Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5CB2ED18F7F711EFB693A2B9762E951A.roa
File: 5CB2ED18F7F711EFB693A2B9762E951A.roa (raw, json)
Hash identifier: aN0Bfx8m2AoJLUyPJbtr11jKPMu+A85tYhVBRW207MY=
Subject key identifier: C5:62:69:7C:85:0F:C7:4B:9D:23:E8:6D:AB:2E:77:CA:80:50:56:74
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06BB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5CB2ED18F7F711EFB693A2B9762E951A.roa
Signing time: Mon 03 Mar 2025 06:18:46 +0000
ROA not before: Mon 03 Mar 2025 06:18:41 +0000
ROA not after: Tue 03 Mar 2026 06:18:41 +0000
asID: 36352
IP address blocks: 102.135.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1723 (0x6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 3 06:18:41 2025 GMT
Not After : Mar 3 06:18:41 2026 GMT
Subject: CN=67c549c5-235a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:e3:41:d2:bd:18:bf:d6:77:e6:93:18:9f:
90:bb:96:9b:9d:1e:fd:df:56:b1:be:6c:b0:2e:e0:
0f:87:24:00:5b:67:c1:8a:6b:ba:5b:23:7a:71:4e:
72:e2:5a:cc:05:75:af:2e:60:53:89:67:f7:1c:c3:
f2:f9:ed:f8:f3:7b:d9:a8:29:57:3c:70:62:3f:f6:
03:a5:7e:58:78:32:d3:87:d1:ba:5c:99:63:d3:1b:
1a:cd:07:2f:8b:a9:92:18:1f:90:ae:dd:ce:d0:32:
da:06:98:14:6c:91:b6:4d:90:00:f2:9b:29:09:cf:
11:e1:66:9e:23:48:10:6a:32:94:24:05:fe:36:ec:
a5:c1:2a:3d:55:a8:cf:bb:fa:bb:c8:cd:15:a4:21:
67:b9:de:21:2d:62:b5:36:1a:03:70:49:f1:f1:24:
8b:47:f1:74:98:6b:e3:be:b1:1b:d2:58:08:a1:c6:
51:0a:dd:a4:38:ed:ed:7b:7a:f2:bb:28:c5:6b:90:
1a:ad:95:8d:cd:d0:5a:d8:a0:df:40:54:c8:fc:2c:
ce:d4:98:08:89:23:db:e8:1e:e7:c2:17:30:4b:94:
74:e1:63:91:3e:9e:c2:a5:6e:60:84:cf:7b:bf:73:
ae:ee:0e:11:ab:dc:4e:cf:11:a6:c3:87:77:d6:1d:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:69:7C:85:0F:C7:4B:9D:23:E8:6D:AB:2E:77:CA:80:50:56:74
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5CB2ED18F7F711EFB693A2B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.96.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2c:d0:6c:b2:ba:e5:b6:ec:4e:67:77:68:d3:81:29:eb:1a:
5a:16:37:1c:c5:8e:28:dc:9f:ce:39:d5:16:d5:a9:79:20:ad:
85:36:b9:f4:e8:72:a7:e8:46:f3:7d:79:3a:fc:d1:e5:22:ad:
9c:4f:91:5f:e7:5a:c0:86:2f:a5:4d:94:6b:9f:56:66:75:2f:
15:39:98:9c:02:01:a3:94:69:bd:29:64:bf:d8:e0:90:40:fa:
c0:90:c8:ae:6b:1d:4d:d4:7d:b7:9e:46:21:26:de:43:b4:37:
1e:a4:63:6b:74:c4:ab:48:9b:72:ba:bd:cd:27:10:32:7f:56:
e0:e3:09:87:00:d3:43:a8:47:9e:ee:a5:a9:ce:fa:4f:72:d5:
11:93:6a:46:88:e9:b5:09:17:1d:b8:a6:76:39:69:2c:df:5c:
b7:ad:51:01:99:51:e1:25:2c:89:ea:17:fc:bd:56:1d:f4:81:
1c:0f:45:3a:ff:3e:d0:af:35:d9:75:74:df:d4:98:23:49:78:
88:c9:c2:93:fa:8b:77:ea:e6:c6:53:bf:45:99:e8:3b:76:f6:
17:8a:85:cd:d9:3a:f1:ff:b6:aa:71:0f:15:df:63:63:2f:d0:
49:49:96:eb:70:49:6f:d7:f6:68:26:4a:b1:3d:78:e5:fc:78:
06:63:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:25:32 2025 by rpki-client