Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/68F553BE1E8E11F0B08B3EE4DAE4EC9C.roa
File: 68F553BE1E8E11F0B08B3EE4DAE4EC9C.roa (raw, json)
Hash identifier: ZnbwM1WsxRXo6tL1hO7GNH7+jMRGBFLAh64pwu7QOd8=
Subject key identifier: 44:3D:C8:11:EC:F4:54:0F:99:3E:CE:E7:0C:FB:CA:91:1F:89:B7:37
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 094A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/68F553BE1E8E11F0B08B3EE4DAE4EC9C.roa
Signing time: Mon 21 Apr 2025 08:55:45 +0000
ROA not before: Mon 21 Apr 2025 08:55:40 +0000
ROA not after: Tue 21 Apr 2026 08:55:40 +0000
asID: 18811
IP address blocks: 196.251.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 21 08:55:40 2025 GMT
Not After : Apr 21 08:55:40 2026 GMT
Subject: CN=68060811-db3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:c1:ee:44:7d:39:a2:4c:0d:ac:a2:36:a0:
6f:4d:09:15:5f:25:20:35:b3:75:b3:26:63:04:39:
ad:72:af:14:cf:70:d2:24:db:08:a8:e2:43:76:bc:
cb:41:13:7d:4c:52:0a:6c:40:95:6d:f7:44:d6:31:
37:e3:1d:d4:86:fe:8c:92:0f:16:04:4c:b5:4a:5b:
06:3a:85:a7:81:a4:f5:20:f8:59:8f:40:97:ed:d5:
e7:51:8a:5d:ab:b1:9f:29:65:fa:85:c8:1e:7a:c2:
93:63:a4:1e:c7:d3:cb:16:ee:69:b3:af:72:2d:ac:
e5:81:08:99:b6:c3:25:1b:9e:49:17:4d:1f:9e:fe:
01:42:af:a7:a1:af:aa:bb:59:91:ff:d6:33:16:07:
70:10:96:05:50:95:eb:0b:4f:e6:ce:73:44:7b:3c:
92:95:d7:60:6f:68:a8:13:03:16:f6:56:0e:aa:4b:
71:37:48:a5:13:6a:17:1f:bc:df:b0:a2:6a:9d:53:
8c:56:1e:84:b3:b8:a0:da:de:42:a9:6a:b4:44:91:
a8:07:df:6d:29:0d:49:95:6e:30:a3:2a:a1:4f:25:
19:c4:49:cc:84:1f:c1:5d:d3:62:55:ca:18:3c:58:
a4:70:70:6b:be:df:87:ca:26:0d:fd:98:d2:dd:cd:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:C8:11:EC:F4:54:0F:99:3E:CE:E7:0C:FB:CA:91:1F:89:B7:37
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/68F553BE1E8E11F0B08B3EE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.127.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:9f:4b:ad:7b:08:48:a5:92:ae:5d:53:a9:fd:90:d4:ed:63:
4a:69:12:c6:7c:a3:7e:00:ed:f0:34:ec:03:b8:6a:75:3d:62:
f2:c6:5a:53:74:c6:cf:ee:d7:40:f9:27:96:0b:39:16:0c:0a:
e7:7f:45:62:fd:8d:97:8c:25:64:e7:4b:70:ff:3f:fb:82:ae:
0f:88:8d:d0:ed:30:f6:c0:98:79:5e:56:9f:3d:ae:11:99:a9:
51:fb:26:e3:10:72:17:31:ed:22:f6:60:70:a2:76:3c:11:1f:
d1:dd:b2:4b:fa:9c:8d:f9:62:68:b9:fa:1b:af:f7:3e:27:6e:
3c:48:6f:dd:e8:2e:cd:95:50:00:6d:89:70:70:6b:68:38:57:
a3:cb:e9:72:c4:da:1c:d3:48:c9:f3:ee:1c:ba:55:e3:9d:cc:
d2:5c:a2:af:3f:1d:c0:cd:aa:88:69:65:e9:c0:41:b8:d5:9b:
bb:31:33:95:c8:f6:f5:7e:02:0e:f4:47:fb:4b:81:29:f7:67:
de:6c:94:fe:63:af:fd:eb:d2:c1:a3:a2:dd:b6:5e:7c:92:6a:
99:3a:0c:94:78:ea:6a:f8:22:15:fc:52:98:45:65:b2:95:f6:
f8:35:c3:4e:0b:5a:b6:12:01:4a:c7:0a:28:e8:cc:35:83:19:
99:c4:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net