Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B173CC822A4211F09B18A1B9DAE4EC9C.roa
File: B173CC822A4211F09B18A1B9DAE4EC9C.roa (raw, json)
Hash identifier: Rhj4BN54MvezDHGfFcvOf9w+bx7wF5dDiV/yWEEQfL4=
Subject key identifier: 84:B9:A2:D3:C7:FC:59:70:EE:D6:E6:51:D4:B3:6F:BE:70:BA:E6:6C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09DB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B173CC822A4211F09B18A1B9DAE4EC9C.roa
Signing time: Tue 06 May 2025 06:23:59 +0000
ROA not before: Tue 06 May 2025 06:23:53 +0000
ROA not after: Wed 06 May 2026 06:23:53 +0000
asID: 208485
IP address blocks: 102.135.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2523 (0x9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 6 06:23:53 2025 GMT
Not After : May 6 06:23:53 2026 GMT
Subject: CN=6819aaff-bb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:8c:10:92:94:ca:6c:73:fa:77:09:cc:98:
1f:5f:9d:92:03:fe:b5:35:56:b2:66:01:6d:1b:83:
03:ae:97:d2:9b:4f:39:c0:16:7a:a1:32:4f:41:9e:
05:e2:12:18:9a:43:3e:b7:e1:71:c9:13:f8:bd:2f:
f3:01:33:9f:53:c3:93:23:04:e4:d4:cb:cd:f9:8b:
e6:03:d9:b3:b9:6f:f7:3a:b9:b1:02:76:7d:c9:7d:
c8:85:44:3f:f3:a9:4d:b5:a9:e7:ce:81:1c:c4:3f:
ba:32:ec:ea:e4:72:3f:af:a7:fa:ac:62:73:96:cc:
58:5e:de:49:05:ea:5a:ef:e2:19:32:1c:82:91:ce:
69:88:d5:67:f1:b8:9c:31:16:7d:71:64:6c:3f:66:
da:50:1a:47:62:f7:62:59:34:9c:1c:90:2b:8a:4b:
c0:73:f0:87:6f:56:f4:f9:bf:b0:fe:11:a6:13:39:
bb:e5:06:ba:62:50:ed:fb:b0:50:45:96:10:8f:32:
28:1e:49:6e:3b:20:13:f6:ce:52:20:e7:07:e1:62:
5d:f0:57:5a:1d:b1:dd:16:65:a6:95:b1:92:15:2e:
5b:1a:fc:26:b8:b4:a8:b1:9b:f7:b4:93:34:75:82:
bb:e4:0b:2e:89:ee:58:33:88:fc:6a:86:66:7d:9e:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:A2:D3:C7:FC:59:70:EE:D6:E6:51:D4:B3:6F:BE:70:BA:E6:6C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B173CC822A4211F09B18A1B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.35.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e5:6a:bd:28:68:2c:c9:f8:3f:8b:28:5f:df:84:b1:57:60:
97:b1:71:92:81:76:56:a5:e6:22:f1:82:8d:56:6f:22:0c:e1:
29:3f:b7:ad:21:5f:1d:1f:a5:68:fc:af:06:b5:7e:99:36:2e:
a8:de:74:87:eb:67:fd:37:a3:26:23:15:fb:56:17:8e:96:d0:
73:6f:3e:6c:c0:a8:24:c0:7a:f4:fd:b7:e8:4d:89:eb:0c:26:
af:5a:e5:8f:36:72:82:32:8b:42:95:23:f8:1e:6a:bd:4a:22:
7c:dc:3c:e3:ab:2e:75:c2:6b:e3:3a:61:73:4b:40:ec:fa:a0:
9e:b6:b4:d4:fb:e4:a2:b9:2c:a3:a7:6d:0c:fa:d3:19:23:fb:
98:7d:a7:3d:6a:4a:bb:bb:07:4f:26:6f:4d:f6:7e:5f:71:97:
39:64:42:09:64:e9:92:ff:f5:71:75:43:42:b9:51:62:3d:2a:
33:aa:f9:92:94:49:ad:ab:1e:fb:e7:9b:b9:78:bc:23:0f:2c:
77:3d:ef:e7:2e:9a:0f:51:ab:54:0b:e3:cc:4e:37:ae:d1:c8:
f6:1f:05:8c:b7:e1:3c:09:d0:e1:c9:56:89:77:98:5b:14:18:
06:a6:3f:61:47:b3:97:aa:8f:18:0c:ff:2c:fc:83:c8:94:18:
ae:df:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:38:59 2025 by rpki-client