Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9DE6DB2E096C11F0B7C69E4F762E951A.roa
File: 9DE6DB2E096C11F0B7C69E4F762E951A.roa (raw, json)
Hash identifier: JpEFG5/IaRru1ToVSrBgObTGU5YnvK8hmpGh3LBxmrA=
Subject key identifier: D8:ED:24:AB:A9:57:16:A6:D9:B8:FA:A9:4F:4F:9B:48:36:A7:02:F7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0818
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9DE6DB2E096C11F0B7C69E4F762E951A.roa
Signing time: Tue 25 Mar 2025 11:30:56 +0000
ROA not before: Tue 25 Mar 2025 11:30:51 +0000
ROA not after: Wed 25 Mar 2026 11:30:51 +0000
asID: 2914
IP address blocks: 102.135.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:30:51 2025 GMT
Not After : Mar 25 11:30:51 2026 GMT
Subject: CN=67e293f0-4816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:3b:3a:57:14:55:41:4b:ae:f8:53:ba:65:
68:44:0e:b8:8d:34:ec:e3:0e:79:dd:76:b9:b3:af:
83:af:87:49:cd:1f:84:c4:2e:66:cc:9d:98:f0:28:
94:c1:d3:e3:1a:e2:2e:d6:80:c0:70:c9:d8:53:76:
0f:b7:cf:86:67:37:b3:8d:b0:ca:ce:c2:be:f9:56:
95:fa:14:42:7d:a4:2a:0f:b8:8a:94:7d:ca:de:06:
39:42:5a:ec:da:af:2f:74:0e:d9:40:b4:18:11:7f:
4b:23:ea:31:66:1b:b2:36:c1:dd:3e:b8:a9:80:3c:
a7:f3:2a:6f:f1:49:47:6b:a1:a1:8c:ca:04:ba:83:
ec:42:e1:13:47:62:b9:11:95:f4:87:ba:84:f6:21:
00:70:34:e7:39:d6:a2:20:df:40:c9:e6:a2:06:37:
5d:04:17:d4:b7:60:2a:14:c7:f7:0a:c0:fa:99:80:
2e:0f:9b:70:74:ca:af:8e:11:d3:b4:62:65:fd:24:
a1:74:29:08:21:2d:9d:81:ec:84:6c:d0:2c:42:ff:
1f:6b:8a:c5:e8:e0:08:58:7a:fc:60:06:da:af:3f:
2f:12:eb:d9:75:7f:45:4b:1c:c1:92:97:d5:1a:b0:
61:48:51:d0:a6:82:e3:33:35:fb:b3:fc:e2:3e:86:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:ED:24:AB:A9:57:16:A6:D9:B8:FA:A9:4F:4F:9B:48:36:A7:02:F7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9DE6DB2E096C11F0B7C69E4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.71.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:19:55:b5:ff:01:f8:3f:3d:d4:32:61:1d:c6:52:7f:7a:40:
81:0c:74:ac:0a:2a:ff:e2:61:c7:93:9a:8a:ac:f6:72:7c:ab:
91:3b:28:f8:8b:76:71:be:30:4a:b2:ff:b9:e7:88:d2:2e:eb:
e1:c9:42:66:f9:65:d5:32:49:83:a4:13:d2:e4:70:a5:ad:19:
c8:49:be:2b:19:ae:de:4a:59:e6:e8:62:80:a0:f8:2d:67:37:
7d:8d:95:2f:a2:dc:69:f7:62:b7:bf:e2:7b:1b:a6:5f:65:a9:
50:bc:f1:2f:cb:33:cb:45:1f:35:3e:93:4c:ae:6a:c1:d8:cb:
ac:9c:34:14:d8:d6:6d:ec:02:dd:0a:d1:06:aa:c4:3d:37:8f:
f9:bc:46:ea:86:59:ad:a3:79:02:5b:cf:42:fa:c2:29:13:3f:
47:a7:80:aa:fa:88:92:ee:3d:58:99:a3:aa:ba:1e:cb:8e:d5:
e0:99:54:7e:8e:e2:46:a5:e4:99:04:c9:96:04:f4:fe:31:5a:
01:93:2c:9f:2b:50:67:01:2f:4d:21:ec:73:6f:66:36:70:0a:
12:83:2d:ec:bb:a9:d3:af:85:67:5c:94:2e:f4:02:11:a0:a8:
9a:f8:6b:e8:be:25:ab:63:90:2b:d0:39:d2:a3:49:ef:f0:bb:
93:67:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:58 2025 by rpki-client