Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6A88212275711F08F55E3AEDAE4EC9C.roa
File: B6A88212275711F08F55E3AEDAE4EC9C.roa (raw, json)
Hash identifier: eYuj9Zaj7YPtvJzR7KvqarPxYr0mi1UBQa4DRHEHbyI=
Subject key identifier: 2D:C9:A4:90:2F:C3:22:58:23:31:15:58:60:7D:19:32:F3:21:21:8F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09B0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6A88212275711F08F55E3AEDAE4EC9C.roa
Signing time: Fri 02 May 2025 13:16:53 +0000
ROA not before: Fri 02 May 2025 13:16:48 +0000
ROA not after: Tue 10 Feb 2026 13:16:48 +0000
asID: 329007
IP address blocks: 102.135.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 2 13:16:48 2025 GMT
Not After : Feb 10 13:16:48 2026 GMT
Subject: CN=6814c5c5-947c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:68:a5:7f:a3:41:51:5f:2a:a7:c5:61:f5:
13:f8:cc:81:89:89:e3:17:b7:d7:2c:07:b1:7a:7b:
93:ad:57:a6:6f:14:31:6e:e2:94:0b:a4:ac:e5:09:
5c:a4:9f:3d:4e:07:56:3d:b5:70:b6:75:22:09:21:
c8:7a:c9:95:d8:fd:09:ec:6b:b7:ae:0d:c5:a9:09:
be:9d:c2:da:26:ba:ba:68:7c:be:47:3a:6c:3a:27:
54:c5:6c:75:a4:6d:62:27:71:0a:55:f3:1a:4d:65:
f3:3a:82:6d:b1:ad:b8:48:0f:75:bb:59:2e:81:7c:
e8:e7:f9:90:90:2d:95:c1:eb:4c:7e:00:f1:a0:5c:
6b:37:5b:9e:d0:c9:f1:20:2d:6c:09:39:e9:34:c9:
d9:76:2f:6e:0c:04:d7:fb:49:92:0a:56:00:1a:30:
e4:2d:52:0a:6f:b1:42:11:39:3d:d0:a5:5a:a0:ca:
5b:da:8d:86:7a:3e:70:90:96:85:e1:73:be:24:ae:
6d:6a:8e:ef:9a:d0:12:19:a9:42:1d:32:85:1a:1d:
e9:69:85:de:69:98:7e:ac:ac:8e:a2:95:4d:d5:0e:
c2:e6:c6:ea:65:54:fb:9e:d4:8f:cd:ae:5e:9a:67:
28:61:79:af:ea:08:21:06:31:c8:1b:c5:08:56:3a:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:A4:90:2F:C3:22:58:23:31:15:58:60:7D:19:32:F3:21:21:8F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6A88212275711F08F55E3AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.115.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:78:49:42:50:42:2f:15:4f:94:fd:a3:1d:cc:ea:b2:8c:8f:
06:00:96:33:cc:8e:77:b8:f0:f1:86:ee:9b:71:c0:d0:98:f8:
5b:d8:4f:cb:56:ab:c3:a3:0d:d3:99:4f:71:90:c3:34:04:4f:
e7:9d:7e:1b:02:39:47:dd:c7:23:e2:79:c6:33:4f:fb:3b:33:
06:c2:fa:2f:dc:86:67:23:fd:11:6c:73:e7:bd:d7:8e:0b:0b:
49:cb:fd:f8:12:01:3b:3a:65:2c:df:c4:2f:17:41:e6:88:e1:
13:29:e6:a0:77:6b:d7:d7:95:e9:df:cb:b1:da:06:a3:b6:74:
48:c1:d3:a9:9e:a9:1a:8c:92:ff:88:ea:03:9b:52:66:66:d9:
8c:8d:ce:03:de:4b:1f:d5:6d:07:c9:c1:f7:b5:16:b6:18:28:
8f:21:9d:b6:36:04:3f:30:ee:33:45:0c:5d:65:06:54:3b:0a:
d9:c3:6d:36:f1:73:5a:40:fd:58:f7:3b:58:b3:e2:a8:68:fd:
77:73:29:dd:06:63:c8:b3:b5:c6:14:ad:c8:5d:cc:ff:3a:4d:
68:f1:ac:e5:62:6d:e5:46:a0:b7:1f:9d:a5:18:4d:7c:a3:cc:
2c:c4:88:18:72:76:58:f7:ba:6d:d9:1d:b3:76:50:01:eb:3e:
21:69:b4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:20:25 2025 by rpki-client