Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43F9E98C0A1411F083B5C351762E951A.roa
File: 43F9E98C0A1411F083B5C351762E951A.roa (raw, json)
Hash identifier: IIKWxYMiOLT9k8JGV8MPIqzBd5vu0gZXc1Uak4eMqBU=
Subject key identifier: E9:50:C0:DB:C5:00:59:31:46:5C:21:83:FC:6C:61:26:6C:59:5A:04
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0874
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43F9E98C0A1411F083B5C351762E951A.roa
Signing time: Wed 26 Mar 2025 07:31:00 +0000
ROA not before: Wed 26 Mar 2025 07:30:56 +0000
ROA not after: Thu 26 Mar 2026 07:30:56 +0000
asID: 4766
IP address blocks: 102.135.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:30:56 2025 GMT
Not After : Mar 26 07:30:56 2026 GMT
Subject: CN=67e3ad34-c703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:a2:4f:3d:32:29:6f:74:c2:fa:12:40:3d:
c0:2b:36:d8:a8:ea:ea:13:ed:9e:c7:13:93:72:41:
73:5d:86:d7:bc:9e:68:16:07:5c:3b:c7:0b:41:fd:
b8:5e:66:41:f4:c6:72:3f:c0:86:6e:b2:31:8f:f9:
13:88:d4:98:16:cc:bf:85:c9:8c:1a:55:80:76:79:
dd:d2:e8:c4:0c:20:4a:5e:ab:ed:b3:cd:65:b6:eb:
4a:ff:02:ec:aa:58:1c:a1:fc:0e:de:7b:88:1a:a0:
93:c3:16:bf:f0:44:df:b9:da:1d:ad:85:f3:6b:5b:
25:2b:49:3f:cb:21:19:d6:1c:a3:6e:f0:b6:ed:7a:
1b:94:1d:a8:3e:fb:e1:e5:a1:17:3a:6c:7e:d7:22:
1f:b4:a8:1f:ce:0f:2e:de:97:30:67:9b:72:38:7b:
6b:74:74:a2:02:13:5d:77:48:90:50:4f:92:02:f9:
8c:c4:20:85:fa:36:7b:4b:7f:c6:5a:3d:f0:d9:2c:
d6:15:61:16:1d:33:55:f8:7c:ab:33:5c:59:45:23:
c1:19:fb:bc:75:7f:50:15:59:b1:8c:4d:ca:57:6d:
95:fb:9b:a7:65:c6:ff:04:94:0d:a0:dd:52:ab:24:
22:ca:d1:f4:28:c9:cf:d8:ba:2b:4f:da:5a:e8:38:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:50:C0:DB:C5:00:59:31:46:5C:21:83:FC:6C:61:26:6C:59:5A:04
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43F9E98C0A1411F083B5C351762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
50:4a:77:b6:02:ec:1d:3d:03:b9:96:75:8f:3c:3d:e2:be:f1:
2c:c7:15:ea:a8:4c:e2:dd:60:67:c0:38:3a:d2:88:8b:d8:4c:
25:09:d1:03:a0:9c:59:60:6e:75:9b:cc:86:03:9d:ac:03:cb:
66:24:cb:c5:71:63:fa:47:dd:ea:e6:23:37:a3:3c:d3:60:fa:
0a:6e:ec:16:7d:a7:d5:40:83:50:93:ec:58:fa:e0:4e:c0:26:
28:07:fc:c4:59:70:7e:a2:1c:40:7d:09:55:5b:04:60:e0:a5:
ff:9c:ff:c2:83:26:bf:8c:97:e2:f4:f5:50:21:26:38:99:a2:
4d:7d:25:bb:1a:a3:33:4a:a5:9d:55:47:7f:19:19:47:ec:83:
56:ce:45:8a:27:5e:14:03:81:3f:27:cb:da:fa:c5:23:cd:e2:
e7:4c:54:0c:7e:e9:af:aa:47:c2:a9:9d:eb:8a:4b:97:00:b4:
d8:9f:77:d0:93:b4:2c:9e:2f:15:21:fa:97:a6:77:fd:c2:e8:
15:44:19:9e:1b:fc:76:11:8d:91:86:23:7d:ca:8e:2f:c1:0e:
12:56:64:fb:a5:b9:fe:fc:de:33:3c:7c:75:d8:98:92:d7:a9:
87:53:de:cd:0e:7c:2d:6d:bb:48:cb:65:2f:24:9a:71:59:d9:
d4:dd:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:15:00 2025 by rpki-client