Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E81F100ED33811EF906FECAE762E951A.roa
File: E81F100ED33811EF906FECAE762E951A.roa (raw, json)
Hash identifier: xtdt8pqn7QqqJUwxxYWqZ+ZzbDy9+fNnInVzALbMNtw=
Subject key identifier: 4F:8D:F2:ED:76:CD:C4:8A:FC:F7:CD:5C:BD:2D:2B:37:57:DD:08:EC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 055C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E81F100ED33811EF906FECAE762E951A.roa
Signing time: Wed 15 Jan 2025 12:04:44 +0000
ROA not before: Wed 15 Jan 2025 12:04:40 +0000
ROA not after: Thu 15 Jan 2026 12:04:40 +0000
asID: 53356
IP address blocks: 102.135.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1372 (0x55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:04:40 2025 GMT
Not After : Jan 15 12:04:40 2026 GMT
Subject: CN=6787a45c-9344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:75:f0:17:70:6a:b9:c1:ed:24:d3:75:14:
32:2a:e8:cd:df:98:f9:6c:44:3c:d7:12:42:da:7c:
c8:c9:e6:bf:61:66:d7:bf:fe:2d:97:21:52:76:78:
80:81:96:c3:55:fc:9a:e4:d4:72:17:33:b0:2e:22:
1e:07:af:b2:a0:fc:e3:c3:00:49:b9:d4:8f:c8:b8:
4e:d3:05:8d:84:4f:ec:be:0e:3b:f2:c2:ba:13:35:
02:27:2a:11:c5:56:09:97:68:ee:19:e7:6b:48:49:
db:30:5e:7b:db:80:43:f9:2f:b5:81:f5:eb:b8:77:
b7:72:0d:c3:40:5e:70:2e:70:e4:e6:2c:a0:23:3a:
4b:ca:70:7b:62:d5:a6:15:c1:a4:37:b8:13:97:01:
aa:4b:19:5f:dc:fd:10:3f:40:3e:43:77:ce:2a:05:
a7:7d:85:2d:e9:cc:cb:0c:e8:cd:19:ab:f5:be:08:
92:1f:1d:f4:d7:71:b3:9f:47:e8:75:0f:e9:53:35:
47:21:81:54:c9:8c:6c:b3:48:76:01:1d:d1:1c:c7:
c1:9d:bf:55:03:f3:25:6f:f6:74:52:59:99:ba:60:
6a:7a:dc:e0:68:22:f0:79:5d:47:1b:f4:7a:a7:3d:
74:2c:79:2a:10:5b:e6:c0:ec:47:02:0c:32:0c:39:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:F2:ED:76:CD:C4:8A:FC:F7:CD:5C:BD:2D:2B:37:57:DD:08:EC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E81F100ED33811EF906FECAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.56.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:87:3d:f7:c8:57:e1:63:a1:0c:c9:84:46:45:11:78:85:5b:
bc:e2:e7:70:92:47:03:72:d7:57:c6:03:d7:e4:fe:60:56:4c:
49:aa:ec:71:68:0c:8a:3e:4d:a0:57:e3:6f:26:fb:59:43:1f:
ab:e4:62:13:b2:ec:ec:eb:76:ec:2a:97:37:3f:2a:d5:56:fd:
28:d4:c8:ed:37:5c:b0:b9:84:81:5f:13:2a:c0:2a:ae:27:0e:
4c:ff:1c:34:75:c5:e4:f2:b8:29:a7:8d:a5:e1:69:59:cc:07:
7c:fa:a1:51:14:e1:25:61:42:b2:f6:80:70:1f:54:63:5d:b5:
7c:79:34:87:a4:29:48:9b:7b:29:ea:5c:f6:22:6d:94:33:62:
8b:31:37:c0:cc:28:61:b1:26:9c:bf:18:8f:2e:64:d0:1a:ab:
79:6e:54:1a:64:f4:e6:7e:b6:8c:d8:79:27:c1:88:1b:cd:15:
a5:3d:94:a1:00:d0:bc:a6:7e:26:52:4a:6c:e3:9b:09:f4:ae:
6b:3c:40:28:43:25:7d:43:9a:09:8a:21:98:cf:26:1c:bc:ae:
95:2b:13:81:54:a0:eb:da:88:12:9b:a6:08:e9:e0:63:3d:f0:
48:bf:1b:fe:45:69:59:5a:f6:00:cd:27:f7:05:5a:f9:65:8c:
f9:bb:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:14:01 2025 by rpki-client