Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9AD79CBA096D11F09EF31C54762E951A.roa
File: 9AD79CBA096D11F09EF31C54762E951A.roa (raw, json)
Hash identifier: tuLxRlwRd6aj1x6IPOprHOiyfK2IVhvI3wTKuFRKuE0=
Subject key identifier: A3:D2:6D:B1:00:88:96:FE:AD:09:0F:27:1D:0E:C5:7A:FF:80:FA:54
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0836
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9AD79CBA096D11F09EF31C54762E951A.roa
Signing time: Tue 25 Mar 2025 11:38:00 +0000
ROA not before: Tue 25 Mar 2025 11:37:57 +0000
ROA not after: Wed 25 Mar 2026 11:37:57 +0000
asID: 2914
IP address blocks: 102.135.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:37:57 2025 GMT
Not After : Mar 25 11:37:57 2026 GMT
Subject: CN=67e29598-33bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:a1:07:e0:a1:60:cd:60:9d:5d:46:9b:f9:
4f:a5:99:4d:07:e8:80:ea:85:ff:76:2d:48:c1:4b:
a5:aa:33:63:7c:92:24:50:ee:83:fa:f0:45:10:52:
2b:2a:61:19:d8:a5:28:6e:14:54:f5:f3:fd:37:90:
f4:b9:8f:32:61:7a:76:c2:36:3a:a0:26:0e:8c:42:
6c:53:47:e1:8d:32:ab:dc:39:45:f6:ce:99:17:d1:
19:99:32:f6:5e:7c:d4:e3:14:96:e6:7e:eb:8a:1d:
6a:78:d2:37:66:2d:fe:5f:fd:6d:d9:b6:f2:d6:4c:
ed:64:35:c9:23:f6:ac:ee:70:68:cd:05:23:2d:b4:
2c:70:02:49:7f:15:fc:2d:59:82:33:af:d3:e3:5f:
d5:f2:30:98:2c:9e:92:41:eb:5c:ac:ff:9c:52:5f:
cd:62:7c:82:17:3f:66:5f:04:af:57:80:1d:5e:fd:
5d:c9:e9:1d:a7:fd:82:35:db:fb:5a:d7:ef:5a:cd:
0a:c7:75:fd:ac:4b:af:b8:a2:81:80:f2:28:37:eb:
fb:42:86:ee:66:ec:28:e4:d1:86:6b:e4:d0:2c:bf:
64:9e:13:da:76:97:13:a4:7e:cb:03:60:fb:dd:c2:
16:56:95:f8:dd:89:66:2e:23:47:0c:ff:84:f9:60:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D2:6D:B1:00:88:96:FE:AD:09:0F:27:1D:0E:C5:7A:FF:80:FA:54
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9AD79CBA096D11F09EF31C54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:dd:f4:07:be:13:62:26:bc:76:58:56:2c:af:45:d0:98:67:
c9:e8:ad:83:50:46:84:95:8c:97:69:ea:85:7e:23:ff:00:c3:
6b:e2:6c:70:57:b9:f7:d7:67:59:c6:b8:f6:32:fa:0a:c1:e7:
eb:2b:b9:73:73:f2:5f:72:e3:cf:56:e3:9f:cd:75:a5:47:bb:
c2:15:3d:92:14:3d:60:54:1d:fa:4c:2b:4e:21:92:7e:cd:a7:
a1:1d:42:57:0c:3a:1d:0f:fb:01:c0:39:ef:bb:83:18:a2:36:
1c:a4:4c:5f:d7:73:3d:9d:17:b7:9e:ad:4e:7d:ac:33:d8:d1:
c4:b9:3c:91:0d:62:9c:92:98:a1:52:4e:96:48:7e:38:b0:4f:
30:6e:a2:f6:3f:f3:54:d8:1b:2a:d2:5f:96:9c:c5:a5:33:1b:
c5:56:6a:4c:8f:9c:c5:bb:31:b2:02:03:cb:ba:b1:ba:89:e8:
43:94:12:4c:33:86:a6:69:a6:48:0e:a2:b4:bd:24:b5:db:f8:
d4:87:22:8e:c4:30:3d:9e:4f:1f:9a:43:b2:bf:d1:c4:ed:61:
81:4c:6c:39:2e:ba:6d:a7:7e:e1:8d:d6:83:8f:0b:10:9d:d4:
a7:8b:28:d7:82:7b:78:f3:fb:32:1e:b6:17:b5:fc:1b:1f:55:
38:19:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:06 2025 by rpki-client