Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8EB208C04B4F11F0BADD379ADAE4EC9C.roa
File: 8EB208C04B4F11F0BADD379ADAE4EC9C.roa (raw, json)
Hash identifier: 3/7TELnprCMM3CoJtrkV84zLKO5V1XG0/5FY6M3U8yE=
Subject key identifier: 24:A8:26:74:CB:36:4E:DA:D0:BE:21:FE:4E:BF:86:5F:FA:DB:66:D1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B94
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8EB208C04B4F11F0BADD379ADAE4EC9C.roa
Signing time: Tue 17 Jun 2025 07:49:12 +0000
ROA not before: Tue 17 Jun 2025 07:49:06 +0000
ROA not after: Tue 16 Jun 2026 07:49:06 +0000
asID: 29802
IP address blocks: 102.135.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 17 07:49:06 2025 GMT
Not After : Jun 16 07:49:06 2026 GMT
Subject: CN=68511df8-ce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:a8:77:74:a1:da:8f:e9:31:d5:11:aa:02:
4e:3f:12:ef:10:db:c9:83:db:81:75:e8:4b:c1:dc:
34:57:4d:b4:33:72:d1:ef:d6:da:a9:f4:ad:83:33:
87:f9:7e:d3:97:15:6e:4d:c0:8d:03:b2:9a:b6:3a:
1d:79:37:c1:8b:9c:af:36:cf:92:22:83:26:88:d3:
cf:87:5e:14:98:79:d3:ec:f1:f7:fc:e3:5e:53:e7:
1f:ba:4b:49:d0:7d:20:8f:fe:e6:97:f3:ed:73:4e:
57:96:1e:8c:92:b2:11:6d:7c:2f:40:e2:64:a3:f5:
63:b0:8f:40:8c:bf:1b:e1:cb:c2:6c:49:25:dd:2c:
20:d6:26:0d:a4:90:a7:8b:28:b7:7c:c1:3e:87:6e:
ac:47:0f:5c:4f:0c:c1:12:cb:c5:64:e4:e5:51:b4:
a4:8d:34:2c:8c:54:ab:25:d0:85:ff:04:0e:78:79:
6e:16:a6:64:96:c7:09:13:c6:1f:1d:1f:4d:d8:c8:
d9:ba:e1:b5:de:08:b0:14:46:6c:ae:4a:0a:0c:35:
d3:5c:fa:a1:61:8f:3b:d6:27:88:07:ce:7e:1d:b5:
87:d1:08:96:22:19:42:be:27:f8:24:1e:7a:47:d5:
84:1e:f8:76:d5:1d:e8:31:d7:25:94:7b:34:31:03:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:26:74:CB:36:4E:DA:D0:BE:21:FE:4E:BF:86:5F:FA:DB:66:D1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8EB208C04B4F11F0BADD379ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e6:ba:0a:cd:6f:d5:9c:02:7b:06:35:56:6c:e6:8a:70:45:
ef:37:6f:67:92:52:81:f2:c0:77:7b:4f:28:2f:fd:16:4f:00:
db:12:26:6b:8c:8d:8e:8b:38:a6:0b:9d:15:71:37:87:00:92:
4a:da:94:45:66:25:cc:55:2e:9e:af:b9:71:23:01:74:aa:95:
05:23:8c:52:43:10:9a:36:0b:11:07:d7:04:69:3c:0f:0b:cc:
35:20:79:82:58:fd:09:57:98:73:6a:7a:76:f7:7d:c2:b3:cf:
54:cb:2a:28:d7:58:20:2f:c1:f7:cf:44:7c:ff:a2:f9:4f:f5:
cf:36:c5:5b:47:32:29:d0:8b:55:d9:8b:9b:cd:e7:4a:0a:0e:
ba:6f:ef:cc:1e:78:21:2c:13:54:76:42:ef:b7:36:7c:fb:8b:
40:17:f6:0b:1b:12:58:31:a1:78:bc:ed:c7:ed:35:cc:e2:f6:
3e:6d:8e:73:6f:43:26:1f:a3:1a:3b:d3:97:92:8b:a3:2b:c6:
c9:b7:e1:c0:14:b4:99:25:1d:69:6c:7b:e1:7c:e6:6c:c1:fb:
a8:b4:8e:e6:1a:37:3e:11:e7:be:76:3e:bf:26:cc:9b:32:ba:
46:83:00:7c:32:14:4b:78:5b:e1:89:85:0c:ef:ff:88:f2:e4:
59:db:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:55 2025 by rpki-client