Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D3164B68089F11F0B1F4BA6B762E951A.roa
File: D3164B68089F11F0B1F4BA6B762E951A.roa (raw, json)
Hash identifier: Sbf0btHxxYuKr5QS82lasK2rzVrHiWpF3/TKkruCwd4=
Subject key identifier: 18:76:5B:CB:48:F3:77:B7:A8:43:33:B8:95:12:FB:FA:1B:7A:5B:C3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07B7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D3164B68089F11F0B1F4BA6B762E951A.roa
Signing time: Mon 24 Mar 2025 11:04:58 +0000
ROA not before: Mon 24 Mar 2025 11:04:54 +0000
ROA not after: Tue 24 Mar 2026 11:04:54 +0000
asID: 2914
IP address blocks: 102.135.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1975 (0x7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:04:54 2025 GMT
Not After : Mar 24 11:04:54 2026 GMT
Subject: CN=67e13c5a-28a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:e2:1c:9d:06:11:78:fc:d2:84:21:9c:8b:
13:b0:0e:7d:d3:de:1b:1a:3b:63:31:79:67:93:81:
67:cd:3f:86:77:e7:79:43:09:3c:46:80:e8:29:3f:
03:eb:d8:78:05:d7:d1:9f:57:ad:51:f6:97:b9:c6:
51:33:c8:7b:78:f9:16:52:e9:d8:ba:79:f6:af:33:
15:f6:b1:d9:ba:3e:ad:75:96:7b:85:a8:22:e6:33:
ca:28:0e:f8:00:8a:b7:e2:30:1c:60:63:4f:bd:18:
9a:17:91:3e:71:10:ef:db:17:06:ac:86:3e:2c:12:
61:8b:79:ef:bd:5e:72:63:9e:40:13:12:64:bf:f1:
31:c4:ff:61:0a:a0:d1:32:b1:b1:61:d1:02:0c:39:
d6:b2:0a:45:d8:26:2e:69:49:8d:69:50:75:49:44:
da:9a:52:91:34:4a:48:d9:d2:47:72:28:a6:08:97:
aa:4b:79:e4:fd:cf:a8:69:f7:a4:e3:82:62:a5:72:
35:9f:d0:8c:ba:7a:84:af:31:50:f0:1e:2a:45:58:
d0:ea:bc:93:ff:0f:83:e2:28:64:79:19:58:a5:e9:
b8:4b:90:07:f1:51:6c:4b:da:54:6d:de:9e:26:c9:
73:60:bd:4b:50:76:17:13:4a:e9:2c:9d:62:b3:e0:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:5B:CB:48:F3:77:B7:A8:43:33:B8:95:12:FB:FA:1B:7A:5B:C3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D3164B68089F11F0B1F4BA6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3f:98:6e:41:72:11:ea:42:32:7b:18:88:30:fc:be:2c:b4:
ff:25:d2:d1:81:d9:67:e7:af:c4:b6:c3:45:36:e5:78:7c:8d:
cd:3f:93:ab:3b:e4:88:9d:98:41:91:3c:cf:a6:f6:32:e3:b7:
64:75:1c:02:2e:35:7f:23:25:08:9e:1c:f4:58:de:f5:3e:8f:
e2:78:df:c8:cb:01:5e:73:1a:ac:46:2d:aa:97:24:e1:0a:03:
3d:c9:d6:fb:a6:13:a2:12:c6:9f:5f:fd:d9:86:ce:37:99:92:
18:c6:ea:0c:5c:fc:e7:97:77:26:39:f5:9f:97:b4:fe:56:7b:
b6:38:fd:72:19:f7:39:8d:af:ed:48:66:05:9b:aa:5c:c1:b3:
30:2d:93:7d:78:5a:b4:2c:c4:38:22:97:57:e7:33:2a:1c:a8:
c5:f7:e3:62:95:7a:b1:64:2e:bd:3c:a4:5c:97:39:6c:d7:95:
c9:06:7e:aa:a9:dc:83:e2:04:4d:85:24:10:02:76:1b:28:0f:
a3:97:5b:20:c2:fe:29:35:39:58:b2:4a:f6:38:16:f2:d5:b8:
7a:2f:48:6c:0d:8c:7a:e0:53:9b:62:ce:9a:c2:2b:e2:24:e3:
d2:59:26:76:32:32:5c:5b:f7:4a:f9:c3:90:05:86:79:1a:d6:
7f:f0:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:43 2025 by rpki-client