Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/789C3EA8274011F087C54B96DAE4EC9C.roa
File: 789C3EA8274011F087C54B96DAE4EC9C.roa (raw, json)
Hash identifier: vEiCTnmY72jG/UC3EhdQIhZtG82vYSg1DberSgnfaV0=
Subject key identifier: 20:F4:32:AC:44:2C:97:2A:79:E3:8C:6F:27:B8:72:4D:04:C8:48:71
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09A4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/789C3EA8274011F087C54B96DAE4EC9C.roa
Signing time: Fri 02 May 2025 10:30:31 +0000
ROA not before: Fri 02 May 2025 10:30:25 +0000
ROA not after: Sat 02 May 2026 10:30:25 +0000
asID: 208485
IP address blocks: 102.135.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2468 (0x9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 2 10:30:25 2025 GMT
Not After : May 2 10:30:25 2026 GMT
Subject: CN=68149ec7-96a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:08:77:ec:9c:50:03:0a:00:52:d6:e3:72:
ae:32:61:0c:89:87:60:a4:22:f0:ff:1d:64:41:ca:
1f:03:5e:47:8b:ed:27:cb:06:46:fc:3d:5d:70:5d:
6d:98:ea:93:31:80:6e:3b:f1:8f:a5:6d:57:9f:49:
69:13:67:37:39:3a:13:dd:9f:f1:a8:61:5e:40:8b:
cc:89:02:35:f4:b2:e2:56:77:d0:ad:b4:f2:a9:18:
76:f7:bc:0c:3e:c7:1a:f6:8c:32:e6:4e:f3:95:1f:
01:ec:15:c3:71:7d:69:e6:50:ed:e4:77:dc:26:70:
f1:0b:5a:21:1e:3c:5a:a1:83:6e:d2:14:d4:48:0a:
a8:c3:f4:d5:33:36:4d:bf:c9:78:56:b1:23:4c:d3:
33:14:17:46:46:b5:86:ca:cf:c9:e9:e4:07:12:24:
fe:88:c5:f7:34:2c:5b:ec:09:2e:89:0e:2e:20:6b:
6d:96:eb:d3:fb:78:04:87:54:a8:e1:2c:03:f2:c0:
8e:4c:2b:d4:4a:a0:bf:94:b1:0e:9e:e8:51:d0:01:
fc:e0:0f:b7:6b:14:67:98:29:07:6d:0d:65:dc:58:
35:15:ba:14:7b:4a:30:dd:9a:d4:5c:f9:fd:c6:0c:
fe:43:69:72:3e:d2:56:9a:1e:62:20:a2:0d:40:c5:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:32:AC:44:2C:97:2A:79:E3:8C:6F:27:B8:72:4D:04:C8:48:71
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/789C3EA8274011F087C54B96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.33.0/24
Signature Algorithm: sha256WithRSAEncryption
22:9a:ed:e5:ac:d9:f5:f7:35:5a:44:da:4b:f4:f2:8f:d2:ad:
d4:75:69:ae:8e:98:51:40:36:df:64:03:c9:c7:a5:53:15:08:
1a:05:1f:7c:69:e1:06:99:0a:ba:ac:36:34:0d:b7:6c:28:34:
43:7a:60:e7:d8:a1:20:c5:9e:4e:1e:1d:a7:e2:f1:99:fd:d8:
0a:f7:42:c3:9c:ed:f9:fd:8b:c8:c2:52:78:cc:af:f6:8c:41:
89:2f:0e:d5:85:cc:90:1e:e4:fd:56:51:20:ac:60:2f:a4:ad:
c2:43:55:e1:a8:56:0e:d8:9d:0b:01:47:ff:34:90:68:36:1c:
9a:7b:7d:7d:08:14:7b:cb:59:0c:2d:f2:67:4b:1a:79:fb:0a:
b9:71:26:46:cf:63:a7:76:bc:6a:40:f6:78:c7:2a:3a:45:ce:
b4:87:d4:38:6b:61:7d:3d:c4:58:5e:02:4f:8d:72:3c:e7:9e:
af:fc:9a:37:6e:8e:94:c1:3e:d9:05:87:d4:2b:97:e7:2f:c0:
06:04:e8:12:3c:55:c7:7a:e5:04:5f:59:ac:13:c4:f3:e0:ad:
f2:d7:3c:9d:c5:9c:3c:b3:ee:d9:69:d2:df:09:1c:0e:6d:73:
b2:a7:12:1a:51:b2:b5:83:f4:8a:42:4c:7b:e7:6b:40:18:a8:
80:8a:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:33:56 2025 by rpki-client