Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F436FE5A0B9211F08C2AF168762E951A.roa
File: F436FE5A0B9211F08C2AF168762E951A.roa (raw, json)
Hash identifier: shgE4KTcpn4817IdXWSsuqYCxw6b4NhfxZR58N6m7CM=
Subject key identifier: B8:A7:F5:8F:04:74:D0:6A:96:E4:5B:14:49:39:66:65:B4:CD:56:FA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 089C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F436FE5A0B9211F08C2AF168762E951A.roa
Signing time: Fri 28 Mar 2025 05:10:24 +0000
ROA not before: Fri 28 Mar 2025 05:10:19 +0000
ROA not after: Tue 01 Dec 2026 05:10:19 +0000
asID: 4515
IP address blocks: 102.135.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204 (0x89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 28 05:10:19 2025 GMT
Not After : Dec 1 05:10:19 2026 GMT
Subject: CN=67e62f40-a369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:1b:26:0f:fe:2e:35:0b:b6:df:13:82:d2:
5d:80:c2:d0:ba:f1:30:43:c1:7b:4d:00:0c:ad:32:
1f:23:1f:34:c4:24:00:f1:84:c2:97:26:a3:06:6d:
b4:1e:7e:90:fd:75:55:3d:15:65:d6:6c:c3:12:93:
0f:fb:d3:63:af:ec:66:de:c9:c2:d7:4e:f0:81:0c:
1b:aa:05:0d:5d:ff:2c:20:2f:0c:60:c9:7e:5b:b4:
ba:40:b8:47:4d:a0:17:16:0e:ca:97:54:c7:79:13:
f7:72:f1:10:74:25:b0:de:7b:46:7b:06:6f:c6:2b:
68:f8:f9:ca:07:d5:3b:65:27:5a:e2:85:26:00:39:
a2:62:d6:5b:32:f8:64:a9:39:14:b4:91:7e:bc:d5:
05:f4:a1:f8:88:5d:9e:a2:c3:1e:09:01:fd:32:d2:
7c:04:a7:1a:6e:60:e4:ae:0c:a9:01:a7:e8:53:c4:
e4:82:d9:e8:6f:2c:d0:39:ab:e6:65:34:72:d4:33:
46:a7:50:d5:fd:8e:84:82:35:00:0a:6f:d9:df:ce:
90:e2:51:00:b3:61:e6:28:95:65:a9:7f:03:3c:81:
69:2f:fb:53:c5:f3:f6:44:7d:4e:c7:62:38:14:d7:
35:a8:5b:7e:c8:ca:aa:10:75:67:03:34:f5:29:74:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:F5:8F:04:74:D0:6A:96:E4:5B:14:49:39:66:65:B4:CD:56:FA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F436FE5A0B9211F08C2AF168762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
57:84:6f:0c:ee:8c:1f:ee:b3:b6:a0:e2:2f:a5:12:1d:3e:38:
94:c1:1a:37:4b:a2:a8:91:c5:6e:8f:c2:ff:2c:af:69:89:0f:
4f:67:43:ca:6e:f7:f4:1d:c2:30:bf:53:e1:32:b3:2d:b5:f5:
ca:db:9b:f6:20:64:fa:97:ce:ab:89:e8:1d:cd:39:75:e0:ac:
9e:21:50:62:49:72:03:08:30:5e:28:2c:8c:b4:e0:70:f3:cf:
45:2d:de:90:d3:39:fc:5f:2b:d4:59:c9:7a:1d:1d:0e:14:71:
37:a0:17:4e:5d:b0:b0:e5:7b:d3:a4:94:15:bc:2f:79:2e:af:
48:9e:1b:07:34:18:e7:2e:c4:b5:d3:4b:27:6e:03:eb:f6:6e:
a6:5e:fa:1f:33:be:6b:b3:eb:aa:8e:b9:03:85:8b:21:de:e8:
dc:33:a5:2c:31:c5:d9:bb:38:bd:66:f1:5e:fe:f5:9f:bb:de:
4d:dc:da:60:39:8d:c6:9b:57:e2:f1:65:34:14:a4:7e:1a:99:
9b:1a:bc:21:06:fb:81:57:e7:f0:92:d3:72:c6:9f:73:9c:b3:
79:3f:bc:8a:2a:b8:c5:e7:b7:08:e2:40:fa:b7:9c:dd:85:f0:
58:9b:85:5d:f8:b0:05:67:12:22:17:ec:ea:0c:05:c9:68:0d:
80:3b:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:44:06 2025 by rpki-client