Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A0BDDC500A1411F0AC8F0952762E951A.roa
File: A0BDDC500A1411F0AC8F0952762E951A.roa (raw, json)
Hash identifier: DR9kVXdwihUnOqy2vR71bd5IeDGZykTr5SJgVfbY9/I=
Subject key identifier: F3:09:D8:1B:B5:0B:AA:5C:9F:ED:A4:90:07:3C:AD:A9:6F:AA:FC:79
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 087C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A0BDDC500A1411F0AC8F0952762E951A.roa
Signing time: Wed 26 Mar 2025 07:33:36 +0000
ROA not before: Wed 26 Mar 2025 07:33:32 +0000
ROA not after: Thu 26 Mar 2026 07:33:32 +0000
asID: 4766
IP address blocks: 102.135.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:33:32 2025 GMT
Not After : Mar 26 07:33:32 2026 GMT
Subject: CN=67e3add0-b84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:57:3c:ba:8f:fd:18:0b:75:73:ac:5a:31:
13:78:0f:9d:06:5b:a8:ab:fe:0c:53:85:ca:42:96:
c1:f3:fa:59:81:55:2c:69:fb:39:5b:cf:b2:11:c9:
b2:58:3d:21:d7:d5:44:58:8f:8a:5a:7f:d7:7d:eb:
4d:99:88:ce:3e:99:cf:b1:a8:df:ef:00:e5:b8:66:
ed:4b:a7:56:ff:af:14:90:3b:d8:90:c1:42:b3:59:
51:ed:c4:61:0f:97:b0:36:16:16:e9:62:43:a9:69:
b9:a6:2f:47:d3:8e:da:71:d2:cd:3a:a8:af:c2:6a:
53:c2:a9:58:b0:d1:c8:30:17:ed:2b:0c:59:8f:6a:
8a:22:8d:c6:ec:3e:ad:b2:d5:a1:ef:32:84:3c:f9:
92:97:9b:f1:2c:a0:8e:46:ec:22:d0:e2:55:15:88:
fc:68:72:b5:e1:7e:67:66:da:26:d3:c5:8b:3f:b0:
35:be:7d:8e:49:56:f4:fb:9b:fd:73:4a:78:f9:65:
b7:9f:ce:80:9f:92:12:a4:dd:13:38:9f:52:21:29:
42:70:30:83:50:4c:aa:15:d5:4d:c3:c1:99:1f:4d:
51:00:fb:30:d8:d4:98:67:6a:4d:eb:e1:76:02:56:
93:93:55:9d:42:2e:36:ff:73:a3:6a:5c:39:46:4a:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:D8:1B:B5:0B:AA:5C:9F:ED:A4:90:07:3C:AD:A9:6F:AA:FC:79
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A0BDDC500A1411F0AC8F0952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.81.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d0:2e:83:56:0f:ec:df:55:79:63:f7:f3:d6:6c:43:38:23:
9a:84:aa:73:aa:a5:ee:02:1e:d6:ca:f6:64:68:71:58:11:0d:
df:a3:07:ba:12:7e:f1:c2:81:79:a2:37:30:82:36:03:52:d0:
a4:aa:1c:3a:64:9c:29:dc:7e:12:26:a3:0a:a1:60:0b:75:ca:
cd:93:64:fd:1c:e4:32:4f:0e:de:c3:96:94:05:81:4b:22:6d:
3b:d0:84:3f:a9:ec:e3:6d:c8:64:67:6c:2c:dc:a4:7e:08:6e:
50:64:02:6e:61:70:8c:37:76:4c:5b:3f:a4:64:b6:42:6b:42:
51:5e:15:73:9c:9d:9c:ce:c3:3e:27:61:69:e5:52:e4:fd:3d:
f2:26:c1:6d:aa:92:0d:7c:e7:b4:69:5a:e0:cf:94:70:fb:b5:
47:3d:42:99:69:00:c4:63:97:a2:2a:15:8e:37:a6:3e:1a:af:
60:2f:7e:2e:7f:77:16:d3:25:42:23:b5:c3:9d:d4:1d:c1:45:
e0:1b:bb:95:45:17:1a:8b:ff:9c:ba:62:5b:03:9f:31:5d:ae:
e7:c5:83:bd:20:56:e6:57:db:76:ea:ad:58:d6:60:be:e9:5b:
77:26:17:ba:f6:82:fe:05:aa:57:57:2b:49:a1:c7:82:7d:d2:
48:82:4e:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjYwNzMzMzJaFw0yNjAzMjYwNzMzMzJaMBgxFjAU
BgNVBAMTDTY3ZTNhZGQwLWI4NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLaVc8uo/9GAt1c6xaMRN4D50GW6ir/gxThcpClsHz+lmBVSxp+zlbz7IR
ybJYPSHX1URYj4paf9d9602ZiM4+mc+xqN/vAOW4Zu1Lp1b/rxSQO9iQwUKzWVHt
xGEPl7A2FhbpYkOpabmmL0fTjtpx0s06qK/CalPCqViw0cgwF+0rDFmPaooijcbs
Pq2y1aHvMoQ8+ZKXm/EsoI5G7CLQ4lUViPxocrXhfmdm2ibTxYs/sDW+fY5JVvT7
m/1zSnj5ZbefzoCfkhKk3RM4n1IhKUJwMINQTKoV1U3DwZkfTVEA+zDY1Jhnak3r
4XYCVpOTVZ1CLjb/c6NqXDlGSomtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8wnY
G7ULqlyf7aSQBzytqW+q/HkwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0EwQkREQzUwMEExNDExRjBBQzhGMDk1Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh1EwDQYJKoZIhvcNAQEL
BQADggEBAFTQLoNWD+zfVXlj9/PWbEM4I5qEqnOqpe4CHtbK9mRocVgRDd+jB7oS
fvHCgXmiNzCCNgNS0KSqHDpknCncfhImowqhYAt1ys2TZP0c5DJPDt7DlpQFgUsi
bTvQhD+p7ONtyGRnbCzcpH4IblBkAm5hcIw3dkxbP6RktkJrQlFeFXOcnZzOwz4n
YWnlUuT9PfImwW2qkg1857RpWuDPlHD7tUc9QplpAMRjl6IqFY43pj4ar2Avfi5/
dxbTJUIjtcOd1B3BReAbu5VFFxqL/5y6YlsDnzFdrufFg70gVuZX23bqrVjWYL7p
W3cmF7r2gv4FqldXK0mhx4J90kiCTgw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:27:49 2025 by rpki-client