Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/BC741E48575B11F09D18457FDAE4EC9C.roa
File: BC741E48575B11F09D18457FDAE4EC9C.roa (raw, json)
Hash identifier: V7GQwUcMxp4LbXIcZRBBtPhEVIwEfdLYw7zTv+foDSo=
Subject key identifier: 42:8A:10:29:8E:7D:3A:96:90:9B:46:3B:05:71:94:57:E1:64:43:E0
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 0374
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/BC741E48575B11F09D18457FDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 15:46:37 +0000
ROA not before: Wed 02 Jul 2025 15:46:31 +0000
ROA not after: Tue 31 Dec 2030 15:46:31 +0000
asID: 15964
IP address blocks: 195.24.198.0/24 maxlen: 24
195.24.201.0/24 maxlen: 24
195.24.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Jul 2 15:46:31 2025 GMT
Not After : Dec 31 15:46:31 2030 GMT
Subject: CN=6865545d-c7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:01:fe:0e:a3:6c:c8:2d:17:5b:3b:b9:cd:
08:e0:23:25:b7:f3:c3:d7:30:95:d9:f5:72:dc:32:
0e:16:13:2e:ba:e9:5e:7a:ab:c9:7d:df:c7:69:76:
0b:37:22:16:16:7f:a7:40:94:75:ee:3e:7a:5e:da:
48:bf:18:bc:b5:a0:3e:e7:ca:ce:ea:67:af:17:67:
a5:9f:7f:ba:06:9a:4d:7a:69:2f:94:7c:a6:00:48:
cd:cc:99:65:ab:01:ae:68:80:31:c7:4d:6e:aa:d7:
1a:fd:f6:56:75:48:55:c6:69:10:b9:11:ad:98:18:
68:f0:23:03:02:9a:64:d9:bc:38:02:a2:0b:de:45:
99:f0:88:99:43:87:9c:bb:11:1c:3c:62:39:56:70:
41:81:27:02:a3:95:06:cc:ad:f7:1f:43:b0:c7:76:
05:f8:ab:b3:70:97:99:4c:7c:7e:ac:ac:b9:82:52:
22:19:6f:7c:9c:ee:58:1b:52:08:67:1f:a4:22:de:
fa:e7:52:4b:85:1a:fc:54:f3:12:18:19:c6:cb:c3:
49:42:9f:9e:5c:b3:78:1f:e5:c4:ca:2e:17:12:7e:
3e:c8:7f:7c:07:f1:17:dd:cd:cf:8c:49:79:d8:e7:
70:c5:b4:e9:3e:a1:6e:bd:3a:10:97:8d:12:37:ce:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:10:29:8E:7D:3A:96:90:9B:46:3B:05:71:94:57:E1:64:43:E0
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/BC741E48575B11F09D18457FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.24.198.0/24
195.24.201.0-195.24.202.255
Signature Algorithm: sha256WithRSAEncryption
0b:4e:6b:f2:21:d0:9c:37:29:fe:75:89:ba:a8:14:38:d1:02:
85:fb:34:6c:53:1b:2c:73:9e:cc:c6:f2:23:79:32:c9:8f:1e:
2e:76:85:95:00:2e:7b:cb:65:db:3e:16:6f:03:31:85:85:23:
41:e6:55:1c:6b:2d:98:f9:59:54:bd:ab:d0:b7:5d:9a:ba:d9:
fc:a6:2a:d0:96:bb:6a:dc:bc:c6:f9:1d:52:9b:f9:52:1f:46:
bf:d2:1d:4c:c6:0b:f8:8b:3d:5d:dd:86:d6:bd:28:86:7f:6b:
cb:cd:bb:5d:4d:17:c7:b7:9a:fd:72:f5:73:ba:0a:e2:62:28:
6e:0d:5d:95:66:d5:45:ae:04:24:66:9b:8a:e2:38:0f:82:e8:
87:99:73:a3:f8:11:51:bd:61:58:55:67:88:22:73:a6:a7:df:
aa:7a:90:20:dc:11:67:0f:de:6d:7a:27:de:74:e7:36:e3:0f:
ea:37:80:8f:8a:22:4f:72:00:e0:ac:e1:b1:96:ca:1e:b9:c3:
ed:b9:b9:29:06:71:18:f2:5c:e0:e1:12:6f:a0:4f:5e:67:45:
b7:02:6a:73:99:d4:d2:b7:b1:1e:1b:ca:09:da:5e:d4:79:15:
92:ea:db:a2:75:31:4c:39:7c:98:01:64:ac:e2:df:6e:dc:85:
76:ba:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:40:57 2025 by rpki-client