Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D36D6168F43711EF883C0C8B762E951A.roa
File: D36D6168F43711EF883C0C8B762E951A.roa (raw, json)
Hash identifier: Y8fN1g6A3Hi9+QtXtqCwbM+x/3fIt/si9HICx+JUQTQ=
Subject key identifier: F8:EA:63:14:C4:AF:B6:1C:88:B8:FE:B5:BF:22:2F:C2:9D:17:C5:9F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06AE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D36D6168F43711EF883C0C8B762E951A.roa
Signing time: Wed 26 Feb 2025 11:50:08 +0000
ROA not before: Wed 26 Feb 2025 11:50:04 +0000
ROA not after: Thu 26 Feb 2026 11:50:04 +0000
asID: 36352
IP address blocks: 102.135.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 26 11:50:04 2025 GMT
Not After : Feb 26 11:50:04 2026 GMT
Subject: CN=67befff0-0a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:2e:9d:6c:f1:8c:0e:8a:82:01:05:8d:ed:
5c:3a:0b:6b:6e:5d:e0:1e:82:94:33:d8:93:ca:ea:
32:32:26:09:59:95:36:c0:6d:94:fc:d1:be:a4:bb:
bb:8c:ce:92:c4:c5:61:fa:4f:3e:ec:09:2e:6e:b5:
6b:58:51:33:48:97:af:dd:b4:9f:ad:64:ca:69:a0:
6d:c8:ce:3e:41:2b:e2:8f:3f:9d:7e:7d:3a:5e:dc:
e0:76:34:ad:7c:3e:1f:cf:4d:81:b5:f6:9c:cf:fc:
1a:13:05:91:09:c7:f4:84:1b:fa:e8:72:9e:6a:91:
ce:e2:a7:db:4a:b4:11:dd:bf:e9:de:99:b8:15:e9:
3b:c7:1a:3d:39:94:49:50:47:d6:be:39:31:58:b0:
d6:6a:19:af:81:75:ab:8d:79:90:66:fb:36:a0:14:
5f:31:fe:17:f7:94:25:ca:5d:3e:ec:f4:fe:af:46:
d1:79:de:e2:2a:1c:79:e1:6a:36:98:ff:d1:64:be:
79:e1:a4:8b:c9:2d:a3:d6:ca:73:5c:63:fd:81:06:
89:7e:c4:17:db:0a:ce:46:28:13:a3:66:19:ee:7c:
f3:c0:16:50:ac:2e:88:ed:91:9a:94:d2:6b:0e:71:
4f:d8:6f:b2:1c:d6:a0:13:7c:7b:a0:e2:3b:68:f0:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:63:14:C4:AF:B6:1C:88:B8:FE:B5:BF:22:2F:C2:9D:17:C5:9F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D36D6168F43711EF883C0C8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6c:84:41:b1:87:5a:eb:84:a4:1e:c3:15:6c:76:1d:21:52:
ce:51:0f:41:35:70:02:90:3c:bb:c3:73:60:d6:bb:09:9e:00:
6b:51:89:88:11:5d:8d:7a:f8:c8:a4:6a:a9:5a:ce:4a:6c:c7:
80:77:19:81:14:d9:72:f2:54:ea:4f:75:dd:c0:ba:23:18:2c:
a9:f0:11:e2:07:af:d5:fa:f5:d8:e2:e7:7a:0d:42:a2:e9:7d:
63:23:f2:48:3d:d6:35:88:42:b1:18:98:d0:c8:93:1f:6d:83:
93:f2:19:4e:b3:46:28:59:93:fe:6d:31:15:2f:7e:8a:fd:b3:
0c:b7:02:c4:00:24:cb:54:b6:00:6b:73:4b:f6:d9:f7:b0:e2:
a2:8c:4a:4b:26:ee:60:44:a9:b9:13:38:18:f0:05:e5:b9:05:
1f:b1:f4:fa:24:c9:fd:99:4c:4b:1f:fc:b2:cb:f4:ba:fe:ee:
12:b9:a9:af:59:8c:56:84:0d:cd:9b:17:ee:69:93:13:d8:3c:
ef:46:a1:6a:76:5b:bc:a2:98:9c:3f:af:1d:b2:5b:ee:f9:4c:
48:b4:22:35:e6:f1:a7:b1:69:fc:94:d9:ee:14:8b:a2:9b:26:
c5:7a:92:e6:93:49:17:36:f2:64:33:bd:08:3f:2f:31:fe:a3:
f8:ea:ab:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:07:45 2025 by rpki-client