Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3CD6F8BE096C11F0B8EF8E4B762E951A.roa
File: 3CD6F8BE096C11F0B8EF8E4B762E951A.roa (raw, json)
Hash identifier: oqooCJgKa1VICsLF2MNrY6ASkHG28ouY8Vyye9yitNM=
Subject key identifier: 8B:80:B0:10:AB:55:19:0E:48:30:80:EE:F7:CF:00:A7:88:95:87:74
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 080E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3CD6F8BE096C11F0B8EF8E4B762E951A.roa
Signing time: Tue 25 Mar 2025 11:28:13 +0000
ROA not before: Tue 25 Mar 2025 11:28:09 +0000
ROA not after: Wed 25 Mar 2026 11:28:09 +0000
asID: 2914
IP address blocks: 102.135.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:28:09 2025 GMT
Not After : Mar 25 11:28:09 2026 GMT
Subject: CN=67e2934d-7580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:f1:5f:6a:ed:e7:ac:ef:ef:f7:10:e9:c0:
9e:ee:10:5f:37:1b:50:62:12:80:f9:e7:09:88:dd:
5a:97:fe:f2:05:08:60:2a:a1:33:36:96:49:c6:a0:
ce:18:c8:ed:41:7b:f5:d6:e9:1b:eb:ba:ad:f4:f0:
55:f4:2c:ed:44:bc:ae:4a:eb:57:bf:5f:c8:c3:08:
0f:c4:64:d5:37:28:c9:1c:49:8b:7f:cf:10:f4:e0:
f0:a9:69:41:77:e8:c1:3c:c0:ed:ec:c4:53:a8:00:
68:32:50:7f:92:65:34:e8:96:f4:5d:b9:e7:6e:8c:
b8:75:ec:13:88:5f:6f:54:00:32:e4:f0:95:33:26:
f9:ba:4d:22:97:67:39:ff:9b:d1:a0:f9:91:61:6a:
a9:09:e2:a0:59:69:21:a6:10:99:95:48:10:f5:7b:
18:13:db:10:c7:ef:5f:7b:9d:9d:1d:58:a7:0f:b0:
da:bb:e1:99:71:99:91:df:40:5e:97:07:71:73:7d:
9a:bd:83:4c:b2:d8:2d:dd:21:4e:18:1a:a5:2a:41:
87:e2:61:4d:4c:87:5d:74:ed:b5:ed:2d:b7:09:02:
10:38:eb:e4:a4:0d:95:d6:6f:1b:96:c4:23:23:4b:
d8:e8:66:50:4f:91:4d:8b:d6:63:74:ad:b1:64:cf:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:80:B0:10:AB:55:19:0E:48:30:80:EE:F7:CF:00:A7:88:95:87:74
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3CD6F8BE096C11F0B8EF8E4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.66.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:f5:12:5a:8f:4f:7a:31:15:c5:41:6b:26:c9:da:c9:ba:41:
58:b4:94:3d:c1:80:31:07:dd:32:1f:b2:95:ce:04:01:c6:b9:
37:8a:0b:a5:07:37:ae:84:19:78:49:90:ef:d5:0f:2b:8d:94:
49:a7:b5:06:c9:72:18:3e:d2:45:2b:a5:a8:f8:cc:7d:4e:ed:
2d:dc:71:08:d8:e3:bb:86:c9:bc:28:77:b5:2e:f9:fd:fc:ce:
9c:ac:17:1e:be:72:ff:8e:70:0f:f7:52:c4:27:ed:76:df:fb:
10:cb:34:d4:ba:9a:15:09:b9:be:58:1f:cd:51:f8:02:c8:45:
d7:51:1f:cf:6c:c1:04:36:17:93:d3:50:c9:95:a9:11:b3:21:
5d:24:a5:e8:15:b3:42:7b:4b:3a:24:01:a9:91:bc:f7:c3:6b:
e2:9f:8b:96:b0:27:08:06:80:82:b9:fa:06:c8:f8:1f:3d:16:
e1:a6:a0:91:67:30:37:48:3b:93:8d:d5:e2:21:6e:60:a3:8e:
96:a2:8a:fd:1f:29:86:50:bc:96:e0:89:25:e6:81:34:a4:32:
39:54:22:80:30:08:bd:4c:58:9d:09:0c:11:62:be:c7:e5:a0:
1a:fd:15:b3:89:97:85:59:d8:24:98:fe:03:4a:4f:a5:83:0f:
d3:28:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:15 2025 by rpki-client