Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5B13047E3D5811F0972CEBB8DAE4EC9C.roa
File: 5B13047E3D5811F0972CEBB8DAE4EC9C.roa (raw, json)
Hash identifier: foLg4w9BEJJx9dvlBLl0NUKuGh/oy+yNgCUJD3/yS14=
Subject key identifier: 09:70:0A:22:BA:EB:87:76:AF:69:79:DD:B7:15:D4:0A:2D:4C:60:5D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AD4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5B13047E3D5811F0972CEBB8DAE4EC9C.roa
Signing time: Fri 30 May 2025 13:16:55 +0000
ROA not before: Fri 30 May 2025 13:16:50 +0000
ROA not after: Sat 30 May 2026 13:16:50 +0000
asID: 208485
IP address blocks: 102.135.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2772 (0xad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 13:16:50 2025 GMT
Not After : May 30 13:16:50 2026 GMT
Subject: CN=6839afc6-1b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:cd:2c:ef:19:a0:07:28:9b:00:7c:8a:4a:
8d:d9:c4:78:35:b1:1a:da:19:96:cd:dd:9b:c7:1f:
7c:3a:ec:a8:91:7c:9e:0c:dc:51:f1:2f:80:1a:e2:
e3:9d:df:9c:85:e6:e3:f1:04:cc:5f:80:3d:bc:31:
29:f9:14:ac:6b:62:ae:1c:19:f1:ed:c8:9b:f8:78:
b0:53:4e:1b:aa:9d:d8:76:b3:85:1b:04:b8:95:57:
f2:07:4e:7b:30:4a:54:8d:15:76:33:8b:80:50:b2:
34:85:a7:56:a5:bd:24:e6:8c:e7:8a:c4:9f:7e:3a:
cf:7b:20:e2:93:40:e1:bd:ea:92:fe:ed:a9:0a:62:
19:f9:78:38:b4:e8:4b:1f:49:4b:3a:2f:f8:66:16:
81:7e:c5:99:46:72:71:91:9e:24:90:fd:ed:95:1f:
15:2d:72:2d:b8:69:4f:87:0f:6e:b9:ce:be:57:f0:
9c:30:1a:ab:cd:43:a3:cd:db:ff:90:0c:d7:17:6d:
62:d0:4b:d6:20:da:94:eb:5f:e8:2c:16:33:a2:c4:
b6:ab:d9:47:c6:c3:3b:30:61:7c:c3:c2:fa:19:8e:
3d:f0:48:61:e5:1b:cd:84:07:82:de:e0:e1:75:dc:
ee:af:e5:25:64:65:ad:41:a1:d9:57:46:37:d2:4d:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:0A:22:BA:EB:87:76:AF:69:79:DD:B7:15:D4:0A:2D:4C:60:5D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5B13047E3D5811F0972CEBB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.1.0/24
Signature Algorithm: sha256WithRSAEncryption
02:54:bc:83:f4:d4:9e:14:15:3a:74:9a:17:7f:b6:70:e5:0a:
7a:29:84:98:9f:06:f8:4c:2f:53:1b:2f:02:d7:8a:23:b9:d7:
50:17:0f:17:66:fa:0e:61:d5:f2:ec:c6:6b:cf:18:44:e7:ea:
12:a5:77:de:f6:d7:ea:73:e8:a3:85:ad:69:46:fe:72:91:a2:
71:cc:de:62:8e:2b:7c:98:38:1b:f1:6f:1a:a1:e5:bf:e5:5a:
5d:0a:da:74:40:57:ad:dd:56:d5:e8:1d:9a:09:f8:2c:20:5b:
87:21:8c:be:5f:ef:6c:bf:a1:60:8f:b4:83:28:37:e0:58:92:
f4:b1:f5:22:1d:11:93:55:16:89:ee:e1:c1:84:7d:c4:e1:33:
61:64:3c:96:55:83:90:a4:18:8f:74:7f:4c:fb:a1:48:ab:9b:
5a:76:77:8d:0e:71:73:7f:d0:18:c3:34:bf:96:3f:18:05:6c:
23:64:1f:c8:11:6b:2d:8e:e1:db:b9:99:17:31:ad:d2:33:56:
b2:b1:6c:69:bd:1f:5b:45:3c:3a:f2:51:6d:a3:da:f1:a2:0c:
d1:fb:47:63:c9:16:3a:3a:21:51:04:ee:a8:16:b2:70:d8:f9:
c1:dd:54:d3:7d:46:50:23:a4:01:89:83:d6:5f:02:9c:f6:7a:
2d:34:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:51 2025 by rpki-client