Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4456BF3C065D11F080784B9A762E951A.roa
File: 4456BF3C065D11F080784B9A762E951A.roa (raw, json)
Hash identifier: nCUQ2Nh0rI7qJvKc7sjWrmhOu25i7cTJGXbQiqzTyHY=
Subject key identifier: 4B:CD:CD:15:9A:3F:F3:30:53:7E:0A:9B:CA:32:6C:09:43:74:0D:E4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0796
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4456BF3C065D11F080784B9A762E951A.roa
Signing time: Fri 21 Mar 2025 14:03:30 +0000
ROA not before: Fri 21 Mar 2025 14:03:26 +0000
ROA not after: Tue 13 Jan 2026 14:03:26 +0000
asID: 9009
IP address blocks: 102.135.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 21 14:03:26 2025 GMT
Not After : Jan 13 14:03:26 2026 GMT
Subject: CN=67dd71b2-472e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:19:1f:f9:07:58:48:c8:ed:e8:4c:d7:73:
55:f1:bc:8b:95:ce:48:a3:de:36:e4:43:0a:5e:df:
0b:30:f6:ca:a3:f6:28:4d:d9:24:ee:af:e5:af:cb:
19:d5:c8:9d:2d:18:1b:d1:8e:f0:28:b3:e0:65:f3:
8f:18:20:f9:d1:78:d5:a2:02:e7:34:28:06:82:14:
4d:7f:8c:c9:38:3e:e2:e3:a4:45:bc:b1:48:b7:9c:
8d:91:d6:19:8e:b1:5e:d1:1d:6d:1d:ed:bf:98:83:
7b:32:d0:28:38:6b:5f:7c:84:07:d7:c7:61:c7:ec:
37:56:8b:fd:96:b6:3f:ea:73:d9:6a:6e:19:15:75:
f5:50:76:c4:97:30:44:e4:ec:9a:f2:a7:0d:65:0e:
29:db:5e:d3:ca:62:05:b9:0a:01:11:8c:23:eb:fb:
d5:ec:52:8d:04:4c:53:a6:ed:b3:63:ef:cc:0a:86:
13:87:f3:d3:ab:07:7e:e4:ca:aa:32:a0:63:e1:5c:
c0:28:b3:33:ac:eb:2f:c6:e2:38:a7:06:ea:74:7a:
32:0c:a4:0d:2c:7e:e8:b9:45:e1:61:53:57:98:97:
5d:72:aa:fd:14:d3:68:23:cd:dd:a2:1d:b7:50:c5:
10:ef:45:8c:e7:d0:f5:d2:32:bf:da:a9:06:fb:ff:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:CD:15:9A:3F:F3:30:53:7E:0A:9B:CA:32:6C:09:43:74:0D:E4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4456BF3C065D11F080784B9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.88.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c1:52:51:fb:71:8a:0c:4a:06:11:f9:82:f9:f0:3f:a2:a9:
00:a0:75:80:ab:52:80:2f:91:92:7b:62:ed:16:e0:2a:3b:22:
8c:17:2e:07:3b:c1:ff:16:f4:a7:f8:91:2b:0e:f3:21:3a:28:
92:ae:d7:0b:da:1f:f7:2e:f5:40:82:fd:d0:b1:14:d4:eb:9b:
b5:b3:41:57:01:24:93:66:bb:c1:ec:c5:9b:08:31:1f:56:d0:
06:76:4d:76:0c:00:b6:ba:31:b7:52:bb:57:52:ec:a1:fa:80:
64:0a:ae:1a:f4:5e:66:05:fd:16:b9:7b:f1:32:eb:39:d7:bb:
74:a1:08:3e:9f:29:1e:12:a3:f8:52:f6:fc:e0:e3:b1:d9:2d:
15:0a:b4:2d:8d:ed:dc:db:f7:c8:11:0e:81:1a:a9:36:6c:09:
76:2e:36:3d:8b:5a:6d:82:b6:b6:0c:94:d6:65:6d:90:4c:45:
90:ef:bb:64:aa:22:0f:de:1b:7d:c1:1c:de:f7:fc:d9:a6:1f:
fe:3a:23:ac:5e:78:1b:18:5f:3f:65:9b:0c:a0:3e:1b:aa:43:
97:93:73:d2:14:13:c6:25:8e:c1:a1:d1:97:44:59:36:bf:1a:
85:f2:cc:d8:a2:00:71:2e:82:dc:cb:19:7e:2c:06:56:cd:74:
83:95:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:38 2025 by rpki-client