Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAD88DA8088411F08C64D249762E951A.roa
File: EAD88DA8088411F08C64D249762E951A.roa (raw, json)
Hash identifier: ONKXONs5hag0ZmV/AZwWdmoPq21zv13dft5lys5vBYU=
Subject key identifier: AA:16:81:81:A6:7B:11:B0:3D:6B:64:FA:38:7C:06:8F:FB:2F:86:EC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07A9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAD88DA8088411F08C64D249762E951A.roa
Signing time: Mon 24 Mar 2025 07:52:22 +0000
ROA not before: Mon 24 Mar 2025 07:52:18 +0000
ROA not after: Tue 24 Mar 2026 07:52:18 +0000
asID: 21859
IP address blocks: 102.135.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 07:52:18 2025 GMT
Not After : Mar 24 07:52:18 2026 GMT
Subject: CN=67e10f36-92ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:3e:09:07:bc:aa:5e:16:51:07:f7:03:f0:
d6:e6:37:a5:ea:70:4b:bc:73:e3:ac:a4:c8:ae:87:
11:64:af:72:6b:5c:b9:17:42:e6:63:5d:44:2f:14:
a2:f9:52:e8:16:c1:d0:1c:3d:67:27:ad:15:66:b3:
8e:c1:d9:39:09:69:5d:57:53:10:b5:70:88:00:8c:
e2:aa:5c:c4:1b:f8:09:c1:b5:ba:41:a3:5b:68:0e:
4d:e8:cf:1c:cf:b3:79:e9:cf:10:0f:ca:db:34:00:
cd:74:71:70:80:78:46:8c:e7:e5:69:8d:76:a9:ce:
7b:e1:c2:e9:0d:b7:35:14:f7:13:53:cc:57:5a:5c:
8e:2f:e9:9d:2d:30:da:8f:f5:f8:2f:50:47:22:59:
55:64:df:4d:9b:60:6c:49:49:c8:46:78:ed:f1:7e:
08:cd:f4:2d:35:ea:fd:54:fe:3f:5a:ff:3a:52:b3:
aa:b7:47:1a:25:a1:df:86:a2:7a:21:b1:36:fd:2a:
36:78:92:f2:ac:c2:6f:66:c1:16:9d:c1:20:88:ec:
5f:d5:7a:d8:85:f2:f3:de:12:77:49:cd:6c:ea:88:
36:73:9d:6c:23:66:4f:26:8c:ea:56:02:91:95:bd:
84:0c:4a:32:b4:41:6d:5e:3e:bc:41:a2:a4:7b:ba:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:16:81:81:A6:7B:11:B0:3D:6B:64:FA:38:7C:06:8F:FB:2F:86:EC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAD88DA8088411F08C64D249762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3d:a2:81:07:dd:e9:06:15:60:7c:b5:54:86:db:b9:96:fd:
f3:0f:3b:c7:b9:f5:c8:c6:f6:aa:46:dc:27:cf:96:16:b3:99:
d4:7d:2a:5b:ea:91:d3:aa:d5:c6:ff:97:85:93:a3:1b:ee:00:
eb:ba:4a:f7:5a:d6:05:9b:b1:41:48:e3:99:1b:fc:64:02:0e:
7d:7b:45:17:cc:48:cf:7a:9f:29:f8:9b:be:11:be:87:bc:82:
10:23:91:a4:ee:b2:ca:6f:c2:d6:9a:c7:c2:79:63:14:50:15:
1c:a6:d2:27:94:37:f1:74:cd:63:23:db:e8:a1:64:9c:fd:98:
ad:92:c5:81:d1:46:86:0c:07:bb:e3:bd:20:99:01:71:3c:eb:
be:7f:dd:23:ae:3e:96:c4:0b:20:0c:eb:a0:a1:83:b1:20:fa:
6f:6d:cf:15:d1:89:c9:28:ec:73:75:47:8f:4e:19:0e:ef:3b:
a4:e9:ff:72:2f:27:4e:6d:c4:35:8d:1e:0d:da:58:e5:d6:75:
48:d5:e4:45:65:86:dc:cf:96:b7:c2:71:b8:ec:40:68:a2:68:
eb:5c:4e:b0:d1:b7:65:5d:bb:03:bc:01:d8:4e:3d:37:80:8a:
c5:c2:37:9f:3b:e0:15:d8:9b:53:05:84:df:8f:e8:12:fc:54:
fc:a1:9a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:36 2025 by rpki-client