Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/89B0106A096E11F0B9C3D459762E951A.roa
File: 89B0106A096E11F0B9C3D459762E951A.roa (raw, json)
Hash identifier: 64fuFz9kMe3S8n8gOJsaIDQTOyC13fo6PKvBQuezqN0=
Subject key identifier: 4D:1E:27:38:C0:18:26:D2:86:C3:B0:0B:FA:E4:38:E0:A1:BE:B7:5A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0846
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/89B0106A096E11F0B9C3D459762E951A.roa
Signing time: Tue 25 Mar 2025 11:44:41 +0000
ROA not before: Tue 25 Mar 2025 11:44:37 +0000
ROA not after: Wed 25 Mar 2026 11:44:37 +0000
asID: 2914
IP address blocks: 102.135.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118 (0x846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:44:37 2025 GMT
Not After : Mar 25 11:44:37 2026 GMT
Subject: CN=67e29729-fd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:0b:a6:5d:34:2f:c9:9d:c7:c6:c5:1d:8a:
a2:f3:7a:5a:b6:9d:37:92:d5:80:7a:0b:04:9f:7e:
0b:ad:b3:4d:a2:9a:f1:63:b2:8f:1e:0d:96:77:f2:
fb:39:33:d2:ce:16:2f:9b:8a:e7:4c:ef:33:f6:9e:
f1:1e:da:7e:53:dc:77:45:0d:77:75:81:98:48:ce:
e8:5a:c6:5b:91:a3:b1:26:2e:e2:a6:b4:40:02:ad:
09:ca:d8:e4:ee:f3:4b:2a:66:37:9c:5d:24:b0:96:
a4:a7:4b:cf:98:82:9f:ae:88:05:69:1b:ef:66:56:
4b:3d:7d:a6:f2:ff:d6:bd:b4:e2:66:9d:18:83:ac:
f9:04:87:30:e2:91:9a:7e:c7:3c:a7:25:a7:e8:4e:
7d:e9:d4:c2:24:79:3d:7b:ea:6d:7e:19:54:d4:be:
85:99:6b:70:ca:50:ec:a6:90:ad:cc:6f:47:39:ae:
d1:df:c7:af:21:9a:23:fd:c0:a1:e1:f8:e4:43:13:
31:70:40:17:6e:b8:75:8d:bf:8e:7a:4c:d9:4c:fe:
c5:42:dc:d6:19:f5:c6:85:b2:79:57:71:c2:ac:df:
22:58:ba:03:1d:5a:b3:0f:0a:b7:e0:83:10:57:15:
19:f2:53:ab:47:0f:1e:bc:ba:0b:84:2b:86:6d:fa:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1E:27:38:C0:18:26:D2:86:C3:B0:0B:FA:E4:38:E0:A1:BE:B7:5A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/89B0106A096E11F0B9C3D459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.94.0/24
Signature Algorithm: sha256WithRSAEncryption
79:87:62:37:fd:16:1f:0b:9e:c1:bf:c1:58:73:f9:97:a2:67:
3b:7b:be:2e:d7:0b:20:ef:af:e5:17:1a:6d:be:ba:d1:1d:15:
91:3e:d7:fd:bb:1e:da:6a:6c:e8:6c:3d:17:be:50:c9:40:e7:
62:8c:00:a5:f6:e7:b3:01:b6:57:8d:02:41:6a:69:f5:d3:5f:
6a:ec:fe:6a:24:44:67:d5:8d:0b:b0:be:cf:93:2e:a5:2a:de:
2d:9f:ba:53:26:a2:00:97:1d:4f:e2:95:4c:c0:74:32:c0:0a:
2d:cf:14:c8:c0:5b:37:4d:d5:b9:ef:b6:36:26:55:18:73:5c:
08:21:0b:0d:b2:07:79:86:3d:e0:3c:28:7b:bb:3e:e9:50:9e:
dd:2a:b7:59:42:a0:7d:c5:7c:09:31:18:8b:78:ad:6f:c0:e1:
20:b2:5f:65:50:ee:87:13:0f:83:ef:bd:9c:a2:5c:38:2e:00:
d5:7c:46:a5:06:05:3a:ab:8a:b4:e0:1d:1a:68:82:ce:ad:d8:
c4:44:8d:f3:0b:eb:6f:1f:57:33:c3:bb:00:34:1e:91:a7:96:
cc:2e:2c:c3:c0:03:65:6a:38:83:1f:f2:a6:bd:09:14:b0:f0:
81:52:a9:e5:62:3c:d6:83:73:80:7c:dc:d7:1f:d9:9d:68:e6:
5f:fb:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:34 2025 by rpki-client