Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/75959BE6062A11F0B577C46A762E951A.roa
File: 75959BE6062A11F0B577C46A762E951A.roa (raw, json)
Hash identifier: GMLJIJBNefy9GUPqRwaTbuhh9xT8fTExlDMQcIcXY+o=
Subject key identifier: 9F:71:67:C1:1C:AF:11:0B:FB:D9:C0:67:DB:34:3E:49:59:B6:C1:1F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0793
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/75959BE6062A11F0B577C46A762E951A.roa
Signing time: Fri 21 Mar 2025 07:59:48 +0000
ROA not before: Fri 21 Mar 2025 07:59:44 +0000
ROA not after: Sat 21 Mar 2026 07:59:44 +0000
asID: 2914
IP address blocks: 102.135.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 05:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 21 07:59:44 2025 GMT
Not After : Mar 21 07:59:44 2026 GMT
Subject: CN=67dd1c74-83f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:6f:51:7b:64:20:cd:c7:e9:0e:3e:99:25:
d1:69:f4:c0:a7:c8:22:b3:f5:c8:a9:62:33:0c:23:
a4:1b:47:f0:f7:89:bd:f7:29:7c:4c:b4:38:01:a3:
28:09:77:d3:04:cd:33:af:ee:55:83:21:32:ec:53:
95:ac:bc:86:73:51:ae:23:29:6b:ae:85:f2:84:ba:
5d:ff:6a:0b:fc:9e:00:cb:fb:e1:4d:67:9f:e5:44:
b8:b9:c9:25:49:e6:81:02:95:27:73:91:e9:56:6e:
fb:b6:b6:7a:21:9e:ab:1f:14:84:4b:b0:2d:96:6b:
b5:64:e1:f6:7f:8b:e8:ac:71:64:d2:c4:e9:cf:87:
c5:27:28:a6:31:55:dc:48:44:46:8a:64:e3:01:24:
26:9b:31:3b:78:0b:cf:38:e7:9a:d7:37:fd:8f:95:
c9:d9:9d:5f:e9:70:ed:ae:9b:b9:a1:b8:69:ba:91:
b3:90:f2:c8:a1:2e:fe:7b:42:ad:f1:c3:34:93:ba:
a6:57:71:20:a6:a2:52:d2:79:51:d1:43:42:83:e1:
d8:a0:2e:0a:4c:a4:33:33:dd:b6:ac:34:75:5e:37:
bf:08:dc:0a:bf:b0:82:a0:f6:8c:85:e2:31:7d:5d:
29:21:24:7f:ce:e7:c8:22:cf:be:d9:77:51:6d:ac:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:71:67:C1:1C:AF:11:0B:FB:D9:C0:67:DB:34:3E:49:59:B6:C1:1F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/75959BE6062A11F0B577C46A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0f:87:1f:ca:57:96:56:12:dd:c4:0e:82:a7:ec:19:6b:36:
7a:5f:1c:26:7a:36:a1:0f:a3:b6:a7:e5:a3:d5:be:ab:53:d1:
42:b7:e2:a3:13:39:55:c8:93:80:1c:67:e2:f1:6a:bb:16:8d:
8c:a1:99:92:25:b5:94:b6:15:a8:48:0d:1a:c4:80:5f:78:a9:
24:3e:29:f7:cc:62:08:7e:9b:5b:42:58:c6:98:34:c0:aa:52:
36:4e:80:d4:9a:22:aa:06:89:6d:02:fa:e1:77:92:bb:71:e5:
41:3b:bb:7e:a7:da:94:ac:39:cf:29:2f:a0:e0:e2:cd:d2:f0:
40:62:ef:a5:80:a7:61:4f:9f:72:67:cc:69:9c:be:cf:e7:36:
d9:38:69:d5:bc:50:6a:12:a0:66:01:5d:29:fc:b3:fd:51:30:
02:a7:cd:fd:73:0d:28:a5:39:fe:43:59:f2:fe:99:8e:43:a0:
04:e9:a8:fa:a1:07:a0:59:ea:49:48:5b:26:83:e8:3d:83:02:
1c:15:5d:4a:09:9d:37:fa:58:4e:fc:69:86:e4:98:4e:00:46:
13:89:84:06:81:20:28:51:42:02:18:cf:5d:2c:57:87:ab:0f:
5a:28:29:de:d3:2a:84:1c:93:65:94:0c:e8:fb:00:ca:f3:3f:
6b:dc:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:52:59 2025 by rpki-client