Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/806E137C096D11F0A3B1F653762E951A.roa
File: 806E137C096D11F0A3B1F653762E951A.roa (raw, json)
Hash identifier: 8ugkVzmyh0WFO9jTLwK49YF7PP26jyknEUc84KP6u3M=
Subject key identifier: BE:0A:52:27:FC:FE:68:E4:EE:A8:A9:01:09:57:8C:76:7A:6C:B1:B1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0832
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/806E137C096D11F0A3B1F653762E951A.roa
Signing time: Tue 25 Mar 2025 11:37:16 +0000
ROA not before: Tue 25 Mar 2025 11:37:12 +0000
ROA not after: Wed 25 Mar 2026 11:37:12 +0000
asID: 2914
IP address blocks: 102.135.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:37:12 2025 GMT
Not After : Mar 25 11:37:12 2026 GMT
Subject: CN=67e2956c-87c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:b2:4c:05:01:8c:ba:02:df:f4:ca:65:21:
fc:f3:f9:99:99:3c:59:87:a4:5b:92:12:e8:c6:30:
2a:ed:a3:c7:b2:6b:7c:c3:91:ea:df:51:f8:9c:f1:
42:f7:96:0b:43:ed:9f:7d:fb:ec:87:80:90:a0:1f:
a5:88:6d:4c:08:52:97:5c:c8:a7:cf:ef:56:c5:f9:
fb:ce:c3:7d:c7:a5:b7:84:d7:56:f6:f4:65:4f:ec:
47:c1:90:5b:70:0d:fb:fa:bc:eb:c5:58:74:00:97:
42:43:18:e7:23:08:fd:74:59:ea:36:15:ae:80:5a:
ad:bf:48:71:61:98:b4:7c:43:53:5e:12:94:6c:db:
04:b5:a8:bc:89:c7:e5:e7:e6:b9:01:83:e5:73:43:
de:fb:37:20:7b:90:a7:a8:23:5f:58:8e:4f:d8:4c:
ac:ca:27:09:e7:22:06:ce:e7:e9:66:9a:27:de:76:
6b:a9:0e:7e:a4:bd:18:9e:ce:aa:12:c3:24:dd:e0:
81:d4:ac:ff:b0:93:e2:a3:1d:48:11:3a:c7:80:fc:
58:d2:f6:93:7c:b8:ec:46:2f:c3:55:d8:f8:cc:fd:
57:2c:c8:45:45:f7:15:b4:90:8a:42:fb:e1:69:34:
da:a2:2c:42:f1:70:e4:81:0e:07:41:fd:2b:40:db:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:52:27:FC:FE:68:E4:EE:A8:A9:01:09:57:8C:76:7A:6C:B1:B1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/806E137C096D11F0A3B1F653762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1a:7c:72:d7:e6:8b:77:70:b8:99:ff:fe:01:38:6b:e1:fd:
ef:cb:23:10:34:35:16:50:ce:19:84:74:bb:1e:38:37:98:4f:
d6:76:2c:f0:60:db:bd:07:b7:4e:09:1c:84:9a:fb:b9:20:56:
61:90:61:04:f5:fc:d5:d6:53:28:ce:88:21:fb:4e:9a:3a:bd:
63:8e:df:5c:8b:83:cb:dc:60:66:a1:31:a0:3b:21:f5:21:2a:
e9:33:d0:9a:a5:7b:27:1f:df:f0:e4:73:06:fe:e4:9f:08:8a:
96:5a:a1:f1:31:86:c7:90:d4:f5:46:0b:76:66:96:35:af:5d:
89:a3:4a:ac:63:68:aa:e9:5b:ca:bf:fc:ce:44:99:c9:3a:1d:
9a:fe:d4:2e:ee:b8:81:cc:46:5a:42:ca:9e:91:63:27:b3:0d:
9a:59:dd:df:e3:32:9e:b7:59:9f:de:aa:79:13:47:64:75:2d:
b2:ca:75:89:c0:5d:93:65:c6:eb:16:ba:70:3a:29:c6:20:68:
f0:f6:f8:02:15:4d:5a:4f:c1:14:d5:eb:0f:33:39:54:91:7f:
53:6f:7a:e8:6e:32:49:c3:27:06:d1:be:58:06:a6:a2:9f:f4:
c7:52:d3:ff:a7:27:1c:40:3f:35:e4:a6:e9:3a:b5:03:30:4c:
26:80:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:07 2025 by rpki-client