Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/55E86B6260DD11F0A69775B5DAE4EC9C.roa
File: 55E86B6260DD11F0A69775B5DAE4EC9C.roa (raw, json)
Hash identifier: 3qhuPqbCfVwBZHK72q/87zYpkIKPP1VmeTNuhLAijbk=
Subject key identifier: 23:AE:47:98:DE:F2:FF:D3:FD:3E:0E:E6:A8:89:89:15:A3:88:84:D1
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 0390
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/55E86B6260DD11F0A69775B5DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 18:07:00 +0000
ROA not before: Mon 14 Jul 2025 18:06:54 +0000
ROA not after: Tue 31 Dec 2030 18:06:54 +0000
asID: 15964
IP address blocks: 195.24.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Jul 14 18:06:54 2025 GMT
Not After : Dec 31 18:06:54 2030 GMT
Subject: CN=68754744-6fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:79:d4:12:91:c4:ca:b9:38:43:4f:e1:be:
54:9f:f0:d0:d6:43:0e:9f:fb:4a:54:00:c5:2b:8b:
7c:e2:53:02:f2:e1:5d:ff:14:71:53:f2:6a:c1:ee:
57:65:1f:f9:a6:47:a4:07:bb:3e:3b:d2:0a:d9:d3:
1e:52:60:f2:eb:f6:f0:e5:22:57:45:94:e2:f3:a0:
3e:c6:2b:0f:e1:24:7a:91:a6:e3:fb:28:fb:66:bc:
76:5c:34:22:a7:15:4b:62:b1:10:9b:11:be:d3:a5:
26:12:3c:6c:53:1e:a8:2b:d7:f6:07:4a:5d:2d:3c:
d6:b9:5e:6c:b6:eb:e0:2c:ce:8a:2a:19:1c:6e:13:
c2:ae:4b:f3:58:f8:32:09:87:17:cf:45:07:67:00:
11:29:c6:59:f4:27:d6:1a:4c:d1:49:2e:af:46:6b:
df:30:53:36:ca:6f:d4:7c:84:01:8f:b6:35:c9:e6:
b3:99:17:e5:38:9e:57:7c:29:80:6e:17:77:98:6f:
11:25:4f:b2:42:5b:00:93:e5:0d:18:d7:d5:df:bb:
54:19:5e:bd:d0:44:47:55:01:6c:26:e4:78:b6:0b:
4e:c4:e0:21:e0:92:8a:15:76:97:cd:09:e3:9d:7b:
97:ad:74:d3:e4:ae:23:08:51:10:0d:44:fe:9a:11:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:47:98:DE:F2:FF:D3:FD:3E:0E:E6:A8:89:89:15:A3:88:84:D1
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/55E86B6260DD11F0A69775B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.24.200.0/24
Signature Algorithm: sha256WithRSAEncryption
04:48:63:18:f6:89:8f:e2:9d:7b:18:36:9e:24:ed:eb:61:d9:
9a:be:6d:a0:a7:dd:00:56:da:7b:04:30:14:32:d6:d1:77:46:
57:b3:4c:4b:dc:07:22:69:05:8f:48:7c:6d:a6:4f:0b:bd:74:
2f:7b:6b:7c:c2:7b:7d:c6:11:86:1f:32:df:60:22:57:dd:bc:
c1:e5:a2:0b:68:3a:ac:b1:51:2e:0a:89:e4:03:9c:da:e4:b4:
eb:25:73:a3:b0:ac:9d:c5:6f:25:ce:50:80:db:89:63:da:5d:
e8:30:4b:7e:f0:45:85:0f:48:86:9b:7d:a1:36:d5:53:77:50:
48:70:0c:fa:86:af:d4:91:30:a7:6d:de:30:ef:1d:6d:68:b3:
94:46:3f:64:57:d4:7b:9a:fd:50:73:ab:d1:b6:a4:0d:77:18:
32:13:e6:28:9f:7a:e3:09:84:35:85:9a:d1:27:b9:6b:fa:5b:
c4:a7:c6:e3:6e:fe:c2:bc:05:bc:29:f3:a8:da:17:fe:34:f1:
9e:59:e7:d6:17:4c:9b:a0:1c:b1:b1:d6:61:82:4d:ec:1b:0c:
78:d9:97:40:9a:04:2b:64:be:4f:d5:5b:0f:8f:6d:e1:1b:ad:
53:5f:9b:28:e5:1b:a9:0b:12:31:35:92:09:f5:2d:d4:d9:cc:
34:57:55:57
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTU5MUNSSTExMC8GA1UEBRMoRENGRUEzODQ3NzIyRDJGRUM3QTAzOUU5OTAzOEY3
NTM4MjU5RDAzMTAeFw0yNTA3MTQxODA2NTRaFw0zMDEyMzExODA2NTRaMBgxFjAU
BgNVBAMTDTY4NzU0NzQ0LTZmYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT8HnUEpHEyrk4Q0/hvlSf8NDWQw6f+0pUAMUri3ziUwLy4V3/FHFT8mrB
7ldlH/mmR6QHuz470grZ0x5SYPLr9vDlIldFlOLzoD7GKw/hJHqRpuP7KPtmvHZc
NCKnFUtisRCbEb7TpSYSPGxTHqgr1/YHSl0tPNa5Xmy26+AszooqGRxuE8KuS/NY
+DIJhxfPRQdnABEpxln0J9YaTNFJLq9Ga98wUzbKb9R8hAGPtjXJ5rOZF+U4nld8
KYBuF3eYbxElT7JCWwCT5Q0Y19Xfu1QZXr3QREdVAWwm5Hi2C07E4CHgkooVdpfN
CeOde5etdNPkriMIURANRP6aEWZLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUI65H
mN7y/9P9Pg7mqImJFaOIhNEwHwYDVR0jBBgwFoAU3P6jhHci0v7HoDnpkDj3U4JZ
0DEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIyNDY4LzNQNmpo
SGNpMHY3SG9EbnBrRGozVTRKWjBERS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzNQNmpoSGNpMHY3SG9EbnBrRGozVTRKWjBERS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIy
NDY4LzU1RTg2QjYyNjBERDExRjBBNjk3NzVCNURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDGMgwDQYJKoZIhvcNAQELBQAD
ggEBAARIYxj2iY/inXsYNp4k7eth2Zq+baCn3QBW2nsEMBQy1tF3RlezTEvcByJp
BY9IfG2mTwu9dC97a3zCe33GEYYfMt9gIlfdvMHlogtoOqyxUS4KieQDnNrktOsl
c6OwrJ3FbyXOUIDbiWPaXegwS37wRYUPSIabfaE21VN3UEhwDPqGr9SRMKdt3jDv
HW1os5RGP2RX1Hua/VBzq9G2pA13GDIT5iifeuMJhDWFmtEnuWv6W8SnxuNu/sK8
Bbwp86jaF/408Z5Z59YXTJugHLGx1mGCTewbDHjZl0CaBCtkvk/VWw+PbeEbrVNf
myjlG6kLEjE1kgn1LdTZzDRXVVc=
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:22 2025 by rpki-client