Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/9C3E66F45E7411F0BF892986DAE4EC9C.roa
File: 9C3E66F45E7411F0BF892986DAE4EC9C.roa (raw, json)
Hash identifier: iWmFRBK+G5BWx+hSEpCU+dWGKv9vOLKM4Z/yguhZ9qc=
Subject key identifier: CA:E8:A1:7C:FF:32:67:6B:0F:C6:D0:7D:C7:64:AD:4D:DD:49:B3:3D
Certificate issuer: /CN=F36FA116AF/serialNumber=BC44CE85A5EC97BDBB21D3348800310153A01CCA
Certificate serial: D9
Authority key identifier: BC:44:CE:85:A5:EC:97:BD:BB:21:D3:34:88:00:31:01:53:A0:1C:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/9C3E66F45E7411F0BF892986DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 16:32:18 +0000
ROA not before: Fri 11 Jul 2025 16:32:13 +0000
ROA not after: Tue 31 Jul 2035 16:32:13 +0000
asID: 328140
IP address blocks: 196.223.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.mft
rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA116AF, serialNumber=BC44CE85A5EC97BDBB21D3348800310153A01CCA
Validity
Not Before: Jul 11 16:32:13 2025 GMT
Not After : Jul 31 16:32:13 2035 GMT
Subject: CN=68713c92-0622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:d4:04:f6:66:6f:e4:b0:00:40:dc:24:30:
d1:24:a1:cf:dc:f1:ed:78:02:80:17:72:61:b2:35:
5a:d4:0c:db:3b:6f:8d:2c:7d:31:28:97:86:9f:fa:
19:68:b8:c2:9c:43:50:e8:e3:60:ea:cc:99:a6:d7:
9c:2a:43:35:a4:b4:26:67:56:83:df:9a:4e:eb:3b:
22:d8:a0:a0:35:2d:0b:59:f9:ef:59:cd:4d:40:fa:
1d:df:20:4a:28:0c:9d:13:e8:39:48:ba:8c:8a:14:
8e:d5:da:0b:0f:a9:b8:e0:57:0c:29:51:8f:8b:50:
81:2f:eb:c8:a7:58:ed:d0:a6:3c:65:ad:dd:f1:ba:
d0:db:15:e5:7e:f2:23:22:76:5e:05:21:fd:8c:e1:
1b:3b:1a:fe:9c:e8:f0:4e:c2:dd:3b:ba:7e:6c:84:
0a:63:db:74:2f:f7:b5:6a:db:d0:3f:e4:d8:5e:3c:
46:2a:6a:e0:1d:de:d1:19:f2:e5:10:03:7c:4d:6d:
9d:fb:27:f7:dd:ab:c0:74:f2:94:d7:eb:88:8e:be:
9c:b2:a8:66:50:60:7c:d8:33:5f:d7:c8:fe:1e:02:
85:58:d5:cc:e7:4f:28:42:c4:83:92:d4:89:1c:29:
24:02:91:2f:17:64:5d:48:fb:43:3d:0a:10:92:9f:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:A1:7C:FF:32:67:6B:0F:C6:D0:7D:C7:64:AD:4D:DD:49:B3:3D
X509v3 Authority Key Identifier:
keyid:BC:44:CE:85:A5:EC:97:BD:BB:21:D3:34:88:00:31:01:53:A0:1C:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/9C3E66F45E7411F0BF892986DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.223.151.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d0:31:07:d5:d1:d2:3b:fb:76:8e:c6:e0:76:da:05:53:88:
0d:90:72:c0:c1:d5:35:47:89:29:61:30:e3:00:34:0d:cb:08:
12:6c:bb:8f:1b:67:d2:01:fa:f4:23:48:70:a3:b4:96:5d:11:
0e:15:c1:51:3d:b3:64:8f:13:b7:48:ca:77:ba:d8:1e:b0:9f:
92:4d:2a:83:9e:22:54:a4:84:61:0a:9d:0b:9c:77:bb:df:1c:
68:a9:13:8e:5c:15:09:12:15:fc:e5:bd:19:e8:4a:3e:06:d1:
cc:15:fc:93:0d:11:a5:08:c7:fd:c6:19:23:ad:9c:ef:54:1a:
45:17:24:00:69:0a:0f:31:b3:dc:e7:97:ca:5b:30:7e:13:8b:
01:e3:ec:fd:7e:50:1d:b5:77:f5:ff:67:d0:e3:3a:76:d6:79:
c0:84:62:6a:61:2b:18:5a:60:3c:e3:ea:96:26:7d:21:47:a1:
be:a4:c8:7b:ac:54:87:f8:6c:f6:e7:7a:60:e9:47:22:c0:2d:
47:09:69:d4:1d:0e:24:8d:43:f5:0c:27:fb:c4:3f:ee:66:6b:
0e:34:42:8c:d2:30:72:50:53:e7:fa:97:c4:2c:d9:fa:f9:9d:
9e:00:6c:ba:1c:db:d8:9f:66:66:80:d2:e8:a7:d5:8a:f9:1e:
2f:08:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:28 2025 by rpki-client