Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/795A84B04E6111F0B0BA1EABDAE4EC9C.roa
File: 795A84B04E6111F0B0BA1EABDAE4EC9C.roa (raw, json)
Hash identifier: w5VXv9R5oUGxHevdMOJcXmqGrjg68tuvJ52NZFvQzag=
Subject key identifier: 10:2A:6B:01:CE:93:71:DC:5E:10:DF:C4:5F:E6:C3:D9:91:06:B0:60
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 090D
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/795A84B04E6111F0B0BA1EABDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 05:35:00 +0000
ROA not before: Sat 21 Jun 2025 05:34:56 +0000
ROA not after: Sat 30 Jun 2035 05:34:56 +0000
asID: 37049
IP address blocks: 196.32.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 01:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 21 05:34:56 2025 GMT
Not After : Jun 30 05:34:56 2035 GMT
Subject: CN=68564484-fe11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:e0:81:de:17:6c:b0:53:75:68:51:e2:e4:
42:2e:48:59:80:f6:d9:26:d5:00:eb:a1:de:c0:d6:
ce:46:02:fe:47:78:be:b0:1d:2b:4c:5a:34:45:96:
a4:38:c7:6e:d0:10:14:c3:30:b5:32:59:ba:3d:53:
6a:2c:9c:4e:32:d8:8c:f1:bd:d9:fb:cc:1f:70:aa:
1c:33:43:e0:12:2d:2a:33:89:da:4d:b8:8d:2e:e4:
00:09:32:27:a4:da:1f:2f:fe:86:bc:b7:99:52:a8:
9e:69:d9:97:b5:8b:50:11:a0:07:18:10:98:27:7e:
18:4a:23:c7:30:18:5e:3f:87:97:cd:41:7a:6e:5c:
39:3c:8e:37:9b:82:99:35:d0:fc:c4:37:4b:b6:a0:
ae:34:90:ed:9d:37:d2:3f:c6:6d:cd:92:5b:f1:ed:
ee:50:2e:e5:db:ae:b2:e4:aa:9e:7d:ec:44:0a:71:
1e:0f:09:ae:13:fe:d6:c9:24:a7:ed:43:c4:d1:fe:
fb:6a:c2:1b:f7:e6:b1:c0:8a:a7:c8:7d:c8:55:01:
c4:01:79:c2:85:28:33:5f:2e:6f:5f:a8:72:05:4c:
e8:31:9c:a7:31:69:54:96:16:ed:c1:09:78:45:d7:
0f:a0:54:dc:97:77:a4:de:09:f0:65:5e:0c:89:22:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:6B:01:CE:93:71:DC:5E:10:DF:C4:5F:E6:C3:D9:91:06:B0:60
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/795A84B04E6111F0B0BA1EABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.32.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:43:7f:cd:00:27:23:c2:a5:5a:28:05:6a:1b:35:31:83:ed:
6f:13:b6:2c:af:41:4a:0d:88:16:08:f9:ca:3e:60:31:74:f3:
bf:d7:0c:d9:19:59:de:28:67:10:15:c7:c4:39:d4:0f:aa:6d:
42:3c:fc:84:a5:35:b3:1e:15:e3:dd:62:47:22:69:7b:9f:81:
55:5d:d3:4e:d9:60:60:8b:c0:9f:8c:29:e8:dc:7d:1b:76:f7:
6c:30:41:82:8d:fb:9f:4f:29:34:37:49:d4:ab:66:90:8d:eb:
fa:f3:d4:20:26:e8:8d:3a:6f:87:19:0b:f6:82:ff:eb:11:a7:
ce:24:25:89:05:62:f0:49:b0:d5:73:07:9e:27:6a:99:47:ce:
16:c1:e6:c0:cd:7d:3c:fb:b5:cf:a2:41:b1:bf:c2:46:60:42:
06:73:9f:6b:e7:0a:26:f8:9f:7d:6d:ac:cf:82:c4:c9:b4:96:
17:91:37:cc:40:89:35:c9:df:e6:da:57:d9:bb:73:f2:d8:55:
e8:db:12:df:f8:02:9d:7e:07:c9:eb:28:68:9b:82:6b:88:c8:
d4:56:4c:d3:5f:a9:53:0e:bd:63:c7:b2:ef:74:4e:db:a2:9f:
61:55:91:5c:d4:c0:3d:71:3f:f0:9b:0d:8a:61:28:b4:ae:4a:
55:8c:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:32:56 2025 by rpki-client