Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A75621F800AA11F08366A5BC762E951A.roa
File: A75621F800AA11F08366A5BC762E951A.roa (raw, json)
Hash identifier: I5gxuWxc87ppaE7s27eENpTcfNNaYQ4KZ6vz9waROSs=
Subject key identifier: 0D:DE:B8:67:10:B5:E0:29:CE:9F:36:30:64:01:66:E9:C0:CD:FB:C1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06FB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A75621F800AA11F08366A5BC762E951A.roa
Signing time: Fri 14 Mar 2025 08:02:20 +0000
ROA not before: Fri 14 Mar 2025 08:02:16 +0000
ROA not after: Tue 01 Dec 2026 08:02:16 +0000
asID: 138195
IP address blocks: 102.135.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 14 08:02:16 2025 GMT
Not After : Dec 1 08:02:16 2026 GMT
Subject: CN=67d3e28c-195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:85:3a:39:a3:a5:2d:d7:a1:aa:1b:b3:96:
7d:62:52:8b:a9:e3:fa:b2:1f:f0:36:3e:1e:b4:fa:
9d:f4:81:51:0e:e4:5f:fe:93:a6:59:79:d5:57:de:
40:c0:cd:c1:42:a3:1e:fe:e4:37:ff:19:8b:5c:3c:
ec:df:c2:3a:0c:7c:e6:b3:60:42:14:f0:c6:06:53:
84:60:ca:a0:bd:32:8a:21:82:69:d2:00:a6:50:ba:
59:4c:b5:18:47:66:d3:65:8b:1f:46:da:4d:f2:3e:
3e:49:9d:32:44:66:2a:df:ad:4d:03:6d:58:f3:0b:
95:c2:d8:ac:94:e3:1d:ad:6d:8f:60:cf:5a:cc:c8:
96:e8:bb:79:0a:57:47:5b:8f:50:cd:94:cd:92:c8:
5e:8a:c1:3b:0b:e0:26:d3:94:99:9a:3c:52:bf:5e:
fc:10:e9:4c:34:ee:15:d7:ee:6c:a3:50:a4:d6:17:
d2:64:84:23:7f:30:21:76:42:a8:81:42:2e:a8:df:
1c:59:4a:10:c3:8d:00:83:4a:34:4a:6e:a5:3e:9d:
fb:e7:c9:4b:02:47:fa:dd:f7:b6:60:71:49:bb:fe:
a5:83:37:1e:11:7f:36:34:97:c8:67:be:9f:a7:83:
be:10:c3:73:86:2e:10:10:5c:7d:d5:20:d1:a4:c3:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DE:B8:67:10:B5:E0:29:CE:9F:36:30:64:01:66:E9:C0:CD:FB:C1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A75621F800AA11F08366A5BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c8:72:6d:03:76:ff:75:e8:41:ed:10:24:79:12:a3:35:ab:
aa:47:f9:64:5a:51:7a:07:41:4a:a4:f6:a9:11:4b:aa:8c:89:
f7:fe:2b:bc:17:da:fa:a1:87:01:d5:6c:b4:bb:ad:17:ca:b2:
5e:23:28:29:56:40:40:c8:15:9d:15:77:cf:23:8f:a9:f2:3f:
30:1f:1a:c4:7a:70:ed:66:e9:a1:f5:54:14:c9:29:1c:2d:e7:
74:95:32:bd:3c:bc:9e:8e:60:ee:14:33:a7:cc:89:ab:fa:d2:
49:06:89:b0:0e:68:f9:4a:77:8e:5e:c4:e8:39:7c:e5:52:e5:
ed:22:e3:83:bf:f8:7d:dc:01:c1:c4:cd:1c:f6:77:2f:ab:79:
d5:1d:89:48:1b:8a:d1:bc:c1:d3:56:19:3d:23:12:cb:57:9e:
21:e9:16:56:ff:fd:78:b7:f7:9f:d2:3f:33:b3:0a:2c:e5:db:
bc:01:61:9c:64:97:dd:44:c4:0a:18:e8:48:17:40:30:a5:ba:
3d:0a:95:8d:32:ca:f4:a4:8e:96:aa:6c:42:73:6e:73:9f:55:
2e:d7:7d:af:ba:e9:e5:16:9e:5c:cc:71:2a:e6:8d:5e:cd:11:
19:46:d7:11:27:52:0f:39:c4:66:75:5e:88:6c:40:a6:30:08:
d4:85:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:01 2025 by rpki-client