Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/07F7B138485511F0953022B8DAE4EC9C.roa
File: 07F7B138485511F0953022B8DAE4EC9C.roa (raw, json)
Hash identifier: 2Xrx0+40a16zhGeQ/X8m4IT0Ej1VVOMWIbCfjNSrkLM=
Subject key identifier: 8B:4A:13:E5:17:FF:47:6C:38:8D:AB:9C:85:4B:F8:22:36:A2:2C:D3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B40
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/07F7B138485511F0953022B8DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 12:50:50 +0000
ROA not before: Fri 13 Jun 2025 12:50:45 +0000
ROA not after: Tue 10 Feb 2026 12:50:45 +0000
asID: 329007
IP address blocks: 196.251.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2880 (0xb40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 13 12:50:45 2025 GMT
Not After : Feb 10 12:50:45 2026 GMT
Subject: CN=684c1ea9-779d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:43:a7:c7:0c:92:f3:b4:8d:ff:4f:11:2f:
ef:70:aa:2f:b6:76:5b:a8:ea:7a:84:d6:1d:da:15:
8f:34:da:ce:d2:77:56:c8:43:25:93:58:20:3c:24:
95:14:d1:43:d7:ab:7f:3b:d7:45:69:1a:79:4e:0d:
9f:e1:bd:fb:2f:a0:d0:1f:43:87:49:a7:8f:a2:54:
71:54:2b:ca:83:c9:ef:51:40:eb:30:2c:17:71:87:
1c:f4:7b:94:8d:77:5f:18:7d:e7:59:fd:0c:34:1b:
aa:2b:13:8b:06:f3:bb:d7:e8:25:a3:a4:dc:e5:e3:
63:bd:c3:c0:73:01:62:dc:1d:8a:29:65:e3:8a:29:
54:fd:a0:ce:f5:ce:2a:ee:19:c7:fe:e4:18:88:2b:
2c:b1:64:b5:24:1c:13:d4:a0:42:37:a6:55:8d:77:
d1:72:c0:93:11:15:17:ad:36:42:9e:34:98:89:37:
04:b2:08:6a:8d:74:ba:5b:82:d3:e2:a9:92:60:65:
ae:8c:51:ca:1f:1c:23:0d:46:f4:50:36:ba:e4:7f:
05:f4:a6:c9:e2:6a:00:53:b1:cf:96:18:11:7c:1b:
95:4d:42:2d:50:16:f3:58:0c:df:d5:11:36:0c:33:
0c:87:e5:c7:49:48:91:6c:66:1c:3e:d2:a3:b1:74:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:13:E5:17:FF:47:6C:38:8D:AB:9C:85:4B:F8:22:36:A2:2C:D3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/07F7B138485511F0953022B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.100.0/24
Signature Algorithm: sha256WithRSAEncryption
31:09:50:8e:11:d9:81:98:c9:91:51:ab:01:c8:16:1f:93:22:
7e:a3:b3:9f:a0:65:0b:74:c2:fa:60:80:a1:ec:74:d5:f3:c6:
14:b3:3e:44:29:53:c4:36:58:b9:ef:d9:42:a9:25:da:1f:2e:
19:1f:7b:91:a3:91:b6:6b:88:67:4a:1b:11:00:3e:05:59:91:
78:07:c4:cb:5d:f4:c1:ab:d2:b6:95:48:cc:98:bd:ae:b6:4c:
1a:fd:7c:0c:42:e2:0b:8d:76:a7:9d:02:38:87:9e:93:22:3f:
b9:93:91:7e:7e:56:56:22:56:da:6c:ea:59:33:4e:dd:6d:7b:
25:f2:0c:fd:30:d1:e2:2a:6b:b7:c0:c6:ef:7c:b1:a3:e2:11:
7d:04:75:00:4d:d1:76:21:35:d3:2c:4f:9e:5e:f0:7a:76:aa:
59:65:25:5f:71:27:e2:b9:0e:5b:3f:4c:75:37:90:ee:bb:5b:
d2:2b:00:95:11:c9:6b:94:d2:38:e9:0d:15:c6:52:f5:c6:c2:
dc:63:7d:4c:01:d6:7e:1a:96:d1:68:95:f9:97:5b:c9:db:cd:
8c:91:d0:f4:ae:5a:94:1d:b4:77:15:aa:04:bf:59:be:14:a5:
00:0b:2a:54:cc:fb:8e:47:90:32:69:9e:ba:21:3c:e2:4f:64:
e5:03:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:54:07 2025 by rpki-client