Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D23987A4485B11F0906AA9E1DAE4EC9C.roa
File: D23987A4485B11F0906AA9E1DAE4EC9C.roa (raw, json)
Hash identifier: DKghslNRV3LV+SItaBlt/zWz1SvwXNRxizlyrYW3+eY=
Subject key identifier: 45:A8:22:37:D7:99:C7:0A:03:25:04:34:F8:C3:C7:15:B9:64:A7:3A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B53
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D23987A4485B11F0906AA9E1DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 13:39:26 +0000
ROA not before: Fri 13 Jun 2025 13:39:20 +0000
ROA not after: Sat 13 Jun 2026 13:39:20 +0000
asID: 29802
IP address blocks: 196.251.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 02:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2899 (0xb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 13 13:39:20 2025 GMT
Not After : Jun 13 13:39:20 2026 GMT
Subject: CN=684c2a0e-59cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:9c:b4:07:65:2c:d6:ec:c5:7b:64:c4:61:
15:8f:75:10:76:e8:03:fb:7b:fb:d3:14:74:0b:2e:
9e:ca:0d:fd:ed:31:f7:fa:a6:3d:da:ba:ac:25:1c:
fe:e3:8b:d2:40:00:f6:69:a5:81:24:14:50:5a:58:
6b:0d:72:a2:00:a9:68:98:45:4b:1a:a3:00:af:98:
e5:15:8d:af:a9:86:b8:82:15:dc:0b:9d:b3:23:5b:
14:ff:8a:54:b7:0e:be:32:e5:46:47:a2:21:60:00:
4b:29:dc:1a:2a:98:d1:4d:6b:d1:21:07:cf:68:88:
be:0c:3e:66:9d:a4:c6:2a:b4:c7:7d:df:1f:6b:0c:
74:de:c1:a3:44:79:e0:9b:1d:a7:4e:42:f0:00:43:
bd:02:d5:25:a8:94:4e:16:d2:30:f2:78:68:a1:6f:
6f:94:2e:e8:ce:cd:00:3f:c9:c7:d1:e5:dc:2c:fa:
46:0f:62:61:70:98:1e:ed:54:92:f3:b6:d5:ac:fc:
94:c4:eb:73:bd:32:d0:02:91:b1:63:4f:40:dc:fa:
da:97:35:88:96:e2:6b:5b:2a:85:68:51:0f:a5:29:
66:bc:0a:49:bb:89:da:41:e7:31:72:53:fc:2a:71:
c9:d3:2b:86:8e:b2:27:c5:6f:26:9a:e1:03:b5:e6:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:22:37:D7:99:C7:0A:03:25:04:34:F8:C3:C7:15:B9:64:A7:3A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D23987A4485B11F0906AA9E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.82.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e2:de:6f:c1:f8:bc:7b:48:31:65:66:ff:fd:b7:a7:1f:db:
01:ed:8b:75:1b:da:3c:f4:81:c1:c1:59:d4:c3:ce:07:99:84:
0b:95:05:87:ef:d7:c5:63:0e:f9:fe:53:27:1f:7c:4a:26:2e:
71:8f:be:e0:64:7a:d7:53:d5:77:3d:94:5a:c0:fe:3d:82:9e:
13:f0:32:c4:7c:ae:94:18:9c:08:b7:e7:18:38:f5:a8:4c:fe:
3c:a4:bb:fa:17:da:c6:04:1b:e0:7c:89:f0:70:e9:ea:4d:d9:
be:bb:49:2c:ac:f6:bd:cf:fb:19:5e:bc:bf:69:eb:9f:f0:ba:
77:b5:59:c3:be:02:7c:ba:b9:16:07:fe:cf:f4:e5:d6:95:a7:
03:5e:6f:79:8f:2b:1c:d0:d6:50:9f:17:aa:e2:2d:f7:bd:3e:
cc:05:cd:d0:fb:61:4a:2a:23:69:2b:3b:30:99:e4:5d:de:16:
ee:61:e0:61:d1:53:b4:29:13:b5:85:c1:e2:06:b3:56:87:e2:
35:31:b2:97:c0:a3:9b:7e:19:b4:fc:8c:67:9b:8f:10:fc:2b:
21:fe:1c:d5:f8:8b:e2:39:21:69:e1:fd:c2:ac:09:1d:d7:25:
f2:c0:37:2a:e2:6b:18:4c:79:c4:26:d1:2f:e4:8f:e4:12:60:
2e:9a:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:39:26 2025 by rpki-client