Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/7C4390DE274411F0A1BF9AAEDAE4EC9C.roa
File: 7C4390DE274411F0A1BF9AAEDAE4EC9C.roa (raw, json)
Hash identifier: yBSz9Ncf3wrX5w+sZQadKSbDDM9+WXy4dRTX6NzVK2w=
Subject key identifier: 7C:EC:DF:B7:79:D7:59:F6:2C:47:50:2F:21:7D:01:37:6D:6E:74:5F
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0600
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/7C4390DE274411F0A1BF9AAEDAE4EC9C.roa
Signing time: Fri 02 May 2025 10:59:15 +0000
ROA not before: Fri 02 May 2025 10:59:10 +0000
ROA not after: Sun 02 Nov 2025 10:59:10 +0000
asID: 2914
IP address blocks: 196.44.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: May 2 10:59:10 2025 GMT
Not After : Nov 2 10:59:10 2025 GMT
Subject: CN=6814a583-6c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:73:ae:e1:a9:b0:38:ce:73:2f:a8:dd:aa:
55:55:2e:2f:07:9a:41:97:49:d9:d5:ef:d1:49:12:
38:bf:8e:f8:1c:7f:3b:45:6c:f9:5e:22:2d:92:4a:
8a:b4:11:63:f5:ac:13:53:6d:82:d4:d8:ab:3c:93:
75:e5:50:c9:6d:6c:f9:da:8d:dd:4c:bf:14:c6:64:
d8:56:0b:db:98:36:fd:77:a2:36:d5:11:b9:37:33:
b0:ed:f5:c0:b9:5b:f4:73:60:e0:a1:19:32:25:96:
3d:82:c9:dc:e1:f8:bc:88:58:99:f0:e3:93:17:be:
53:cf:46:43:4d:ea:87:2a:54:74:03:80:24:dd:c5:
9d:78:67:64:b5:c0:8b:01:87:9d:7b:9a:43:e9:df:
f6:48:f9:84:8b:55:59:57:be:fd:13:c2:0d:24:f4:
ba:fb:6e:69:f8:5c:f3:51:1d:a6:57:ad:af:85:55:
26:bf:a4:97:6b:93:a0:4a:ab:46:88:75:29:85:c8:
12:6a:12:40:22:70:95:45:7d:46:ee:06:b3:4e:a8:
30:75:17:5e:c3:87:7f:cb:0f:f3:04:3d:76:82:5d:
cc:8f:10:b3:b1:f3:37:24:94:76:84:08:6f:11:34:
cc:c9:3a:ae:ba:49:6c:46:d9:91:46:f6:16:df:e5:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EC:DF:B7:79:D7:59:F6:2C:47:50:2F:21:7D:01:37:6D:6E:74:5F
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/7C4390DE274411F0A1BF9AAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.119.0/24
Signature Algorithm: sha256WithRSAEncryption
61:87:a5:88:87:1e:52:a1:05:07:ef:b3:4d:78:ef:29:07:97:
77:30:70:f1:fd:d0:6e:04:7e:10:46:fb:68:17:7a:1e:7b:69:
1f:76:4a:38:9f:5e:1d:18:ee:5b:e0:9d:18:6f:33:94:19:06:
4a:30:94:05:02:85:b2:18:d4:07:83:dc:e6:44:55:5d:dc:7c:
65:51:af:25:83:99:3b:9c:a5:3f:b0:c4:23:d9:4c:70:96:81:
82:7a:37:66:82:da:ef:e7:c3:2d:fc:16:b9:66:bf:9d:f5:e1:
31:97:19:a4:52:49:61:a0:f0:17:ee:af:45:0c:96:39:3f:de:
ce:27:9b:6e:5e:fe:0f:ad:18:99:e0:18:03:18:e2:d3:b4:71:
7b:a0:06:14:c7:7a:f4:11:79:ec:57:d7:dc:40:5f:f2:7b:9a:
d4:e8:89:e6:a1:78:9c:fe:3b:7f:d7:77:39:36:19:56:07:72:
56:d3:67:f1:53:14:9a:af:63:23:76:c3:5c:58:2a:39:eb:94:
f5:13:71:d4:a5:25:21:fe:2a:83:ec:bf:db:f0:86:fc:2c:f1:
a3:0c:93:17:d0:3d:17:91:e1:14:34:3c:18:5e:a8:3f:c5:25:
3d:3f:d5:44:f9:39:6c:d9:c7:a9:02:23:f9:dc:2c:a7:37:34:
68:61:af:c9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNTA1MDIxMDU5MTBaFw0yNTExMDIxMDU5MTBaMBgxFjAU
BgNVBAMTDTY4MTRhNTgzLTZjNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0MHOu4amwOM5zL6jdqlVVLi8HmkGXSdnV79FJEji/jvgcfztFbPleIi2S
Soq0EWP1rBNTbYLU2Ks8k3XlUMltbPnajd1MvxTGZNhWC9uYNv13ojbVEbk3M7Dt
9cC5W/RzYOChGTIllj2Cydzh+LyIWJnw45MXvlPPRkNN6ocqVHQDgCTdxZ14Z2S1
wIsBh517mkPp3/ZI+YSLVVlXvv0Twg0k9Lr7bmn4XPNRHaZXra+FVSa/pJdrk6BK
q0aIdSmFyBJqEkAicJVFfUbuBrNOqDB1F17Dh3/LD/MEPXaCXcyPELOx8zcklHaE
CG8RNMzJOq66SWxG2ZFG9hbf5YnPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfOzf
t3nXWfYsR1AvIX0BN21udF8wHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzdDNDM5MERFMjc0NDExRjBBMUJGOUFBRURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELHcwDQYJKoZIhvcNAQEL
BQADggEBAGGHpYiHHlKhBQfvs0147ykHl3cwcPH90G4EfhBG+2gXeh57aR92Sjif
Xh0Y7lvgnRhvM5QZBkowlAUChbIY1AeD3OZEVV3cfGVRryWDmTucpT+wxCPZTHCW
gYJ6N2aC2u/nwy38Frlmv5314TGXGaRSSWGg8Bfur0UMljk/3s4nm25e/g+tGJng
GAMY4tO0cXugBhTHevQReexX19xAX/J7mtToieaheJz+O3/Xdzk2GVYHclbTZ/FT
FJqvYyN2w1xYKjnrlPUTcdSlJSH+KoPsv9vwhvws8aMMkxfQPReR4RQ0PBheqD/F
JT0/1UT5OWzZx6kCI/ncLKc3NGhhr8k=
-----END CERTIFICATE-----
Generated at Mon May 12 10:27:04 2025 by rpki-client