Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/313EA18CD33911EF964760AF762E951A.roa
File: 313EA18CD33911EF964760AF762E951A.roa (raw, json)
Hash identifier: L25xaZ9aWDUcI8rbB1QsbicriKr0xwiC2tU8BOqCybs=
Subject key identifier: 41:D0:F1:C6:A7:A2:BE:B1:DA:E8:9D:6B:C0:04:72:6C:5C:62:BF:D7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0562
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/313EA18CD33911EF964760AF762E951A.roa
Signing time: Wed 15 Jan 2025 12:06:47 +0000
ROA not before: Wed 15 Jan 2025 12:06:40 +0000
ROA not after: Thu 15 Jan 2026 12:06:40 +0000
asID: 53356
IP address blocks: 102.135.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:06:40 2025 GMT
Not After : Jan 15 12:06:40 2026 GMT
Subject: CN=6787a4d7-e173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:84:9a:78:83:5b:9e:d6:5c:b7:e6:f9:3f:
82:57:f2:cf:8a:19:c1:f0:69:17:e8:e3:04:cb:2a:
2b:9d:42:5b:9d:3c:da:bb:f2:b1:36:ab:69:1a:52:
b1:33:8d:52:87:fb:bd:e2:0c:b0:5f:57:15:84:ad:
bf:5e:86:d6:92:ac:0c:5c:7a:d3:e1:e7:41:6b:7a:
6f:4e:89:dd:d7:c0:04:d8:34:91:c1:2f:16:89:76:
63:a0:4c:c8:dc:b1:11:85:2e:23:fd:72:98:22:13:
ee:30:1c:94:b2:1f:ea:fd:08:98:24:fe:de:bd:11:
1e:87:a9:fb:96:b0:8d:81:50:1d:b1:0d:cd:68:d2:
30:bc:e6:97:10:92:88:7e:58:ac:3c:f7:c2:a2:ae:
65:7d:5c:55:28:dc:48:fe:31:64:83:7a:fb:bb:59:
d3:fa:a5:d3:2e:bf:09:a5:a3:e6:cc:5b:11:f1:59:
96:91:3e:91:40:6d:7e:a9:62:b1:77:38:10:96:14:
fe:b9:2d:9c:fe:e9:80:fb:b9:ee:a8:3a:92:2a:80:
ca:31:3a:4c:5f:91:fa:a5:6a:b0:1d:a4:68:33:ad:
c4:80:b8:b6:53:0d:8e:73:ca:5b:1f:dd:79:57:19:
36:80:bf:95:f0:77:77:20:dd:5a:29:ca:5f:3b:9f:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D0:F1:C6:A7:A2:BE:B1:DA:E8:9D:6B:C0:04:72:6C:5C:62:BF:D7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/313EA18CD33911EF964760AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.53.0/24
Signature Algorithm: sha256WithRSAEncryption
86:08:9f:4d:8f:eb:8b:9a:f1:08:04:8c:20:1b:5d:28:36:7c:
8a:d8:2a:0a:2d:c5:cf:ef:50:bc:a3:93:af:4c:c2:7f:45:d3:
f3:00:62:49:de:2c:4c:cc:f7:8f:cb:9d:75:f7:61:ad:93:02:
05:72:85:5c:8a:84:3a:e7:88:f1:28:66:b7:0e:f9:58:81:92:
d0:c7:53:a2:62:e3:69:53:77:45:9e:04:3f:fc:2f:92:a8:d8:
ff:d2:56:77:99:c5:ce:8f:88:03:d5:45:2c:fd:de:ad:29:20:
be:18:a2:3e:66:18:f5:f3:6d:ea:ba:4a:45:6d:f4:39:bf:a6:
eb:26:12:dd:5a:b3:44:e0:82:ad:32:d4:4c:ed:ac:be:3b:12:
bd:c8:22:96:7b:75:f5:92:72:00:59:70:ab:00:36:43:d1:dd:
3a:0e:22:48:f1:17:1d:21:71:b5:68:04:5a:87:fb:ac:ad:4f:
a1:7a:df:dc:f9:e6:1b:e1:07:1d:56:eb:c7:02:8b:66:1e:0e:
4e:8c:c8:7a:89:ae:15:bc:22:31:41:0c:fd:d1:fe:65:7a:61:
ec:f4:1b:16:bf:e0:7a:1e:0f:41:d7:d3:4d:96:65:5c:82:62:
1f:88:73:54:ee:e5:05:42:f8:eb:8d:23:1a:c1:39:81:15:e2:
fe:70:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:56 2025 by rpki-client