Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D64EE7A096D11F09409E453762E951A.roa
File: 3D64EE7A096D11F09409E453762E951A.roa (raw, json)
Hash identifier: YmcBfNHK9SnSvzxkXrKHj7Jwdp0YkHg/K1PIrTgqXXY=
Subject key identifier: A1:5D:E0:18:34:50:F9:8C:72:DF:3E:FF:3E:1F:A2:95:4A:A9:8C:CC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 082E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D64EE7A096D11F09409E453762E951A.roa
Signing time: Tue 25 Mar 2025 11:35:23 +0000
ROA not before: Tue 25 Mar 2025 11:35:20 +0000
ROA not after: Wed 25 Mar 2026 11:35:20 +0000
asID: 2914
IP address blocks: 102.135.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:35:20 2025 GMT
Not After : Mar 25 11:35:20 2026 GMT
Subject: CN=67e294fb-e248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9e:c2:c4:38:00:3e:11:69:fc:29:3f:6f:a0:
34:7b:14:31:e3:db:39:e0:0c:d4:74:54:d2:e7:ef:
f6:d5:e1:ba:b0:14:2d:92:78:25:68:19:e3:a0:22:
bc:37:78:c2:06:38:c3:79:18:36:c0:46:8e:49:f3:
2c:46:fb:e2:e8:85:18:3c:9e:9e:24:84:53:cf:f9:
91:15:23:f4:b9:5c:79:ad:d0:10:ad:fd:f9:24:fa:
c4:63:c6:a0:6e:bd:65:cb:48:27:a9:9e:f3:6d:23:
f9:32:54:23:bb:8b:73:a1:e6:7f:32:81:15:f1:1d:
c3:2c:25:bb:d4:7a:6f:54:6b:da:63:bd:6f:6e:8a:
1c:f0:74:a1:14:c6:fa:f0:f0:f7:d6:fd:45:83:7d:
db:5f:97:58:e2:81:f7:a1:3a:9b:4a:22:38:0a:79:
5a:ff:48:96:04:24:65:4e:ab:c7:9e:83:b9:01:68:
9d:3c:6f:1f:86:dc:6d:a7:b2:e7:1c:6e:77:f1:11:
19:ec:85:64:fe:3e:79:c5:5d:69:96:ed:35:ea:59:
ad:05:63:3e:b0:b7:d7:6b:29:0e:6b:d2:ac:a6:d4:
8b:d7:17:fb:e7:3a:9a:03:13:7a:b7:1e:49:4d:f1:
9f:18:0f:28:28:cc:46:00:a7:98:db:25:4d:8d:c6:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:E0:18:34:50:F9:8C:72:DF:3E:FF:3E:1F:A2:95:4A:A9:8C:CC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D64EE7A096D11F09409E453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.82.0/24
Signature Algorithm: sha256WithRSAEncryption
94:24:7f:8f:48:c6:5e:d8:bb:ec:1b:02:f4:5b:7d:21:44:a9:
b4:21:f4:ab:de:11:6e:60:34:d0:53:8c:e3:29:ee:dd:2b:0c:
4a:4f:87:dd:12:b3:2d:72:1b:79:3b:91:37:bd:43:77:b7:19:
0c:62:b5:e2:a5:80:5c:28:22:d6:04:d1:c1:c9:6d:41:85:64:
46:29:4e:47:68:9e:9d:37:78:c0:ab:37:c6:c2:22:69:46:16:
47:6c:8a:d4:60:b5:c0:2e:67:45:89:c5:52:ef:12:60:c5:ea:
df:4d:46:e1:dd:4a:24:5d:16:23:d6:75:26:8a:0e:ad:fb:f1:
b3:b4:40:55:b5:b3:8c:4d:51:cf:8e:fd:a0:53:de:d0:41:d6:
84:4b:d5:79:56:56:e1:e9:aa:27:da:67:58:16:b2:82:83:a7:
d9:a9:49:32:dc:81:77:cf:40:be:2b:6f:7d:7d:c9:d5:46:95:
4b:09:53:a2:0f:e2:35:c0:e8:5e:1b:79:33:68:83:40:47:89:
8f:b7:6e:ab:1c:be:ca:15:55:bd:d4:4d:5c:06:33:92:67:61:
a3:31:20:25:61:1d:95:b5:e6:e8:ba:d7:c5:7e:ef:07:c3:8b:
a3:fc:90:2b:35:e9:24:ea:68:e6:a4:0f:12:8b:29:22:63:77:
bd:ce:47:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:06:04 2025 by rpki-client