Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/76D620E6093811F0B91AA392762E951A.roa
File: 76D620E6093811F0B91AA392762E951A.roa (raw, json)
Hash identifier: PkZ5Mbi9aoe1EK+nrBd7Hqgh31nNDjriSP0LLC+qrVc=
Subject key identifier: 92:E8:C1:3B:0E:6A:25:D4:CC:DD:E6:7D:26:AF:C3:A7:E3:DC:88:6B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0800
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/76D620E6093811F0B91AA392762E951A.roa
Signing time: Tue 25 Mar 2025 05:17:37 +0000
ROA not before: Tue 25 Mar 2025 05:17:32 +0000
ROA not after: Tue 10 Feb 2026 05:17:32 +0000
asID: 5065
IP address blocks: 102.135.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 05:17:32 2025 GMT
Not After : Feb 10 05:17:32 2026 GMT
Subject: CN=67e23c70-2073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:86:b4:3d:37:90:e7:7e:c3:a6:b2:95:24:
3d:5b:92:ba:bd:fb:e2:e5:05:78:a0:9d:c8:4d:29:
f6:01:6d:85:ad:72:f7:c7:d2:df:7e:55:88:0f:ad:
f4:e3:24:32:13:a3:69:ee:41:7b:73:eb:87:67:f9:
0f:46:7e:d9:8e:16:78:62:cd:db:22:68:99:7d:bf:
11:60:46:2d:ff:86:1a:87:67:3e:cd:3b:cd:3f:3d:
b8:ff:d3:62:db:4c:c3:3c:d2:44:99:77:6d:1d:14:
b9:91:cf:0e:a7:ac:a4:03:82:27:ab:ae:2e:89:55:
c6:94:30:5f:f8:38:a3:13:e4:4d:5a:c3:a5:1c:94:
c5:44:d5:d2:e5:92:5d:84:55:eb:ca:72:bf:5e:ea:
30:bb:44:b1:d1:25:7d:61:52:9d:18:34:b1:19:08:
e2:cb:7d:06:55:ff:e2:7b:e1:f8:2e:6d:b9:3e:37:
03:fb:e1:8b:4a:49:d9:70:08:64:ba:02:c8:7f:31:
ad:27:d1:9f:30:94:c8:52:7d:5c:0e:a7:5e:da:77:
d6:48:02:c0:6f:cb:3a:2d:7a:11:33:20:a9:ba:5f:
98:8c:16:a6:91:34:61:61:70:84:ff:16:18:bc:bb:
45:1f:91:a8:b9:ac:c2:a8:c6:21:71:7a:86:6e:3e:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:C1:3B:0E:6A:25:D4:CC:DD:E6:7D:26:AF:C3:A7:E3:DC:88:6B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/76D620E6093811F0B91AA392762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.97.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4e:8f:85:91:c3:df:3b:77:ad:11:47:89:8f:09:33:0a:13:
3b:ef:f8:a5:61:51:9c:04:6e:18:20:37:8b:87:aa:67:7d:51:
a7:ad:0a:bc:00:22:b4:86:ae:fa:99:85:66:85:04:98:b1:2f:
41:be:8b:b5:f8:1b:03:52:fb:76:2c:14:82:07:ad:e3:ff:50:
0d:a7:c9:dd:8a:34:5f:08:f6:41:ca:d8:f5:0b:f4:7e:71:d2:
e6:1d:dc:48:1a:dc:d4:10:b0:29:81:1f:4a:c4:2f:6a:4c:a6:
5b:c1:79:37:f1:4a:c0:fa:25:9e:0c:89:8d:92:9e:2b:54:1c:
ea:28:53:d6:6b:2e:76:82:2a:e7:2c:fd:81:05:e1:5c:85:31:
77:29:af:c4:6a:51:70:5e:8b:c2:80:98:72:96:fa:f4:53:dc:
85:30:18:2d:8b:dc:18:f2:67:49:9e:d2:f9:b8:e0:10:8f:30:
dd:fb:6b:53:40:b3:e9:c7:33:75:83:38:1f:ad:7a:3e:70:29:
07:74:db:a5:78:c7:63:62:65:14:8d:00:2d:5b:fb:a1:f6:64:
bf:8b:35:f2:0f:d6:d8:9f:2a:dd:60:4f:39:c3:31:4c:5d:68:
66:fa:54:3a:b8:35:84:3f:e5:fb:0d:af:a6:32:56:49:b1:20:
7b:d2:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:08 2025 by rpki-client