Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8AACBCFE089F11F0907D1D68762E951A.roa
File: 8AACBCFE089F11F0907D1D68762E951A.roa (raw, json)
Hash identifier: CqnHHxkzGrBaK9a37cMn60weSMs/yc9VWAu3lkOWxDg=
Subject key identifier: EF:7D:4E:68:71:8D:B3:48:BA:11:4B:13:D8:14:AE:B5:A6:41:4E:A4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07B3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8AACBCFE089F11F0907D1D68762E951A.roa
Signing time: Mon 24 Mar 2025 11:02:57 +0000
ROA not before: Mon 24 Mar 2025 11:02:53 +0000
ROA not after: Tue 24 Mar 2026 11:02:53 +0000
asID: 2914
IP address blocks: 102.135.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1971 (0x7b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:02:53 2025 GMT
Not After : Mar 24 11:02:53 2026 GMT
Subject: CN=67e13be1-59dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:ae:53:9e:ad:fe:5e:08:74:f2:9d:d3:a6:
09:13:15:b3:a1:5a:26:fa:72:25:c9:25:b8:0a:b6:
8c:e0:25:4c:aa:01:81:2d:99:46:31:23:ac:38:6a:
42:be:8c:70:66:3c:1e:b2:9f:96:27:9b:d8:82:c8:
2f:91:93:04:a3:6f:e2:18:d8:cc:84:73:c0:48:3d:
4d:d3:12:50:cc:4b:c0:73:cf:b7:b5:0b:a2:43:1f:
c3:a8:99:88:f9:14:d2:43:a2:50:4c:e4:ab:7f:29:
35:06:16:1e:bb:2a:e5:ea:c6:d1:2d:72:44:41:84:
0c:d2:4e:0d:b2:f8:a9:8a:a9:69:83:80:d4:b1:ba:
8c:36:d3:13:c2:75:44:11:a3:e6:34:0c:09:3e:86:
d3:26:11:2c:18:82:07:a9:77:d8:ce:2d:61:8a:1c:
83:2c:93:02:2a:f7:75:19:dc:76:50:8e:51:74:3d:
7d:d5:66:55:9d:3d:6b:ff:4f:46:ec:b1:13:6e:3c:
59:a2:79:53:16:41:08:bf:f2:91:bd:aa:9a:ef:af:
93:79:db:51:d3:09:69:f8:42:14:86:c8:72:77:ea:
23:ef:94:fd:c2:f6:17:31:86:4a:3e:81:dc:c8:ab:
f8:33:d7:7a:15:52:2e:14:31:57:eb:5a:e1:86:a6:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:4E:68:71:8D:B3:48:BA:11:4B:13:D8:14:AE:B5:A6:41:4E:A4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8AACBCFE089F11F0907D1D68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:09:f8:50:9e:24:53:13:35:ea:44:5c:03:f2:87:63:ba:d2:
15:00:11:b7:fb:6b:3a:40:50:c2:00:10:4d:81:d4:32:94:55:
ca:2c:f0:15:91:2a:e0:df:62:d4:b8:bf:d6:e5:10:fd:a6:63:
48:bf:f5:81:9c:1e:28:83:6a:8e:dc:62:3c:2d:6f:1e:1d:04:
ae:9f:16:a5:3e:97:1f:2f:e0:c9:5e:d5:26:0f:d5:74:e3:8d:
6b:a0:d7:81:52:47:6f:87:84:ea:ac:75:a1:12:87:a5:d3:8f:
23:75:54:94:c7:f4:34:6f:73:53:ee:9b:f8:b2:f4:3b:56:74:
9c:60:47:4e:b0:77:bc:b2:2e:29:51:d7:75:ad:98:ef:57:b5:
72:90:ab:b7:dc:ad:04:33:b4:3f:45:52:41:a0:11:1f:14:c5:
cc:5e:e6:2b:31:f2:8e:95:c4:c1:86:ed:04:04:9d:21:b2:27:
0f:b5:88:4f:5a:a8:2c:a4:bf:b4:9b:e5:6c:6d:b2:df:e9:53:
04:21:e3:4c:e1:04:80:0d:80:3a:14:62:9d:85:7e:8d:de:30:
31:dc:58:67:46:9d:da:58:6a:59:f8:4c:9a:33:65:5a:f8:05:
8b:60:27:6c:ab:b2:fd:ea:b9:df:72:8f:e1:ca:ba:af:cc:55:
d2:14:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:33:20 2025 by rpki-client