Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E704F910E87B11EFAB46F4AE762E951A.roa
File: E704F910E87B11EFAB46F4AE762E951A.roa (raw, json)
Hash identifier: AcMJrFPKIrP7//Wq1a06rj6n9afdeeOodc619bqaxj4=
Subject key identifier: 91:25:20:3C:D8:13:1B:A6:92:A8:29:50:83:6A:49:DC:62:E8:C0:90
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0603
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E704F910E87B11EFAB46F4AE762E951A.roa
Signing time: Tue 11 Feb 2025 13:27:13 +0000
ROA not before: Tue 11 Feb 2025 13:27:09 +0000
ROA not after: Wed 11 Feb 2026 13:27:09 +0000
asID: 401109
IP address blocks: 196.251.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1539 (0x603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:27:09 2025 GMT
Not After : Feb 11 13:27:09 2026 GMT
Subject: CN=67ab5031-4c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:18:d3:0c:5e:65:53:db:69:ef:09:ba:ba:
7f:06:78:51:1d:a8:a1:3f:ca:6c:99:d8:e5:29:b5:
7d:af:db:fd:aa:b9:c9:2c:13:0e:37:6a:81:4c:5f:
2d:1e:e7:23:2f:dd:a4:11:47:e3:e6:96:95:52:97:
75:bb:93:3d:6f:fb:79:d6:74:ca:e1:1f:d1:63:cb:
fb:80:ab:81:83:09:73:1e:bb:fe:43:06:54:31:ad:
17:59:5b:09:1a:e5:ae:21:06:71:12:de:d3:ca:45:
16:ce:ec:24:1b:0d:e0:4e:a9:e5:c2:4b:01:08:4b:
a1:e8:27:55:0a:f5:ce:5f:6d:05:61:1f:93:fa:0c:
49:13:da:c4:3a:70:8e:07:2e:c1:ef:8d:5a:fd:63:
d2:2b:7a:bc:0d:cf:1e:ae:7e:bb:bd:de:03:b2:bd:
e8:51:f4:18:a9:60:52:93:8e:c8:c5:da:d0:2c:d9:
46:79:59:43:c9:9c:f0:ff:8d:54:1c:90:aa:c1:f1:
03:65:ed:66:65:f8:9c:9a:d5:65:cb:8f:13:e1:47:
02:c4:9b:b3:e8:33:c6:77:45:9b:d7:a4:6d:b2:7e:
f3:77:34:1d:e8:ea:37:25:2a:35:c6:fb:48:e1:7a:
10:5f:32:c9:07:ff:b3:74:ce:09:bf:80:93:c9:92:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:25:20:3C:D8:13:1B:A6:92:A8:29:50:83:6A:49:DC:62:E8:C0:90
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E704F910E87B11EFAB46F4AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.93.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a6:16:0e:15:e1:61:dd:c6:4d:ed:c2:e2:44:a2:8e:4e:55:
a4:8c:9c:a8:c8:42:d8:77:c1:0f:d4:f5:e2:90:93:42:24:4f:
45:f4:ff:9f:63:92:44:81:c8:43:32:05:25:19:50:ff:d3:3a:
47:d9:9f:5a:54:bb:ed:64:cc:20:61:57:cd:12:69:c5:34:0a:
53:d9:6f:d2:00:a2:27:d6:44:80:3e:d8:a1:78:74:58:37:5d:
5b:27:9d:a3:3a:d2:d2:e6:7c:a7:90:22:72:fb:5a:fa:9b:cc:
2f:7f:89:c5:e4:93:62:e5:4f:22:e6:c2:9d:66:ca:78:38:5b:
9f:94:d7:23:df:48:3f:76:36:69:d4:55:6c:68:88:ed:58:f2:
d0:6a:e1:05:9b:c9:9e:ba:cd:92:10:ff:3a:1f:e5:05:9b:28:
b6:54:4b:7a:93:65:42:a4:e8:c1:ee:6b:a9:d7:cb:c4:3c:5d:
5f:1c:a0:51:d2:c3:02:18:b8:ce:4c:e6:b8:2d:ab:f9:99:a7:
d3:cf:72:f4:0c:72:3b:45:e5:a6:c5:c9:89:da:05:b9:3d:53:
e3:76:98:1f:80:ea:fe:7f:d7:de:dd:18:eb:e4:74:85:ab:bf:
ea:c4:2f:d9:46:68:19:93:27:9c:a6:14:6e:73:ae:1b:e1:20:
bf:d0:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:59 2025 by rpki-client