Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A56D5466D33611EF93B438A0762E951A.roa
File: A56D5466D33611EF93B438A0762E951A.roa (raw, json)
Hash identifier: QJE0L3twVwQGBx9fqippYlSsRHS3LXW85PU5ytDhtdA=
Subject key identifier: 4C:45:06:C7:B3:D0:74:E6:32:63:70:BB:9A:E6:F3:A9:DA:5D:46:3F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0552
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A56D5466D33611EF93B438A0762E951A.roa
Signing time: Wed 15 Jan 2025 11:48:39 +0000
ROA not before: Wed 15 Jan 2025 11:48:10 +0000
ROA not after: Thu 15 Jan 2026 11:48:10 +0000
asID: 53356
IP address blocks: 102.135.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:48:10 2025 GMT
Not After : Jan 15 11:48:10 2026 GMT
Subject: CN=6787a097-371c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:0c:77:f8:5d:ed:20:03:94:98:aa:9e:a0:
23:58:f7:1a:a1:94:b4:e4:ce:8f:3e:ea:fc:7b:0d:
98:49:81:e2:97:49:cd:bd:3e:57:52:e6:18:97:fd:
1c:af:21:7e:3b:84:bc:f3:65:32:75:9b:44:5e:6c:
2c:4d:fe:e7:a0:40:e3:3a:b9:e6:db:db:25:1e:52:
93:6a:57:b3:f4:ca:47:e9:cf:59:b8:51:f3:88:d5:
c5:25:49:12:9a:8f:16:3e:15:d9:70:d4:55:90:d6:
bb:e0:10:e4:73:af:d3:f5:2d:40:57:72:0c:2e:76:
4d:ef:87:e8:9c:fa:10:f4:e1:5d:4f:77:b8:89:ec:
c2:65:9c:b6:ce:98:e4:41:ed:5c:b9:71:11:29:07:
c7:57:a8:d8:39:59:e6:0c:07:8e:cd:e6:cd:c2:ef:
27:40:72:f0:c3:ce:48:9d:ef:ad:57:fe:b8:4c:a0:
b3:51:cd:37:a9:60:ad:09:d2:ae:53:0f:21:96:c4:
c4:22:56:62:6f:b7:e8:25:a6:b1:22:6c:07:29:77:
e2:60:12:72:37:60:49:60:83:1a:87:6d:28:45:66:
1e:57:22:b8:5a:b3:15:f7:b1:b6:90:eb:fe:3b:44:
4c:99:5b:32:8f:c9:ff:42:f0:1b:1f:d4:45:13:40:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:45:06:C7:B3:D0:74:E6:32:63:70:BB:9A:E6:F3:A9:DA:5D:46:3F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A56D5466D33611EF93B438A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.46.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1d:1b:02:4f:d7:f1:75:bf:31:db:5b:db:ea:f4:88:4b:1a:
4b:8d:52:1f:26:24:66:98:5b:cc:ed:3e:4e:04:3a:6e:c3:32:
c6:d8:8e:cf:0e:4f:7d:a5:68:a0:00:f9:24:bf:9d:b2:f0:eb:
84:42:01:fb:9c:f3:2b:af:47:34:2b:a0:92:49:68:82:70:06:
74:5d:3e:5d:e0:b4:37:4f:52:54:b0:88:fa:a6:d0:83:8c:72:
50:55:43:4c:d6:06:58:2c:6d:29:25:e8:e6:0b:e8:de:1d:42:
b0:c8:a7:48:f3:49:8a:22:81:92:a4:98:5c:d4:b6:68:12:b8:
e1:06:1c:96:8f:d2:5d:39:6a:6b:66:71:94:7c:58:53:49:a6:
96:af:7e:b9:67:66:e0:ee:a1:35:14:78:50:fc:b5:d5:e9:27:
21:38:21:9b:d4:4e:84:d0:79:9c:c9:75:e2:4a:8a:b4:42:09:
12:a5:99:18:8e:64:56:b6:47:06:fe:c0:d9:ce:4b:2f:26:85:
a2:f1:3a:ad:48:e5:88:94:4b:88:f9:29:5d:7a:11:ec:4b:a9:
f1:85:e1:c2:81:2d:14:a8:ef:ba:86:29:08:d5:7c:aa:6f:75:
48:b7:aa:29:19:1b:76:0a:93:c1:7d:5f:2d:86:c3:d1:9a:a0:
b1:47:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:37:33 2025 by rpki-client