Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C39EFDC0C6F11F083A5DA4C762E951A.roa
File: 3C39EFDC0C6F11F083A5DA4C762E951A.roa (raw, json)
Hash identifier: FMUddocQrstD4M4Lf+zhEueddTI59jDeRpX0WvCKpgQ=
Subject key identifier: C3:02:A2:A4:C9:01:23:AE:FB:BC:E6:94:5C:17:10:1B:75:E1:D6:28
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08AA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C39EFDC0C6F11F083A5DA4C762E951A.roa
Signing time: Sat 29 Mar 2025 07:27:14 +0000
ROA not before: Sat 29 Mar 2025 07:27:10 +0000
ROA not after: Sun 29 Mar 2026 07:27:10 +0000
asID: 54339
IP address blocks: 102.135.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218 (0x8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 29 07:27:10 2025 GMT
Not After : Mar 29 07:27:10 2026 GMT
Subject: CN=67e7a0d2-f5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:e6:df:fe:1d:4c:60:5c:dd:2f:28:9a:da:
78:df:e9:9d:f2:ab:c9:92:96:3a:77:e5:40:a9:04:
fe:c5:73:33:56:f9:77:3b:8b:b2:e6:e3:b0:10:db:
34:5a:c7:6e:d7:1b:8a:61:67:c7:c8:10:58:ea:76:
d9:f3:98:d4:64:09:01:9a:a8:22:75:31:eb:2f:56:
8b:49:0f:d6:89:cc:c2:26:51:cc:eb:a2:df:09:7e:
eb:6a:7e:4d:e0:fa:1f:5b:0d:6a:c3:93:f8:09:34:
84:20:32:35:47:49:33:fe:24:f5:48:5e:e5:1f:5a:
d1:75:44:e8:13:94:b0:6f:8f:18:88:48:20:65:a2:
bc:e8:98:85:98:2d:3c:6b:d8:de:e8:1b:2a:d2:2f:
31:5b:02:27:44:57:a8:1d:97:74:3e:a9:64:8d:bd:
54:54:d9:1b:ab:fb:3b:22:2c:3b:56:11:e7:11:ab:
56:50:92:6a:93:f7:d1:c3:ad:65:f1:02:a3:5f:17:
09:b8:49:46:ef:a1:37:95:06:6a:4f:06:c0:bf:6f:
a8:f2:6a:fe:7d:e9:08:c6:ee:2b:10:93:dc:12:f4:
7f:e4:99:13:f3:9b:ad:f9:ac:ce:19:82:d1:8c:cf:
91:b2:9e:76:fd:9c:e4:22:d0:ea:3b:7d:c6:13:39:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:A2:A4:C9:01:23:AE:FB:BC:E6:94:5C:17:10:1B:75:E1:D6:28
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C39EFDC0C6F11F083A5DA4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5f:03:68:aa:c0:6d:51:39:d4:ca:d7:64:76:57:00:31:07:
bc:e8:20:46:07:04:bf:32:c1:b2:be:a7:0c:71:9a:9f:45:40:
50:6c:8f:91:54:c5:71:5a:5b:5b:5c:3e:74:65:2d:af:15:fd:
bb:3c:59:e4:3f:02:b2:e6:bb:d1:c3:81:ec:ec:37:84:60:87:
b7:fc:af:68:c9:18:00:ef:23:2f:7d:63:75:26:47:df:af:35:
0f:bf:c7:50:15:af:4a:30:29:59:10:d6:0b:8d:3c:c5:af:53:
9f:7a:33:f4:ad:2c:46:4d:67:29:4a:0e:99:af:62:f6:e5:cd:
18:8c:70:4e:fa:52:02:46:15:b9:33:a1:1c:80:d1:0c:96:07:
3b:8f:21:78:13:22:58:d1:d0:38:02:52:ac:d5:33:6f:02:ba:
ed:e3:d1:09:03:bd:ed:ca:d0:e7:12:68:65:79:e4:25:f7:ff:
a6:c1:81:ce:30:83:38:79:ab:01:78:57:a4:c2:78:50:6e:29:
aa:b1:8f:90:fc:8f:31:57:b5:5c:e0:fb:5a:18:8b:ed:22:60:
e4:30:b0:7c:25:17:cf:1e:24:46:5d:9d:6b:bd:36:ba:6b:d3:
59:59:8b:3e:62:44:d8:8a:8f:d0:a2:fb:6f:2d:fd:e9:db:ec:
ac:0d:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:22:53 2025 by rpki-client