Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5D0C0348096E11F0A1856358762E951A.roa
File: 5D0C0348096E11F0A1856358762E951A.roa (raw, json)
Hash identifier: byYnKxgXhCG7cHG7sJtCF430gW5yX/7BfIpMLJypBIA=
Subject key identifier: 8D:05:7F:A7:21:22:6B:63:57:CF:CA:4A:E1:51:F1:21:1C:55:34:B7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 083E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5D0C0348096E11F0A1856358762E951A.roa
Signing time: Tue 25 Mar 2025 11:43:26 +0000
ROA not before: Tue 25 Mar 2025 11:43:22 +0000
ROA not after: Wed 25 Mar 2026 11:43:22 +0000
asID: 2914
IP address blocks: 102.135.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:43:22 2025 GMT
Not After : Mar 25 11:43:22 2026 GMT
Subject: CN=67e296de-2150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:5d:95:c9:27:08:4f:75:aa:9b:22:22:48:
4c:bf:7f:2e:6c:21:32:1c:11:bb:12:4f:a7:cb:c5:
30:a2:18:a7:04:a1:2e:30:45:c1:c4:45:60:ac:a1:
41:67:51:2e:29:7d:d6:cc:85:21:44:8e:6f:0b:08:
10:0f:78:3b:ea:95:84:13:9d:ac:d5:9e:0e:b5:47:
d7:04:fd:39:98:2d:cd:a6:94:a6:24:88:7b:47:3d:
c3:0b:0b:ba:2c:30:ec:c1:d2:75:6d:76:09:8a:b7:
5a:f1:25:5a:16:a7:69:2d:45:84:31:ba:c8:73:e1:
86:3d:39:36:b8:b6:ac:f5:07:41:fd:58:f1:e9:cf:
23:57:e2:d5:82:1f:8b:d9:89:02:18:1f:bf:17:9a:
2e:f5:8a:6a:47:cd:98:55:fd:55:90:3b:8f:ad:fc:
26:a8:1f:cf:3a:a8:e6:0d:4e:45:4f:59:16:ce:bb:
93:c2:86:19:c3:f0:b8:e3:56:60:71:1d:d9:8a:6f:
c4:12:de:9e:57:1b:5b:23:70:50:5d:81:28:4f:4d:
46:fc:01:4a:92:c9:73:78:4f:7f:3e:ad:03:e2:b5:
1c:2c:8f:3d:9a:f3:9c:36:44:9f:01:98:85:ab:5b:
25:43:97:90:1b:39:e2:d3:a9:d8:80:0d:12:6a:d8:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:7F:A7:21:22:6B:63:57:CF:CA:4A:E1:51:F1:21:1C:55:34:B7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5D0C0348096E11F0A1856358762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9f:d1:b3:a9:8b:31:10:61:de:e0:c4:5d:09:a7:68:42:30:
da:0c:19:2e:03:c6:1a:8d:d2:80:ac:15:16:c0:5f:5d:63:7b:
57:ca:4b:a7:ea:05:36:7e:25:16:e1:c8:e5:29:5d:61:4d:7d:
22:0f:30:11:b1:ce:d1:ed:94:8f:e9:1d:f0:79:9b:8d:20:b6:
91:79:d6:90:c2:1a:6f:3b:22:24:80:9e:2e:a6:47:6f:f4:38:
fb:85:53:d8:d1:34:8f:58:b4:54:b1:bd:7b:fe:77:11:05:f9:
a5:7e:b7:ee:0a:46:06:84:0b:a5:20:5f:c4:35:1c:67:3c:d9:
b4:ec:4d:29:17:e9:d8:4d:6f:56:64:c3:71:0f:4d:18:34:79:
f0:eb:03:0c:55:b3:de:3b:04:3c:3b:a7:c8:98:ec:8b:8e:55:
0f:6c:48:05:6f:7d:29:f5:2b:61:5e:57:04:d6:90:68:43:ad:
e7:cc:5b:bf:8a:4c:b2:f7:18:56:12:1a:5b:8c:62:6a:4c:9a:
b1:c8:b7:2d:ac:70:e4:44:a3:4f:e4:45:8a:01:a3:18:5a:11:
5d:16:ee:3e:20:db:b5:f2:e5:7a:ea:e1:2e:10:8b:ad:15:0c:
4b:1b:b2:63:05:36:34:63:d4:9f:20:17:0b:84:2e:97:87:f3:
5d:98:66:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:24:24 2025 by rpki-client