Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/1FD7E1765E7411F086656885DAE4EC9C.roa
File: 1FD7E1765E7411F086656885DAE4EC9C.roa (raw, json)
Hash identifier: fPmlDXbjW72osjEvf04mA6NHDICM2LlbhBXKFuGXR+Q=
Subject key identifier: D2:34:DD:78:E2:6E:ED:C3:33:8C:1F:E8:77:76:F9:4B:7C:6F:13:FD
Certificate issuer: /CN=F36FA116AF/serialNumber=BC44CE85A5EC97BDBB21D3348800310153A01CCA
Certificate serial: D5
Authority key identifier: BC:44:CE:85:A5:EC:97:BD:BB:21:D3:34:88:00:31:01:53:A0:1C:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/1FD7E1765E7411F086656885DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 16:28:49 +0000
ROA not before: Fri 11 Jul 2025 16:28:45 +0000
ROA not after: Tue 31 Jul 2035 16:28:45 +0000
asID: 328140
IP address blocks: 196.223.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.mft
rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA116AF, serialNumber=BC44CE85A5EC97BDBB21D3348800310153A01CCA
Validity
Not Before: Jul 11 16:28:45 2025 GMT
Not After : Jul 31 16:28:45 2035 GMT
Subject: CN=68713bc1-c805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:19:2f:44:87:b7:fc:cf:e5:2c:ce:4a:31:
2f:df:3d:08:70:f8:1f:c2:d6:34:b6:47:36:48:9b:
a6:81:5a:d1:a8:f1:ae:06:bc:79:6c:1f:b7:59:a4:
3c:06:b0:dd:0b:92:9f:d1:bc:0e:e3:52:20:54:2b:
42:da:0a:e3:f1:2f:eb:bc:ce:e0:3c:a9:73:05:49:
bf:2a:39:7f:fd:5b:a4:31:54:d5:e3:e1:e3:e3:96:
68:02:4b:51:2a:c5:67:2d:66:19:49:5c:4f:a1:97:
24:96:ca:67:da:39:64:b1:a0:8f:1e:06:8c:e6:54:
09:8b:b0:b5:c3:dd:8e:b8:88:d6:fe:85:bf:79:d6:
6d:de:1a:2c:68:2f:da:e2:11:57:7b:d4:7a:e2:6f:
fb:62:c1:e3:91:bd:a2:05:03:e1:cc:fe:37:79:f1:
25:3c:0a:e7:c1:be:cb:d6:aa:ef:03:74:63:98:9e:
de:41:6a:9d:2e:4b:0a:14:37:ad:51:09:6e:08:16:
51:41:03:f9:ba:06:48:99:14:46:ac:d1:e2:36:33:
a8:95:ca:b1:de:e0:50:0e:fa:17:b3:3d:3b:df:76:
c3:be:82:19:c3:67:9c:61:92:05:9c:49:06:af:fe:
32:b5:45:02:59:81:d0:06:4e:5f:0c:68:ca:5c:9f:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:34:DD:78:E2:6E:ED:C3:33:8C:1F:E8:77:76:F9:4B:7C:6F:13:FD
X509v3 Authority Key Identifier:
keyid:BC:44:CE:85:A5:EC:97:BD:BB:21:D3:34:88:00:31:01:53:A0:1C:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/1FD7E1765E7411F086656885DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.223.149.0/24
Signature Algorithm: sha256WithRSAEncryption
87:21:88:b0:7c:44:13:21:78:3c:62:10:04:86:81:b7:a0:65:
bc:97:df:49:dc:e6:30:18:bd:e8:ee:45:ae:7c:61:04:97:23:
41:9d:12:fa:a2:a8:cf:f6:70:e3:6f:83:fd:0d:db:6d:d4:3f:
b1:83:2c:3a:59:0b:7b:41:f2:78:0e:63:13:f4:45:4c:ca:65:
5b:29:0c:51:01:d3:88:80:a4:52:9e:02:df:92:df:af:b4:b5:
eb:26:bd:d1:95:c2:55:cc:10:2a:9e:ae:9b:65:94:1f:91:a8:
ab:f0:7d:98:33:7e:b2:93:5d:71:25:80:65:22:82:c1:a1:66:
3e:b7:40:bd:7d:a4:0a:9c:46:c9:f8:05:a8:2b:40:12:90:82:
66:87:33:36:c9:b9:3c:e4:6d:f5:cf:4b:27:e8:8f:6f:71:c8:
50:3b:04:ed:e7:e8:d9:ab:dd:be:e3:a0:54:ff:15:25:33:5b:
03:78:32:49:59:21:16:7f:1d:d5:77:95:a8:7a:a7:41:e7:c7:
c4:ac:9f:c5:39:40:e2:ad:fd:9f:a1:eb:23:04:0e:52:80:23:
a8:1f:f8:bb:52:70:9d:04:4c:17:41:b5:f4:98:42:47:e6:83:
82:1d:71:66:3c:4b:2e:74:83:9d:6e:e1:98:22:1c:33:e7:c4:
e9:6a:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:51 2025 by rpki-client