Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AB293DD008A011F0A91F5D70762E951A.roa
File: AB293DD008A011F0A91F5D70762E951A.roa (raw, json)
Hash identifier: uKjV3NHZu49LRFS7w/S3oYlf3y/dAEdKCh725eVC5bY=
Subject key identifier: D2:AB:46:C4:D5:50:72:DF:B2:0A:69:3C:66:34:A4:9F:D3:E0:7F:FB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07C5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AB293DD008A011F0A91F5D70762E951A.roa
Signing time: Mon 24 Mar 2025 11:11:01 +0000
ROA not before: Mon 24 Mar 2025 11:10:57 +0000
ROA not after: Tue 24 Mar 2026 11:10:57 +0000
asID: 2914
IP address blocks: 102.135.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1989 (0x7c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:10:57 2025 GMT
Not After : Mar 24 11:10:57 2026 GMT
Subject: CN=67e13dc5-cfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:ff:cd:aa:47:97:0c:7c:0c:ac:ac:43:c5:
50:d6:e1:37:bd:01:ab:e1:8c:71:f2:51:61:99:6c:
c9:e2:57:35:af:da:fc:0f:0a:58:e2:7f:8f:16:b1:
de:54:92:21:49:2e:d2:ec:92:bd:ab:5b:1f:d5:57:
6c:9e:80:2f:55:ac:75:ed:e2:6c:2f:79:5f:d2:32:
f2:fb:ec:6e:1d:f0:46:e4:04:84:30:16:a6:4e:89:
3a:3a:84:48:df:7f:c0:7a:2d:06:f9:ba:91:8a:62:
1e:e1:91:1c:e0:15:5e:51:e5:61:0d:b7:e5:13:4d:
49:11:51:78:e8:c0:ca:0a:32:2a:39:6e:f8:10:cd:
27:ce:28:b4:a1:c1:67:a2:22:35:36:a3:34:e6:94:
9a:ff:7b:18:d4:96:ab:78:6d:ed:d4:04:03:a6:c2:
d6:c7:46:87:cf:3b:91:0d:92:d6:c3:3c:04:24:8e:
37:d5:b2:61:21:36:be:d4:04:2f:46:bc:7d:71:0f:
ea:17:9e:5d:0e:a1:56:49:55:1c:a3:d0:90:89:97:
3c:36:35:4e:12:3c:84:c3:55:ef:48:d4:80:e7:8c:
ce:0c:dc:14:9d:8c:89:49:81:aa:8a:74:f2:2a:f1:
26:d4:b7:04:8d:cd:24:78:74:0b:99:9c:2e:83:4e:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:46:C4:D5:50:72:DF:B2:0A:69:3C:66:34:A4:9F:D3:E0:7F:FB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AB293DD008A011F0A91F5D70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:18:de:04:80:c4:69:48:aa:86:f4:1b:7b:b0:c8:31:20:18:
33:ac:8a:46:2f:5a:14:b2:12:5b:61:a5:51:72:62:35:d0:b8:
31:3c:ec:2f:42:63:6d:c2:0b:60:f9:80:3c:98:71:8c:84:e9:
e1:c9:44:f3:37:76:5c:8b:8e:e9:ce:6a:43:a5:ba:69:c0:8f:
41:05:36:59:5d:16:c2:6d:3c:eb:b6:d4:a2:51:d9:2c:39:2c:
45:fa:a5:8d:84:95:4d:d5:f9:2c:2e:af:72:65:4e:b8:77:8b:
6f:11:b4:0c:5d:d6:c1:a3:92:3d:aa:03:6a:16:94:72:fa:ab:
c8:ec:5c:ff:10:85:9c:e6:82:0a:6e:84:74:d9:04:6e:6c:a3:
b2:c4:df:0a:f6:7d:82:61:2c:2b:52:92:29:ea:59:38:7d:12:
ca:ff:9d:68:d6:94:b2:8a:23:f4:77:c3:64:d2:74:0c:8b:9a:
1e:67:85:ee:2a:3f:5b:50:a2:1c:d4:f9:13:1e:e4:42:40:72:
3a:1a:5f:22:bd:99:0e:18:85:a1:c9:64:72:2e:34:2a:9b:08:
ab:4a:f5:43:0c:05:90:bd:dd:d6:7c:36:f8:20:01:6b:87:f2:
e0:c3:56:0e:6b:bd:9f:ee:79:7b:f7:cc:98:87:fd:5b:87:af:
94:db:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:55 2025 by rpki-client