Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4F57416A089F11F0BFEB0568762E951A.roa
File: 4F57416A089F11F0BFEB0568762E951A.roa (raw, json)
Hash identifier: /+5hk6uvg3cVXBfIr5GPWnJb1Li7GC/AScybFcqCQT4=
Subject key identifier: F0:F9:29:5E:34:72:63:61:EE:E6:FB:8E:3A:ED:28:2B:F7:12:F2:76
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07AF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4F57416A089F11F0BFEB0568762E951A.roa
Signing time: Mon 24 Mar 2025 11:01:17 +0000
ROA not before: Mon 24 Mar 2025 11:01:14 +0000
ROA not after: Tue 24 Mar 2026 11:01:14 +0000
asID: 2914
IP address blocks: 102.135.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:01:14 2025 GMT
Not After : Mar 24 11:01:14 2026 GMT
Subject: CN=67e13b7d-fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:71:30:f8:69:fd:7f:3f:2a:d2:9c:cc:0a:
6c:05:19:f4:13:e6:97:61:a0:ed:93:a0:1e:3a:0a:
b7:e0:f0:fe:db:af:1a:d4:e4:ef:b9:01:7f:60:a1:
36:e2:f9:81:13:6b:26:57:9d:ca:c8:ec:48:c1:29:
de:2f:69:44:db:55:45:8e:f2:9e:e8:b6:51:92:14:
ac:ce:9f:3d:5c:cd:1c:bc:a8:db:79:0d:cb:02:31:
0a:73:c6:87:39:73:49:43:f3:ed:23:ae:36:82:ac:
86:36:5e:34:c0:8d:62:33:e4:22:12:87:90:14:3d:
e0:74:45:e9:b4:22:a6:d6:f0:ed:5a:5d:a3:82:9a:
6a:32:64:9d:5d:2d:c8:46:82:75:ae:b9:99:df:1c:
a4:c9:d3:b1:e9:f7:9c:b8:47:33:f8:bc:34:b9:e2:
66:25:e6:87:16:12:ae:59:e3:ed:da:75:93:17:05:
18:88:ea:4e:df:2b:45:87:3b:e7:86:31:ea:76:ae:
bc:ee:ec:e0:c7:02:8f:86:50:97:9e:89:bd:d9:b6:
3f:68:82:8c:3c:60:02:b9:dd:65:a3:7d:70:c1:28:
74:27:9b:2b:cf:c4:a7:cd:3f:1f:af:f0:a8:16:05:
32:51:b8:ab:9f:5a:88:36:e5:5c:5f:97:6e:73:14:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:29:5E:34:72:63:61:EE:E6:FB:8E:3A:ED:28:2B:F7:12:F2:76
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4F57416A089F11F0BFEB0568762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ac:de:e4:21:83:62:4a:de:6d:55:ad:30:19:65:66:9f:9f:
54:f9:d9:f7:95:1d:66:90:4b:77:16:0a:b2:87:ef:d3:e6:80:
f2:a2:0a:91:cf:97:d9:00:41:90:a0:73:f6:32:00:fd:dc:c9:
33:d4:9d:77:d3:42:05:5d:2a:55:c2:95:e6:e7:f2:81:bc:e3:
59:e9:c7:dd:26:58:d4:45:1f:a5:9e:22:67:3e:75:ca:8b:c8:
71:d7:aa:89:fd:57:7e:09:76:75:71:87:5c:3a:7c:02:3c:8a:
e1:23:85:e3:d6:2d:4f:6c:d9:d8:02:26:4d:0b:7b:f4:23:90:
d1:45:1a:04:09:e9:0e:41:22:cb:a2:e8:3d:b5:0c:0d:23:8e:
18:3c:71:f9:be:fb:cf:ad:88:98:0c:e7:41:45:31:35:74:36:
6b:72:7d:96:35:b6:48:f2:b8:a3:4c:68:e0:bd:fa:fe:98:8e:
bf:71:9c:fd:10:57:24:0a:37:b4:25:b7:b6:66:d0:e3:50:33:
61:e0:74:d2:d2:48:02:e5:66:b8:fc:b3:07:37:3b:57:f2:ab:
9c:d7:13:5e:e1:08:f8:a2:80:1b:3d:1c:a4:d6:95:0e:6c:04:
db:7f:71:da:cd:27:75:16:b2:45:20:cb:3c:f3:74:21:e0:5e:
1a:07:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:54 2025 by rpki-client