Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2CE8E524533711F09F044697DAE4EC9C.roa
File: 2CE8E524533711F09F044697DAE4EC9C.roa (raw, json)
Hash identifier: Ab2ZxRnZWoMdai/c3vqREZVbhVWrfxzF96btPgLEicg=
Subject key identifier: F5:B4:D7:B1:2C:2D:0A:1C:79:00:9F:A0:30:4C:80:F9:AF:0F:0C:25
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BF9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2CE8E524533711F09F044697DAE4EC9C.roa
Signing time: Fri 27 Jun 2025 09:14:49 +0000
ROA not before: Fri 27 Jun 2025 09:14:45 +0000
ROA not after: Wed 24 Jun 2026 09:14:45 +0000
asID: 18811
IP address blocks: 196.251.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3065 (0xbf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 27 09:14:45 2025 GMT
Not After : Jun 24 09:14:45 2026 GMT
Subject: CN=685e6109-28f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:e1:60:b6:c2:5b:a2:a6:bf:29:03:74:d8:
26:03:a1:62:e0:69:f1:5f:d0:70:9f:e5:8e:25:06:
f3:77:4c:97:cd:b8:bd:97:27:c6:e5:fd:16:09:db:
0e:5e:2f:a1:3c:89:b6:82:bd:bc:00:aa:c2:7d:09:
fe:22:97:40:b9:cc:c0:2f:5c:02:9f:97:a0:fe:49:
d4:c8:42:d3:78:79:0c:43:dc:e3:b6:89:86:73:b3:
97:47:c7:7b:9e:69:20:81:59:75:29:c9:c7:d1:2c:
60:24:f1:fc:59:66:11:d8:a7:d1:57:85:f3:6f:91:
bf:39:b0:d8:e6:2e:09:1e:b6:90:b0:98:20:f3:42:
96:0f:ae:ab:06:e2:c0:ca:2b:70:2a:ad:2d:28:da:
c4:5f:b4:dc:af:c2:1e:0a:42:15:7d:27:e4:9a:9c:
64:2c:94:e9:8b:95:f1:22:a5:6f:b2:e9:86:27:25:
cd:a9:2a:c9:e3:1d:46:21:7f:85:49:09:60:29:d0:
f3:e4:77:98:53:3e:5a:40:21:c1:ea:98:ac:c6:cb:
f2:8e:5a:7a:01:92:cb:be:a8:a0:22:ff:91:2f:af:
e5:07:68:2a:34:91:3f:51:37:b4:11:c9:69:e9:0d:
7c:c9:48:48:7e:8f:50:bf:fc:8c:9c:2d:c1:22:13:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:D7:B1:2C:2D:0A:1C:79:00:9F:A0:30:4C:80:F9:AF:0F:0C:25
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2CE8E524533711F09F044697DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:28:3d:62:6d:f6:a7:ab:6e:1d:1d:bb:12:59:29:b3:51:ec:
ee:f1:fa:97:7c:2d:59:39:76:e2:c0:5a:1b:f2:46:ad:a3:b8:
3e:9f:a8:9b:66:54:65:c9:92:c4:47:c8:bf:a8:ff:93:25:57:
fd:e1:c0:3b:01:f0:cd:05:e3:81:ff:91:04:0d:a6:f9:2b:64:
a7:aa:03:1b:0f:b6:71:ee:70:95:a7:67:07:80:3d:4b:b8:b3:
15:37:eb:0e:25:e4:3f:f9:59:37:73:93:a9:93:7e:79:6d:22:
9b:9e:ed:69:16:f3:48:c6:a1:4a:ed:b6:33:e6:75:73:1c:ac:
e6:8d:4c:c0:d6:59:de:46:31:60:b2:2a:a7:cb:bd:9c:00:ca:
ca:84:c4:6f:0c:32:7f:79:b4:40:07:2b:87:76:ef:74:4c:3a:
11:c0:fe:0d:35:bf:ec:d1:35:d3:7e:f3:d3:84:9b:cd:47:c9:
26:76:67:7f:92:f4:03:29:69:ec:53:db:9b:05:8d:9b:93:4e:
b0:6a:99:17:38:bf:eb:62:69:4c:3b:b5:22:41:c1:55:76:b5:
44:e4:85:77:6e:89:70:ce:f3:26:15:51:bf:8b:c3:d6:b1:40:
36:cd:fd:ef:0d:2b:61:4a:59:37:73:c7:fa:be:9a:8d:4b:02:
a3:88:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:17:12 2025 by rpki-client