Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4584A4DCD33611EFAAB7079E762E951A.roa
File: 4584A4DCD33611EFAAB7079E762E951A.roa (raw, json)
Hash identifier: zPXlfjU8kHVncCUiCg+9SWcNVDfke9u6IAzHjMHvndk=
Subject key identifier: C6:6F:D5:F1:88:04:3A:87:D9:0B:D8:EE:68:F8:15:B5:FA:EF:53:2D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 054A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4584A4DCD33611EFAAB7079E762E951A.roa
Signing time: Wed 15 Jan 2025 11:45:52 +0000
ROA not before: Wed 15 Jan 2025 11:45:48 +0000
ROA not after: Thu 15 Jan 2026 11:45:48 +0000
asID: 53356
IP address blocks: 102.135.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:45:48 2025 GMT
Not After : Jan 15 11:45:48 2026 GMT
Subject: CN=67879ff0-2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:09:d7:aa:42:2b:76:ee:f3:1a:36:59:01:
9a:ff:d4:bb:4b:c5:24:e2:6b:3a:79:49:c5:a9:f0:
d4:ce:63:a0:70:96:78:20:9f:43:0a:0c:25:fa:00:
2b:b1:23:e7:00:13:ac:ff:f4:3f:26:1b:9c:04:cf:
07:28:b5:83:4f:a2:2d:c5:16:1c:fb:44:6a:02:7c:
40:f3:bc:77:04:74:b8:8b:43:f3:57:49:ec:20:28:
d8:92:74:3b:6a:e2:82:ef:15:7c:21:c8:72:bf:78:
c0:09:9d:51:36:e8:b0:ea:fd:c2:48:62:33:03:65:
cf:e4:66:b2:b3:3e:91:64:b6:27:01:40:a7:6f:a7:
c4:b6:78:e1:44:ec:93:c8:5c:18:90:39:fa:8c:da:
72:3d:34:dc:e2:ad:63:20:48:91:a8:48:30:bf:89:
00:cb:9d:19:2d:a9:8f:44:5b:6d:80:8c:f4:16:7f:
84:2e:e5:b8:93:ed:37:cb:7f:ee:62:c9:9e:ac:ce:
92:2b:c6:9a:cf:bb:9a:4d:4a:18:a4:2f:90:94:74:
15:da:ca:5b:35:0c:57:de:bf:0f:7c:8d:8d:be:90:
24:a8:d6:f6:36:0e:6e:c2:58:85:ce:7d:4d:32:b9:
8a:dd:a4:22:7c:c1:31:70:06:81:9a:04:b0:c0:02:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6F:D5:F1:88:04:3A:87:D9:0B:D8:EE:68:F8:15:B5:FA:EF:53:2D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4584A4DCD33611EFAAB7079E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fe:79:01:8f:6e:0b:b9:21:c1:74:30:4e:e4:0c:84:9d:5f:
31:34:4f:85:c0:81:43:da:2b:6a:32:b4:2a:1a:5b:10:b3:7c:
54:f4:38:a6:a8:fc:18:40:54:ef:40:ed:e0:e2:4a:7c:34:3d:
a7:6b:80:90:1a:79:a5:50:d3:c5:2e:04:f8:14:26:fe:96:d7:
6a:3e:31:a1:21:3d:c6:07:c6:39:de:18:63:4b:1e:a9:07:6f:
db:40:f0:08:dc:2a:c8:b8:a7:47:71:97:ed:b0:c1:02:7a:c7:
97:c1:b2:83:ec:2a:57:74:19:17:ee:1d:a5:4f:88:e2:55:22:
2a:34:e2:fe:93:cc:e0:f0:cc:47:7b:0c:d9:f3:9e:eb:db:bd:
14:35:43:4b:54:df:c3:8f:9e:91:4e:42:c8:6b:57:f4:3b:7e:
42:77:2f:be:38:e5:c8:cf:8f:59:a4:a3:e9:ed:58:90:8f:ab:
c1:17:22:0f:96:62:a4:7c:59:6b:b5:e0:45:f3:52:16:34:c4:
00:1d:58:52:aa:96:3f:60:5b:ac:66:d3:e3:be:f5:a3:c5:37:
6c:9a:e0:85:6e:ce:07:f6:17:08:4c:66:18:dc:5f:e8:e5:ba:
42:d3:1d:99:8b:d0:50:d1:fa:ec:3c:03:0d:0e:91:64:a0:2e:
a2:72:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:51 2025 by rpki-client