Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/93BA4D0E577611F08300D0A7DAE4EC9C.roa
File: 93BA4D0E577611F08300D0A7DAE4EC9C.roa (raw, json)
Hash identifier: xDzT9tDUOjaY4x+EeMf/Vz+dMgirOycbZAxHbc8lYgU=
Subject key identifier: 44:69:81:26:B8:5D:DC:55:01:E6:4C:CB:19:54:2D:72:C9:E5:11:EF
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 037A
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/93BA4D0E577611F08300D0A7DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 18:58:45 +0000
ROA not before: Wed 02 Jul 2025 18:58:39 +0000
ROA not after: Tue 31 Dec 2030 18:58:39 +0000
asID: 15964
IP address blocks: 195.24.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Jul 2 18:58:39 2025 GMT
Not After : Dec 31 18:58:39 2030 GMT
Subject: CN=68658165-4beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:9c:d3:59:59:9c:3e:6b:2c:84:49:98:dd:
ad:8b:a1:f5:c4:4e:96:e4:1e:f9:e0:7f:76:d5:85:
52:85:c9:10:25:14:27:cc:83:f0:24:27:a6:a4:c3:
4e:3d:28:cb:22:13:2b:d9:62:8c:d1:49:26:b6:41:
81:8d:33:dc:dc:4f:18:10:35:d7:3c:18:b5:5a:f5:
a3:9e:d4:28:62:bf:0a:1d:3a:3a:42:61:db:50:55:
e9:0b:f3:8b:06:58:20:e6:47:92:6c:86:50:6c:d2:
72:ff:35:58:76:63:c2:5e:dd:a6:27:a1:f2:b8:1d:
72:76:aa:54:80:a8:28:30:a3:79:e3:19:a8:cd:96:
ab:b9:fe:56:45:03:23:1e:15:df:a4:a2:bc:d2:99:
95:34:74:2f:99:ab:0a:06:b7:fc:19:37:f0:d8:b1:
6d:ec:f5:ef:ca:79:55:83:c1:7a:c0:c6:8d:fc:c1:
4c:51:91:42:b1:0b:2c:b7:c6:ea:17:4b:cc:84:99:
57:2f:db:5f:1e:a9:ef:9f:6f:52:5e:ef:c5:d8:1b:
36:d3:37:6c:4c:b4:fc:19:c0:d8:fb:e4:4c:60:0d:
83:02:3a:63:74:2b:36:e6:de:e6:7b:8e:6c:26:71:
6b:62:16:6a:bf:b0:b8:1d:76:af:ac:e0:ea:8e:f3:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:69:81:26:B8:5D:DC:55:01:E6:4C:CB:19:54:2D:72:C9:E5:11:EF
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/93BA4D0E577611F08300D0A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.24.203.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0f:30:26:7c:94:2d:9d:31:01:ca:d2:9a:d1:17:4c:f1:48:
99:e8:36:92:9c:23:ce:74:bb:de:fd:ef:f5:1a:9c:56:54:4b:
f9:3b:57:a4:61:5b:aa:d7:07:39:a5:08:65:e8:24:9a:c4:59:
41:82:2a:2f:1d:75:64:70:34:df:6f:6a:c5:02:69:56:ea:32:
76:88:83:6a:c9:76:7a:bd:33:2c:87:78:4a:82:11:40:5b:8a:
c9:45:e0:6a:7e:37:3a:35:2a:35:1a:e6:bb:99:2d:ae:10:5c:
03:fa:85:ba:a3:fd:2c:c4:85:76:84:1a:8f:0b:6b:e3:22:88:
a6:d8:f0:6a:34:85:a5:7c:26:6b:3f:13:7d:35:46:50:1a:4f:
41:56:a5:86:17:06:13:68:59:fe:88:91:bb:2c:c1:28:4b:10:
c1:a5:2d:c6:0c:10:d2:b9:13:78:17:f9:d4:93:9c:81:58:29:
8a:0a:c3:4f:69:7e:14:de:6c:18:a4:61:fe:4c:26:56:ad:ee:
73:d4:df:d4:80:c1:2b:f4:27:ad:9d:e2:a3:f6:ee:f6:a3:75:
cb:5e:b8:70:c3:77:73:9e:df:fb:24:c3:ff:23:99:e0:c0:13:
37:70:89:bc:78:12:d6:c2:a9:c3:53:c5:cf:fd:78:c1:39:2e:
49:86:d4:49
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA3owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTU5MUNSSTExMC8GA1UEBRMoRENGRUEzODQ3NzIyRDJGRUM3QTAzOUU5OTAzOEY3
NTM4MjU5RDAzMTAeFw0yNTA3MDIxODU4MzlaFw0zMDEyMzExODU4MzlaMBgxFjAU
BgNVBAMTDTY4NjU4MTY1LTRiZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCb0ZzTWVmcPmsshEmY3a2LofXETpbkHvngf3bVhVKFyRAlFCfMg/AkJ6ak
w049KMsiEyvZYozRSSa2QYGNM9zcTxgQNdc8GLVa9aOe1ChivwodOjpCYdtQVekL
84sGWCDmR5JshlBs0nL/NVh2Y8Je3aYnofK4HXJ2qlSAqCgwo3njGajNlqu5/lZF
AyMeFd+korzSmZU0dC+ZqwoGt/wZN/DYsW3s9e/KeVWDwXrAxo38wUxRkUKxCyy3
xuoXS8yEmVcv218eqe+fb1Je78XYGzbTN2xMtPwZwNj75ExgDYMCOmN0Kzbm3uZ7
jmwmcWtiFmq/sLgddq+s4OqO89OfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQURGmB
Jrhd3FUB5kzLGVQtcsnlEe8wHwYDVR0jBBgwFoAU3P6jhHci0v7HoDnpkDj3U4JZ
0DEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIyNDY4LzNQNmpo
SGNpMHY3SG9EbnBrRGozVTRKWjBERS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzNQNmpoSGNpMHY3SG9EbnBrRGozVTRKWjBERS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIy
NDY4LzkzQkE0RDBFNTc3NjExRjA4MzAwRDBBN0RBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDGMswDQYJKoZIhvcNAQELBQAD
ggEBAIcPMCZ8lC2dMQHK0prRF0zxSJnoNpKcI850u9797/UanFZUS/k7V6RhW6rX
BzmlCGXoJJrEWUGCKi8ddWRwNN9vasUCaVbqMnaIg2rJdnq9MyyHeEqCEUBbislF
4Gp+Nzo1KjUa5ruZLa4QXAP6hbqj/SzEhXaEGo8La+MiiKbY8Go0haV8Jms/E301
RlAaT0FWpYYXBhNoWf6IkbsswShLEMGlLcYMENK5E3gX+dSTnIFYKYoKw09pfhTe
bBikYf5MJlat7nPU39SAwSv0J62d4qP27vajdcteuHDDd3Oe3/skw/8jmeDAEzdw
ibx4EtbCqcNTxc/9eME5LkmG1Ek=
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:19:44 2025 by rpki-client