Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F68B59F83D6011F0BE2FB8EDDAE4EC9C.roa
File: F68B59F83D6011F0BE2FB8EDDAE4EC9C.roa (raw, json)
Hash identifier: xDaIke3oHDFnGDD5uwTgMt/jdIXme4NJBcFSIvRhzZs=
Subject key identifier: 4C:38:0B:B1:F2:06:55:A4:96:A9:1F:10:29:31:5C:29:96:23:50:78
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AEB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F68B59F83D6011F0BE2FB8EDDAE4EC9C.roa
Signing time: Fri 30 May 2025 14:18:31 +0000
ROA not before: Fri 30 May 2025 14:18:27 +0000
ROA not after: Fri 29 May 2026 14:18:27 +0000
asID: 208485
IP address blocks: 196.251.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 14:18:27 2025 GMT
Not After : May 29 14:18:27 2026 GMT
Subject: CN=6839be37-92f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:34:66:45:02:40:c4:73:07:0c:a9:fa:c6:
73:78:8d:66:26:a5:78:9e:10:29:ed:03:ff:78:1c:
a7:8f:b7:c3:a6:59:56:17:d0:48:68:d2:b2:c2:36:
f9:01:70:39:2c:4a:c7:c7:bf:3e:a0:24:80:12:eb:
f2:79:b7:50:24:dc:64:36:19:34:a3:81:39:eb:48:
1c:6d:5f:24:f7:37:c3:73:91:58:67:b1:bf:fa:40:
27:73:e2:6f:cb:e1:97:2c:4e:c4:c5:c8:e7:74:da:
ea:62:47:d3:8e:39:87:24:42:c8:aa:2a:9c:81:ba:
40:87:b3:4c:4c:ee:20:ba:6c:b0:d9:13:65:48:5e:
56:3e:fd:1e:a2:e7:53:bc:d0:73:f2:22:ff:f4:d7:
3b:fe:53:22:aa:09:27:0c:2d:92:10:63:3c:f8:df:
74:80:a2:6f:55:94:a2:cd:b3:1c:8f:12:3f:c3:c9:
d8:a5:62:65:d9:64:e2:42:2a:7a:89:e0:a9:dd:69:
37:08:a4:c1:a0:01:be:7c:9d:84:b6:3c:fa:80:3b:
9c:a2:13:ca:4a:92:ec:6d:5b:fd:db:b1:0f:2e:05:
02:1c:6c:ac:3f:4d:05:c9:73:60:6e:68:27:5b:c2:
14:d1:7c:70:cb:47:20:11:15:53:c1:77:48:a9:67:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:0B:B1:F2:06:55:A4:96:A9:1F:10:29:31:5C:29:96:23:50:78
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F68B59F83D6011F0BE2FB8EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:95:bf:a7:06:2a:0c:04:dc:ff:0d:06:3a:a9:c7:43:41:df:
e5:81:51:38:f7:8e:3d:b3:b4:29:30:bf:e3:d5:72:c5:67:7b:
bd:09:0a:56:23:c9:78:18:50:e0:67:16:71:b0:9d:55:ff:46:
16:39:0e:eb:34:65:1a:37:60:6b:3d:19:51:d2:2c:2a:2b:00:
8c:4c:2b:a9:c2:fd:dc:ed:ae:d9:ba:9c:67:93:9c:ba:45:77:
7f:c2:4b:40:bc:3b:ef:ec:0a:08:08:f1:36:bb:d0:e0:c9:01:
c0:9f:61:93:3d:fe:b1:a8:c7:8e:30:f2:a1:0b:50:b1:34:de:
ae:ab:50:b2:60:43:0f:19:af:a0:72:60:41:f1:d9:7a:6a:ac:
95:88:fa:92:4b:59:4f:d1:31:2b:38:a5:37:70:b2:f0:ff:34:
d1:6a:99:d2:ee:4a:a3:86:72:a1:8c:74:76:f3:06:27:35:14:
33:53:df:a0:9c:9a:0c:b7:68:ef:65:54:52:d6:55:f2:a1:d4:
4b:73:9f:bb:57:c2:42:70:ec:3d:35:eb:2f:d8:5e:41:ca:e1:
aa:3b:47:eb:26:3c:3e:14:95:21:67:46:8a:1c:75:18:e2:e0:
4d:84:8f:75:a4:b9:c0:8c:00:57:29:eb:95:ca:da:4a:ac:7a:
53:3c:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:20 2025 by rpki-client