Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0651571658D711F0B40B61A9DAE4EC9C.roa
File: 0651571658D711F0B40B61A9DAE4EC9C.roa (raw, json)
Hash identifier: 91hE1cQ5d8jaqQ1YH4QjiOgToDamYUG3WevmxBh912c=
Subject key identifier: EC:49:D8:C8:11:38:A6:E6:96:52:01:7C:39:C6:FD:DE:90:9E:10:E2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C1E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0651571658D711F0B40B61A9DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 13:01:40 +0000
ROA not before: Fri 04 Jul 2025 13:01:35 +0000
ROA not after: Sat 04 Jul 2026 13:01:35 +0000
asID: 29802
IP address blocks: 102.135.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 02:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3102 (0xc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 4 13:01:35 2025 GMT
Not After : Jul 4 13:01:35 2026 GMT
Subject: CN=6867d0b4-c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:ad:bf:61:67:04:48:0c:61:70:45:ce:36:
a5:5b:25:43:57:a4:48:d3:b7:e7:e0:d8:ea:17:49:
c3:82:3c:95:ff:ef:e3:4b:60:73:8c:1a:39:28:b2:
b3:6f:33:fe:e7:06:d7:0e:c8:bc:f4:cb:64:ef:87:
79:8e:e9:c9:92:c1:53:51:83:02:a0:a6:9c:b7:98:
17:6c:03:29:58:7b:69:42:ec:14:10:20:d6:ea:bd:
4f:b5:b8:73:06:23:22:dd:5f:81:04:8f:b4:77:b7:
30:f9:7b:24:3b:20:7e:ca:53:f0:55:99:b3:c5:00:
97:4f:3d:dd:6d:28:57:93:00:65:b7:b6:31:4a:3b:
41:f2:65:52:dc:19:bd:57:ba:96:df:90:15:8b:fd:
b9:7b:7f:62:1d:1b:fe:20:55:9f:f2:da:74:94:24:
76:6f:ed:d5:01:a8:dd:7a:ef:53:1a:06:60:40:71:
5a:78:1a:65:7f:61:86:f2:eb:26:b8:0d:c4:7e:43:
ad:cc:5e:bc:52:78:c7:a8:b6:af:a5:78:8f:2c:12:
b7:6e:1f:f2:4f:2f:31:dd:41:8b:36:3b:90:46:ff:
3b:46:4f:fd:97:b9:57:f6:cf:a1:37:86:be:90:52:
c7:4d:36:61:4e:45:95:99:67:bc:70:d0:be:47:bb:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:49:D8:C8:11:38:A6:E6:96:52:01:7C:39:C6:FD:DE:90:9E:10:E2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0651571658D711F0B40B61A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:09:90:41:0a:7a:32:c6:6f:ee:2f:18:63:03:85:3a:30:1a:
bd:37:a2:16:59:08:60:69:60:c2:8c:d8:f5:a8:9a:d5:49:76:
c6:c6:96:f0:15:48:bd:20:53:db:40:d9:bf:d3:e4:ae:f2:9d:
66:e7:11:42:25:bf:48:5f:c5:c3:35:a8:ca:a9:0f:e2:66:9d:
3c:bd:98:2f:ca:c4:f4:c8:c9:51:3d:9e:f8:68:79:e4:4a:9d:
b6:e7:4a:70:69:f7:70:df:c7:ab:4e:39:c4:3c:b2:1b:0b:f2:
b3:9f:8f:c8:76:a3:9e:c1:66:a0:3a:86:50:0d:f3:4c:e1:0e:
9c:e5:9d:04:e1:74:ec:02:05:65:91:68:7b:d3:f1:c6:91:0b:
ee:d4:87:ad:a3:3d:cb:8b:92:f9:0a:06:67:93:ab:d1:89:9c:
2e:6d:d1:38:de:95:2b:13:ed:a9:92:f3:88:66:32:2d:d2:51:
94:dc:81:66:e2:ae:36:ad:71:73:7a:a3:d4:31:9b:86:f5:3f:
d7:62:95:78:13:dc:a0:5a:fc:76:9e:75:a8:66:5a:a4:7b:aa:
f6:35:ae:5d:80:63:cb:b5:68:13:5e:f5:92:8e:ed:e4:2f:66:
b9:3b:1b:fe:94:14:9f:14:09:45:6c:e4:a5:00:c8:77:ef:58:
53:86:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:14:16 2025 by rpki-client