Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8F897B0CD33611EFB6372FA0762E951A.roa
File: 8F897B0CD33611EFB6372FA0762E951A.roa (raw, json)
Hash identifier: sKL8LZ2T5/c0Ml8hBcDffTR91smA7XkWUytT9xp9Ty0=
Subject key identifier: BF:29:A8:5B:85:11:DD:84:BF:6A:8C:78:4B:2A:16:B1:93:9B:AD:D4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0550
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8F897B0CD33611EFB6372FA0762E951A.roa
Signing time: Wed 15 Jan 2025 11:47:57 +0000
ROA not before: Wed 15 Jan 2025 11:47:44 +0000
ROA not after: Thu 15 Jan 2026 11:47:44 +0000
asID: 53356
IP address blocks: 102.135.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360 (0x550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:47:44 2025 GMT
Not After : Jan 15 11:47:44 2026 GMT
Subject: CN=6787a06d-1d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:48:a6:7d:b6:ba:ed:81:3f:ec:d4:18:b4:
c3:30:d3:31:0d:5a:71:b4:79:fa:3d:b4:23:db:35:
4f:52:1f:93:b5:08:3d:3a:1e:22:4e:61:1e:56:d9:
82:89:ca:e3:28:65:cc:8f:c3:5f:62:8e:93:63:81:
39:46:ec:16:9c:6c:cd:0a:4c:cf:9d:79:6d:63:9c:
e6:12:cd:8b:f3:85:80:1c:1a:a7:bf:f8:88:3f:02:
b8:0b:66:ce:f9:7f:82:75:14:06:f2:23:59:61:de:
15:d0:b4:4e:79:73:85:3e:c6:cb:a4:18:ef:1f:e1:
37:79:b9:58:1a:30:50:b2:4b:0b:17:b5:d7:cb:be:
16:4a:8b:d5:dd:26:0d:0a:85:09:d3:10:e7:08:df:
69:29:16:3f:1e:ec:7b:96:1a:8c:0f:e9:55:0f:4e:
96:c9:49:67:4e:69:b3:19:52:cc:95:76:a9:d8:07:
94:3e:3d:c9:49:5a:f2:6e:09:72:70:1a:f4:8e:ab:
4e:32:9f:c0:8a:a4:7c:24:dd:57:35:39:1f:4a:2b:
ef:d0:9f:04:a0:4d:ff:c2:58:ce:a2:a9:24:c2:50:
8f:e0:15:b9:f8:1a:f3:c2:1f:f1:d3:f4:58:5b:46:
00:0b:76:93:d3:44:12:e7:b2:2b:98:e8:26:81:ec:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:29:A8:5B:85:11:DD:84:BF:6A:8C:78:4B:2A:16:B1:93:9B:AD:D4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8F897B0CD33611EFB6372FA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b4:da:e2:53:11:be:07:d7:22:24:f9:31:9f:8a:ad:a9:c5:
6a:b2:2c:1d:48:91:56:b2:25:bc:31:c8:df:ac:7b:5a:0b:fc:
7a:f4:16:1f:df:f6:f5:d1:e8:f0:8b:73:4c:28:7d:f4:89:e5:
69:c0:d3:a4:3b:0c:a4:de:3c:5f:6d:14:03:1e:84:ed:87:31:
c6:a8:76:0b:44:e9:4c:26:be:83:44:5f:a9:18:e6:75:6e:ef:
2c:0c:f7:b6:d0:55:f3:a0:4a:fd:c2:ee:0b:b7:36:3a:c7:98:
54:70:86:dd:c3:8b:27:e9:75:d4:10:8c:4e:b3:e0:b5:8f:9d:
ef:2f:d2:20:eb:b8:05:ff:2a:86:0c:4e:41:71:ae:e2:6c:dc:
5a:01:f4:74:69:ab:c7:53:93:15:4b:a3:18:9e:25:69:36:ce:
16:02:bc:fe:2e:20:4f:6d:ca:ea:a3:a9:d2:9e:6a:7f:84:2c:
ea:4e:98:d1:20:22:f1:7e:3a:5c:a0:54:28:98:4a:2a:1d:4d:
92:75:24:d9:67:54:02:a5:4f:cb:8c:c1:f2:7d:27:08:23:f3:
cd:ca:65:27:d6:11:b3:a9:d0:3b:51:ea:42:7e:e1:39:d7:4e:
3b:19:c1:15:7e:1b:d4:42:a8:2d:fc:00:03:df:23:6a:08:ab:
e0:9e:06:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:13:42 2025 by rpki-client