Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/328C6FC64D6211F0AD55C399DAE4EC9C.roa
File: 328C6FC64D6211F0AD55C399DAE4EC9C.roa (raw, json)
Hash identifier: fTXMrk6MaVx+Vz3X94ONvIvYavpJxBujUP2X/gitxFU=
Subject key identifier: E8:64:45:F9:30:16:DD:B2:81:AF:85:F5:F0:9D:51:A6:29:23:97:96
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 0906
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/328C6FC64D6211F0AD55C399DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 23:07:40 +0000
ROA not before: Fri 20 Jun 2025 23:07:35 +0000
ROA not after: Sat 30 Jun 2035 23:07:35 +0000
asID: 37049
IP address blocks: 196.32.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310 (0x906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 20 23:07:35 2025 GMT
Not After : Jun 30 23:07:35 2035 GMT
Subject: CN=6854983c-80f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:28:55:9e:32:0b:c7:81:4e:c9:68:6f:59:
ab:60:0d:f2:aa:5f:18:b4:35:f5:43:b9:7e:20:9f:
d6:18:6f:a8:bf:25:8f:73:9d:db:1d:e1:5b:7f:0e:
66:2a:6f:cd:89:a6:b3:98:9e:25:e5:3d:61:d8:b1:
db:89:0f:5f:58:02:f1:ed:93:a2:f1:eb:31:c6:6c:
d8:95:14:4d:cd:e2:b7:00:ff:ed:26:fc:70:51:45:
45:f6:50:1c:5c:85:53:53:1d:0c:78:40:c5:eb:42:
a6:5b:34:47:d8:17:76:2c:be:b2:37:26:ac:e2:40:
de:b6:a8:ba:a7:be:da:8b:c1:ba:74:3e:69:90:ab:
b0:5f:e6:c2:2c:39:84:5b:b3:73:a9:ec:5d:dc:2e:
5b:d9:60:cd:e5:20:44:3e:37:30:01:cb:1c:a8:38:
c8:b6:1e:6a:2d:a9:df:38:26:63:aa:be:d9:16:b2:
82:cb:a6:fa:19:62:c3:5b:ad:5d:63:85:27:c3:b8:
e5:df:39:9b:be:56:69:2b:23:15:97:b9:55:82:57:
ef:b0:6e:bd:48:a6:fd:e0:2d:3b:4f:88:f0:4c:de:
a8:68:39:b5:a7:ec:f7:e5:c9:c1:ed:72:7e:e8:a5:
e1:1b:30:d8:10:17:54:40:cb:1d:1d:47:ca:a8:40:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:45:F9:30:16:DD:B2:81:AF:85:F5:F0:9D:51:A6:29:23:97:96
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/328C6FC64D6211F0AD55C399DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.32.251.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b6:b1:a5:de:84:53:d7:d8:34:b8:99:76:3b:ed:fe:4d:da:
71:d2:73:f2:de:43:2f:4b:ec:58:f1:39:d8:2e:26:77:19:6e:
d8:04:cd:a0:de:32:b1:02:c1:fd:b8:a9:11:99:12:bd:eb:e9:
d5:2b:89:2d:d0:20:52:09:51:91:f0:65:78:07:5f:79:69:d9:
af:20:23:9c:b0:02:4a:f0:4f:06:ad:f6:42:83:b1:ba:ef:95:
be:76:62:34:4b:d1:ab:5d:f8:02:43:c7:67:e1:f0:b7:56:7d:
d0:dc:80:93:bb:43:9e:e8:8e:a5:21:53:96:be:9d:3f:62:85:
66:a7:27:75:34:f9:00:c7:2b:3f:97:94:11:47:dd:fc:7b:ca:
cd:68:7c:3a:6f:c3:b2:aa:4a:d8:d7:75:19:74:3b:01:de:4a:
97:ef:ea:bc:e8:d0:ba:cd:ff:86:1e:db:c0:77:e5:6d:f8:c5:
38:d5:bf:2f:5d:37:94:5c:5c:5d:8f:dc:62:34:67:45:5d:65:
62:4f:07:65:c6:57:08:0a:50:d7:61:27:cb:35:89:bd:1e:ab:
9c:2c:38:26:73:b6:35:b8:3d:f8:20:4d:04:ae:8d:22:12:1b:
8e:01:bd:f2:a8:3d:4f:0f:65:48:9f:b7:b2:af:05:ad:a1:4e:
d1:ec:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:04:24 2025 by rpki-client