Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3ABCB892533711F09D978F97DAE4EC9C.roa
File: 3ABCB892533711F09D978F97DAE4EC9C.roa (raw, json)
Hash identifier: NW5cAK/GDwDD3/HmyYpqxLkvQcuj2UD1C3aieHNraoY=
Subject key identifier: D0:C4:EA:B6:26:CE:82:95:2B:D1:D8:A2:F6:29:7E:72:E6:DA:42:87
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BFB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3ABCB892533711F09D978F97DAE4EC9C.roa
Signing time: Fri 27 Jun 2025 09:15:13 +0000
ROA not before: Fri 27 Jun 2025 09:15:08 +0000
ROA not after: Wed 24 Jun 2026 09:15:08 +0000
asID: 18811
IP address blocks: 196.251.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 27 09:15:08 2025 GMT
Not After : Jun 24 09:15:08 2026 GMT
Subject: CN=685e6120-8d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:71:58:b2:e9:96:b7:57:18:60:b7:81:fa:
62:3c:9a:79:41:86:c3:81:4b:77:53:ae:ce:e4:64:
48:af:19:90:27:08:85:7d:77:0c:ef:6c:cf:17:9d:
04:2f:a4:84:cf:68:e3:6a:4f:43:7e:1a:89:f1:ce:
34:ed:42:6f:3b:5d:61:19:71:4c:0c:61:b9:d6:29:
d6:1a:a7:da:ea:01:e9:de:94:11:51:21:a4:77:e6:
44:e0:a9:9a:02:68:a5:35:c9:39:63:12:60:2c:df:
54:a0:10:dc:bd:bd:f2:91:73:40:8e:a8:ec:b2:ca:
69:9c:a6:d9:50:95:df:ef:5c:6f:b6:5c:a1:7d:c3:
29:5a:82:58:cc:34:68:e9:ec:a8:36:72:fe:9a:c8:
19:94:50:80:ae:15:ec:ea:21:cd:0c:1d:d8:95:e5:
d8:c9:50:c4:61:7a:f1:70:08:c0:3b:d0:70:4f:c0:
5e:d4:7d:36:68:bc:29:eb:f7:5a:dc:9e:d2:c4:af:
57:a6:9f:50:5d:83:a4:24:e5:e1:81:ea:36:2b:56:
22:d2:c6:db:6d:0e:fa:f4:16:fa:58:76:e8:11:a6:
a6:0a:e8:bd:90:a9:2e:d3:51:62:55:ab:02:8e:57:
56:3b:44:5b:bb:b8:b5:61:d1:d0:42:11:f4:8c:be:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C4:EA:B6:26:CE:82:95:2B:D1:D8:A2:F6:29:7E:72:E6:DA:42:87
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3ABCB892533711F09D978F97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d1:32:be:ab:82:3c:1e:67:74:49:47:6b:b5:e2:86:c0:67:
e2:bc:ef:49:ff:3b:86:1a:73:99:41:00:68:d1:18:bd:3a:d2:
00:16:ba:d6:f2:e0:de:2b:00:f0:c8:11:fc:92:cd:65:ea:44:
71:9a:bf:a2:30:d5:11:f8:a4:49:17:3c:86:ac:41:d1:c4:95:
02:d2:2b:c2:05:4b:29:c9:eb:71:e8:fd:64:71:92:3d:16:a0:
9f:2a:8a:51:9b:39:1f:7a:0c:8d:63:f7:49:ce:4e:88:94:e8:
77:cb:46:c1:d9:9e:8a:a8:4d:07:82:cb:59:54:25:91:ca:8c:
d6:a5:f3:f7:82:61:26:d1:d4:62:ab:aa:7d:b6:43:d1:94:ba:
a9:5d:78:d0:20:88:a6:14:ef:dd:02:a7:2f:2d:10:c4:cd:8d:
57:86:ff:f1:3e:d7:84:3b:95:9f:c8:40:b0:f6:5c:6e:34:34:
5f:d5:fc:6d:cc:de:a1:01:36:22:50:06:99:bb:45:5f:1d:75:
1a:f8:21:4d:66:dc:84:42:9d:dc:ae:1f:2f:b2:75:ab:1a:81:
fa:4d:2a:fc:4a:65:8c:98:60:cc:a7:15:d4:ed:88:eb:74:78:
e6:b5:d8:22:c8:d2:29:1f:96:52:5d:7d:51:2e:50:2d:33:16:
54:5f:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:52:25 2025 by rpki-client