:07:cb:2e:d7:e8:81:e5:a0:7d:12:
70:c0:88:06:70:69:6f:bf:e7:9f:35:a6:3d:ca:fd:
80:72:af:b0:67:85:9d:63:a5:d8:06:22:15:38:1f:
69:ad:96:a2:a3:c0:63:46:df:5e:8c:c3:45:86:a5:
a1:f5:45:98:83:8c:01:5c:0f:7a:f9:4d:2d:9c:12:
9f:7f:94:0e:ff:c3:69:61:06:ce:4f:2b:e6:87:dd:
e8:ed:e7:38:8c:8a:5f:ce:72:57:b4:45:91:94:9f:
0b:9a:89:03:fb:ae:4f:2c:82:9b:9c:ab:01:60:7f:
0f:dd:02:77:ea:af:fb:da:54:64:51:be:a4:4e:c7:
dd:1f:63:64:b4:73:6a:79:8c:87:e8:c7:e7:f2:55:
c0:f5:6f:d3:02:82:f6:7d:ac:8f:5d:d1:ac:8b:99:
a8:6b:6d:45:6c:8c:88:c5:19:1d:4e:6f:4f:93:2c:
b0:b7:30:60:a3:37:db:76:16:0f:db:ec:97:0d:be:
91:e3:5a:82:1e:d4:ad:15:91:5d:8e:5f:d2:c6:bc:
d5:cf:5b:c3:fe:91:c5:11:91:98:da:70:76:60:7c:
4f:53:53:59:4f:d6:f5:6b:9e:9f:56:31:62:a8:79:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F4:A9:8B:D1:2F:C6:46:C7:97:54:31:37:89:4C:5D:39:16:DB:31
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E6B100D23D6011F09342B3EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.100.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:f5:fe:36:7a:3f:a0:db:e7:5e:48:eb:7b:e8:7c:04:a0:1b:
42:19:63:02:3d:3f:27:4c:38:76:cc:42:83:3a:37:5d:91:bf:
50:e9:b8:80:39:b0:73:ac:da:cb:85:97:cb:27:d9:5b:72:6e:
97:96:be:49:7f:8f:da:7c:32:45:f0:17:26:3c:09:80:6a:28:
54:26:a1:6c:b4:52:ef:90:17:c0:62:ce:a6:c8:53:c2:f9:03:
1c:07:8c:fc:7e:dc:ea:c3:d8:d4:58:f2:23:d6:01:3c:bd:e5:
93:54:2e:7f:e6:2a:c2:04:a0:cf:f9:68:79:54:9d:0e:8c:95:
6c:64:91:f6:ed:e5:5e:b0:c7:ca:74:a0:c8:81:e7:fb:49:16:
bf:d4:6e:ee:55:da:c9:c6:0e:3a:c7:b4:61:3f:6c:a9:98:9e:
1e:4c:1c:2b:a9:6b:5b:6c:3a:fe:a6:6e:e3:cd:27:e1:e3:37:
7b:e1:d1:3b:7f:ac:0b:49:c0:db:46:3a:58:97:0a:f9:c8:85:
8f:cc:31:fc:ca:d4:a4:20:31:38:7b:d4:09:4e:d2:3a:56:df:
3a:84:b5:6b:21:b6:5f:1a:d9:5d:c9:b6:dc:18:5b:66:76:18:
a0:47:5e:e5:d9:05:ff:a1:a2:3f:5c:a5:a4:80:f2:d4:e8:4b:
86:51:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:19 2025 by rpki-client