Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/E5AA00004D6211F0AC68229EDAE4EC9C.roa
File: E5AA00004D6211F0AC68229EDAE4EC9C.roa (raw, json)
Hash identifier: FFpe2j0kKVSEwHCfSHDGXq/7B3Sg772Erl/WQUL0TyQ=
Subject key identifier: 07:7A:64:C1:C2:85:98:D8:59:BB:70:65:25:3A:B5:E6:50:57:54:62
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 0908
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/E5AA00004D6211F0AC68229EDAE4EC9C.roa
Signing time: Thu 19 Jun 2025 23:12:41 +0000
ROA not before: Fri 20 Jun 2025 23:12:36 +0000
ROA not after: Sat 30 Jun 2035 23:12:36 +0000
asID: 37049
IP address blocks: 196.32.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 20 23:12:36 2025 GMT
Not After : Jun 30 23:12:36 2035 GMT
Subject: CN=68549969-50c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:22:ca:8a:9c:03:94:21:b6:cd:94:89:56:9d:
e4:25:12:31:d9:af:91:ed:fe:47:60:de:d9:f6:5c:
c9:fd:11:cc:f7:90:23:c1:65:76:5d:c7:d6:11:d8:
78:67:cd:7b:cd:e4:bf:ee:22:88:0c:20:72:c4:3e:
cc:e2:9f:43:c8:93:ed:84:8f:b8:7d:76:29:1a:5e:
75:8f:04:21:f8:22:37:97:0b:72:13:8f:ad:0d:74:
c4:bf:1c:22:b8:d2:fc:5a:a1:e1:a9:38:c9:13:c9:
57:6d:69:14:6a:ce:37:51:87:02:49:8c:4a:c0:de:
1c:0d:f7:e5:0f:13:17:93:cc:a1:ac:ab:e1:d5:5e:
dd:22:b5:5a:a5:ad:e5:bf:c1:0d:c9:33:f6:28:b6:
b2:df:7b:20:e5:3a:14:dc:2c:af:25:98:78:8e:2f:
12:58:73:57:8a:b2:ea:25:93:2d:a2:a2:41:a2:ae:
fe:d4:36:22:b2:f8:70:41:bc:b5:96:91:fe:89:ff:
cd:7f:7a:2b:90:70:11:f0:5e:9b:6b:48:36:50:b4:
42:43:7d:b2:f3:db:7e:d8:78:21:21:aa:65:5d:0e:
97:a3:ce:75:52:c4:02:7d:06:2e:9a:ba:d0:d9:87:
34:31:07:47:6c:06:ff:a7:58:30:0a:03:65:be:30:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:64:C1:C2:85:98:D8:59:BB:70:65:25:3A:B5:E6:50:57:54:62
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/E5AA00004D6211F0AC68229EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.32.252.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:bd:7d:bb:6a:87:24:79:65:b7:c9:6e:99:a0:d5:15:83:11:
33:b7:3d:34:58:15:11:d8:87:1e:a7:4e:ac:d5:94:ae:1d:d8:
d8:3b:79:af:43:b2:26:02:95:ca:7f:b0:86:4e:4a:f9:dd:ca:
49:54:1a:8c:fd:05:f2:3f:ea:46:48:8b:90:66:94:6a:44:d1:
0d:f4:38:08:a7:94:f9:a1:80:61:8d:52:82:02:0e:d6:5b:7a:
0c:2f:b7:a0:b3:31:f3:a8:15:b2:e6:3b:dd:a2:8f:1b:dd:e4:
e6:df:46:c8:7c:84:fc:40:d5:a1:f4:c5:f3:5c:21:9d:09:51:
07:3f:78:f7:72:7e:8f:30:54:48:37:8a:5e:fe:ee:1a:8b:37:
61:51:67:59:7a:8e:0b:3e:1f:27:50:b9:10:69:30:fc:aa:2a:
5e:ab:a1:14:76:cb:49:10:59:5a:76:a1:94:a0:3d:a0:dd:fd:
6d:91:0c:21:94:80:b9:33:8b:7a:40:5f:72:85:13:0e:02:30:
8d:94:a1:a0:f9:3a:ad:b0:cd:20:ee:51:d6:d2:78:b0:f5:a4:
42:2a:f8:b9:67:53:88:ee:07:f1:52:9a:24:86:b0:89:68:3b:
90:25:62:41:8c:ea:90:10:9d:36:20:70:28:bf:18:56:3a:23:
34:d5:dc:a0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUJGMjdBRjExMC8GA1UEBRMoNjA1N0Y0ODlGNUFEQzRFOTI2OUMyNjBENzAyQzgx
QUFCNkFBMkU2RDAeFw0yNTA2MjAyMzEyMzZaFw0zNTA2MzAyMzEyMzZaMBgxFjAU
BgNVBAMTDTY4NTQ5OTY5LTUwYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxIsqKnAOUIbbNlIlWneQlEjHZr5Ht/kdg3tn2XMn9Ecz3kCPBZXZdx9YR
2HhnzXvN5L/uIogMIHLEPszin0PIk+2Ej7h9dikaXnWPBCH4IjeXC3ITj60NdMS/
HCK40vxaoeGpOMkTyVdtaRRqzjdRhwJJjErA3hwN9+UPExeTzKGsq+HVXt0itVql
reW/wQ3JM/YotrLfeyDlOhTcLK8lmHiOLxJYc1eKsuolky2iokGirv7UNiKy+HBB
vLWWkf6J/81/eiuQcBHwXptrSDZQtEJDfbLz237YeCEhqmVdDpejznVSxAJ9Bi6a
utDZhzQxB0dsBv+nWDAKA2W+MLvTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUB3pk
wcKFmNhZu3BlJTq15lBXVGIwHwYDVR0jBBgwFoAUYFf0ifWtxOkmnCYNcCyBqraq
Lm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCRjI3LzQ1MTI0OERBOTFFQTExRTlCQTkyODQ3QUY4QUVBMjI4L1lGZjBp
Zld0eE9rbW5DWU5jQ3lCcXJhcUxtMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lGZjBpZld0eE9rbW5DWU5jQ3lCcXJhcUxtMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlCRjI3LzQ1MTI0OERBOTFFQTExRTlCQTkyODQ3QUY4
QUVBMjI4L0U1QUEwMDAwNEQ2MjExRjBBQzY4MjI5RURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEIPwwDQYJKoZIhvcNAQEL
BQADggEBANS9fbtqhyR5ZbfJbpmg1RWDETO3PTRYFRHYhx6nTqzVlK4d2Ng7ea9D
siYClcp/sIZOSvndyklUGoz9BfI/6kZIi5BmlGpE0Q30OAinlPmhgGGNUoICDtZb
egwvt6CzMfOoFbLmO92ijxvd5ObfRsh8hPxA1aH0xfNcIZ0JUQc/ePdyfo8wVEg3
il7+7hqLN2FRZ1l6jgs+HydQuRBpMPyqKl6roRR2y0kQWVp2oZSgPaDd/W2RDCGU
gLkzi3pAX3KFEw4CMI2UoaD5Oq2wzSDuUdbSeLD1pEIq+LlnU4juB/FSmiSGsIlo
O5AlYkGM6pAQnTYgcCi/GFY6IzTV3KA=
-----END CERTIFICATE-----
Generated at Mon Jun 30 02:44:59 2025 by rpki-client