Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F7993FA8D33511EF9D81D79B762E951A.roa
File: F7993FA8D33511EF9D81D79B762E951A.roa (raw, json)
Hash identifier: eQu7ZJrQQ2OkyK+nR0jo+7z939tXUUUzvAzHnpiUOww=
Subject key identifier: 50:83:84:DD:10:5D:53:2D:B5:75:C2:E5:C9:9E:78:54:A6:20:8B:F9
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0542
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F7993FA8D33511EF9D81D79B762E951A.roa
Signing time: Wed 15 Jan 2025 11:43:41 +0000
ROA not before: Wed 15 Jan 2025 11:43:37 +0000
ROA not after: Thu 15 Jan 2026 11:43:37 +0000
asID: 53356
IP address blocks: 102.135.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1346 (0x542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:43:37 2025 GMT
Not After : Jan 15 11:43:37 2026 GMT
Subject: CN=67879f6d-1e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:e4:05:79:61:18:32:7c:1b:76:c3:18:d2:
97:2c:8d:c0:91:26:4f:29:d7:f0:86:df:4d:ed:95:
0d:2d:58:9b:ee:6f:f2:41:85:ae:15:73:88:88:9d:
8c:3e:7e:97:b5:d8:64:fc:85:02:f6:87:27:58:26:
18:10:94:46:c4:84:5b:5e:8d:a7:02:27:4c:45:8c:
0e:c6:c5:7a:79:6f:2b:e1:ca:86:93:aa:b1:ba:05:
8a:64:0d:49:7e:68:d3:f0:28:49:67:7a:a1:89:14:
1d:48:4b:54:5c:cf:bf:a9:b9:ac:10:24:28:03:be:
78:3f:2b:e2:b6:7e:03:e1:fd:06:32:af:03:b8:ee:
ce:05:dd:52:a7:81:be:b0:b2:4b:52:6e:6d:8c:ed:
79:81:02:78:62:bb:60:27:24:a1:03:73:1a:ba:d2:
56:a9:c3:dc:29:83:cb:62:33:b9:fb:82:5e:a6:3b:
11:89:3a:99:37:a7:9a:d8:f5:72:10:77:13:75:f9:
8c:9e:9d:89:6c:d5:74:9e:ef:4d:53:a5:aa:3a:8e:
77:c7:9f:1a:5d:55:15:88:69:f1:7c:51:97:85:7d:
e6:95:cd:0b:32:98:7c:eb:e1:66:1b:a8:db:56:17:
ef:53:77:10:42:71:d7:6f:5d:cf:d9:82:ac:c4:b5:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:84:DD:10:5D:53:2D:B5:75:C2:E5:C9:9E:78:54:A6:20:8B:F9
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F7993FA8D33511EF9D81D79B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5d:a1:68:69:95:58:13:92:20:3b:5f:3d:84:84:f1:06:c8:
7a:7c:69:2e:02:b2:76:b2:58:3d:63:94:d0:a7:b3:ba:1e:d4:
4a:18:58:34:91:56:75:5d:38:d2:ef:53:27:23:ef:c8:e9:2a:
ef:6d:89:89:7a:e3:38:0c:0e:c7:10:df:95:44:77:c0:2b:7d:
b0:d0:70:76:0f:a0:4e:ea:aa:cb:63:05:23:ca:59:04:80:51:
3e:c6:4f:c8:18:8b:ac:14:0e:26:8a:59:3d:3f:a1:53:90:ef:
c8:df:fa:18:47:3a:6a:ec:60:98:22:e9:49:2f:e7:86:68:3d:
82:25:0b:0e:4f:95:dd:86:0c:96:be:28:91:19:3b:e4:9f:10:
30:26:b5:3c:6a:f7:80:d6:fe:55:7f:0a:4c:36:53:09:f2:b7:
ee:3f:e0:fd:42:02:27:59:e3:89:cf:73:1e:65:49:61:70:04:
34:4e:36:d1:6d:53:9f:ce:a2:39:0b:39:ed:90:63:85:40:e4:
f9:9b:b8:0e:2e:0c:df:5e:62:75:7a:5f:a8:86:df:8b:f4:54:
6c:1b:84:b1:cb:10:cc:1a:78:16:97:1c:79:12:67:76:e3:a5:
46:e7:ed:0b:c7:82:59:0f:a3:33:81:27:25:72:ce:ab:f8:30:
64:c1:4d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:40 2025 by rpki-client