Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/19DDCA4C533E11F08A11EFC2DAE4EC9C.roa
File: 19DDCA4C533E11F08A11EFC2DAE4EC9C.roa (raw, json)
Hash identifier: UEwmhs7c1QCdEqsdO5tQkddzsKcOuewaf2Vn5GhC+Eo=
Subject key identifier: C5:5D:12:15:CE:01:96:C1:84:36:D8:FE:BF:8D:49:33:90:70:4A:F6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C11
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/19DDCA4C533E11F08A11EFC2DAE4EC9C.roa
Signing time: Fri 27 Jun 2025 10:04:24 +0000
ROA not before: Fri 27 Jun 2025 10:04:19 +0000
ROA not after: Wed 24 Jun 2026 10:04:19 +0000
asID: 9304
IP address blocks: 196.251.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 27 10:04:19 2025 GMT
Not After : Jun 24 10:04:19 2026 GMT
Subject: CN=685e6ca8-e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:d6:7d:5d:bf:de:47:83:b3:17:42:e4:36:
2d:ee:06:e6:db:16:3c:0c:e1:6f:71:72:4d:6d:33:
bb:03:79:ef:ac:80:d7:b4:74:d4:2f:eb:71:c4:6a:
6d:c4:3b:76:2f:e3:dc:4c:df:cc:55:06:69:5f:1e:
b5:d0:23:41:70:98:ce:21:97:89:c9:fc:36:68:de:
f5:71:e9:f1:61:2f:cd:53:72:67:d1:06:6d:dd:9c:
e8:32:7f:03:26:62:c6:c4:95:22:80:1a:1d:8a:dc:
07:c8:4e:79:53:1d:8e:5e:60:a5:85:d9:75:4a:af:
38:f2:e9:f9:94:78:2b:6c:48:b2:93:ac:dc:c6:30:
aa:88:8c:a4:d1:10:2d:a0:a3:81:b7:b5:55:81:97:
57:c1:f8:3f:49:2e:47:71:76:60:94:03:c0:e0:3f:
36:15:a1:b3:2f:46:75:5c:13:7f:c8:65:80:1b:7d:
ae:3a:da:69:91:a6:94:c7:4a:ac:65:15:6d:c2:38:
78:8c:0a:2a:dd:76:40:cb:01:cf:f3:ea:6f:3a:39:
34:fa:41:da:52:29:41:e8:26:f7:db:0b:4d:3b:ff:
c8:5d:21:1f:f8:82:99:b5:1a:2f:82:0c:6d:38:27:
00:24:a9:7e:b5:38:52:a5:ec:ed:02:ec:7e:a8:3d:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:12:15:CE:01:96:C1:84:36:D8:FE:BF:8D:49:33:90:70:4A:F6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/19DDCA4C533E11F08A11EFC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6b:98:db:d9:4f:8a:00:c2:ed:ed:c6:1d:da:14:5e:7a:ea:
64:f7:6f:f4:67:55:4f:b8:6f:62:22:a3:59:b6:ec:bf:0d:81:
61:36:7e:b9:fa:ca:4f:cb:8e:12:9a:46:75:86:b2:dc:6c:84:
d9:5a:80:f4:42:35:eb:ea:0b:86:75:13:4d:74:40:c7:ac:72:
6b:7c:f2:64:6a:c8:42:28:13:e4:e3:e1:70:d3:9d:05:90:ba:
be:7f:19:1d:e1:f0:bd:7b:b8:c4:e2:88:09:f7:44:4e:35:ca:
9c:89:4a:ca:88:b4:a6:34:17:1d:5a:15:9b:67:3c:82:6c:9a:
e3:5a:9f:87:26:42:15:ca:79:28:f3:52:4f:c0:f3:1d:dd:e8:
05:24:21:96:f7:d3:ad:e4:79:6c:0b:46:74:51:8c:c4:a4:be:
06:b3:f2:4a:12:fd:95:6f:df:e5:9a:2b:c9:a4:a7:48:5d:21:
4c:41:6f:a7:0a:7f:1b:f6:f4:86:14:4a:ed:03:56:34:4d:a3:
20:25:14:e5:fe:9c:c8:6b:a6:8a:73:55:bf:8e:a3:1e:c7:56:
72:7a:3f:98:c7:3b:00:fc:fa:8f:7e:7f:1d:ea:b4:d0:72:db:
f7:66:9b:9f:7f:f3:62:5a:05:e6:2d:8f:4c:46:cd:0a:4c:43:
ce:1e:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:11 2025 by rpki-client