Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EEE86B540B9311F095E61C6D762E951A.roa
File: EEE86B540B9311F095E61C6D762E951A.roa (raw, json)
Hash identifier: Gy7x53pHvv81qwXSrOEpOhDDq8Ooe5QHhHFH43LMvIM=
Subject key identifier: CB:C1:E0:D0:40:ED:1A:9A:08:ED:39:4F:CA:E8:3E:64:C7:AE:27:E4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08A2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EEE86B540B9311F095E61C6D762E951A.roa
Signing time: Fri 28 Mar 2025 05:17:25 +0000
ROA not before: Fri 28 Mar 2025 05:17:21 +0000
ROA not after: Tue 10 Feb 2026 05:17:21 +0000
asID: 136501
IP address blocks: 102.135.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 28 05:17:21 2025 GMT
Not After : Feb 10 05:17:21 2026 GMT
Subject: CN=67e630e4-be93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:76:1f:77:f6:ef:e8:f6:a0:89:46:b0:2b:29:
41:90:38:c6:ce:b1:99:ff:e6:6e:de:8e:aa:0c:36:
50:de:cd:18:e0:6a:bf:e3:68:33:6b:17:bc:36:4b:
51:d7:e2:9a:ad:4f:7d:f0:bc:33:71:93:53:ee:dd:
8d:1c:c0:5b:d9:91:bc:22:e7:5c:31:2e:78:71:63:
cb:0c:ca:12:31:62:6f:7f:42:a5:25:6f:b8:35:4a:
04:c7:d5:f5:34:b4:56:ed:af:fc:01:44:62:e4:fa:
30:15:27:de:97:3c:d9:a5:64:ca:9b:a4:ca:64:68:
98:7e:a7:93:0f:41:cd:6a:3b:0a:d5:ce:69:5c:08:
10:a2:83:18:1b:cd:4f:33:57:c1:10:e8:27:d1:af:
85:f8:a3:82:fa:ef:ad:45:1d:66:40:2d:02:dc:b5:
f6:33:64:a6:14:63:77:ec:ad:0d:d5:f9:93:1c:97:
4a:d4:08:75:2c:d0:18:3f:ee:64:fe:c5:3b:b4:6f:
ab:e8:83:d8:12:dc:9e:5c:8d:35:0c:7e:30:dd:f7:
98:65:33:57:31:0e:00:69:3f:4b:60:65:fb:6c:fb:
a8:56:bf:5e:41:52:49:72:86:11:f5:9e:9b:b3:d0:
68:d1:8c:3c:7e:80:7b:e7:bc:73:6c:f8:29:7f:db:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C1:E0:D0:40:ED:1A:9A:08:ED:39:4F:CA:E8:3E:64:C7:AE:27:E4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EEE86B540B9311F095E61C6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.100.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:b1:68:65:93:84:00:4b:c0:b1:a8:55:46:4f:53:49:ad:75:
1e:9c:2c:f8:69:e1:4a:58:25:22:30:da:ba:50:4b:a7:17:25:
2f:0f:72:8d:d3:50:5f:24:68:1e:34:06:f1:b0:12:1b:f4:7f:
3d:27:b8:c0:34:ea:f1:b6:57:dd:5a:7d:cd:d9:c1:d4:0a:d9:
70:aa:30:21:d4:c7:ba:4c:96:c9:e3:dd:73:45:9d:2d:4e:e4:
c1:24:97:0c:d0:31:03:64:cd:57:87:10:38:8f:00:7d:03:89:
e2:af:f0:5a:d4:5a:ef:f5:1e:4d:ce:35:55:32:f8:b0:93:18:
f5:73:47:7f:dc:03:9d:61:be:b3:2b:14:94:cd:b4:82:23:76:
c0:e9:0e:9f:72:74:1f:a9:cf:7c:bc:11:2d:ee:70:e0:c2:fd:
88:99:93:28:ef:b7:f1:b2:f5:04:08:c5:0e:17:b2:76:b7:ba:
78:62:c6:e9:7f:42:1c:88:2f:4e:69:cc:c7:d9:48:0e:7a:f0:
87:e4:36:b8:b0:10:5b:36:26:da:4a:2b:db:51:a2:84:59:b1:
44:25:1a:27:32:5c:d1:3f:a5:7d:b8:2b:bb:16:5b:cb:5f:31:
59:32:83:7a:df:58:28:0c:e0:0b:2a:dc:59:b5:c5:50:bf:d4:
59:5e:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:09 2025 by rpki-client