Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BB88752A2B1811F0B26BE4CFDAE4EC9C.roa
File: BB88752A2B1811F0B26BE4CFDAE4EC9C.roa (raw, json)
Hash identifier: HlTkVySs+5Dq8BYwNL6g1RoEgLPlY3r83BrQLQ7u1uc=
Subject key identifier: CC:E6:FD:73:65:06:59:53:1F:39:D6:DB:5B:54:21:D4:92:E7:62:17
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09E8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BB88752A2B1811F0B26BE4CFDAE4EC9C.roa
Signing time: Wed 07 May 2025 07:56:08 +0000
ROA not before: Wed 07 May 2025 07:56:03 +0000
ROA not after: Tue 10 Feb 2026 07:56:03 +0000
asID: 213659
IP address blocks: 102.135.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 7 07:56:03 2025 GMT
Not After : Feb 10 07:56:03 2026 GMT
Subject: CN=681b1218-44c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:e1:23:ab:a7:61:51:24:6f:85:b2:2c:68:
15:9b:34:e6:f1:4b:02:bf:c6:4a:85:ed:d3:f9:3b:
e7:2b:2c:00:20:ed:6f:ae:d6:e4:bb:4a:89:92:c5:
37:e0:74:91:7b:44:f3:15:a6:d8:33:28:71:59:b2:
9d:3c:da:27:f0:1e:77:f8:fc:9f:d8:55:46:3b:69:
72:94:75:b0:cf:90:76:79:05:5c:43:02:4d:e7:18:
4d:d2:63:64:77:bd:fb:ff:be:d8:31:29:dd:eb:dc:
14:c0:da:22:3a:2e:e9:0e:e4:1c:58:f2:56:a4:ed:
21:9d:59:eb:1d:bf:a7:fb:75:fb:62:18:99:d0:e7:
16:83:d7:e1:c3:59:ee:e2:1d:30:89:1f:4b:61:3f:
26:d3:53:2e:b2:62:2e:aa:56:11:9d:3d:8f:a9:79:
37:24:55:b4:38:6c:69:c3:13:f0:92:e6:59:60:59:
3b:9e:ef:65:63:0f:a2:49:73:a3:57:68:d4:13:58:
89:65:6d:84:61:f5:d3:d4:36:51:82:85:4a:3a:2e:
87:de:fb:a8:8e:aa:24:3f:2a:24:28:d5:2f:0d:7a:
61:0e:85:c8:58:44:2d:ad:5f:23:ec:71:14:44:90:
67:ce:ad:44:7f:60:ad:8c:f0:e0:08:7c:8a:57:c3:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:FD:73:65:06:59:53:1F:39:D6:DB:5B:54:21:D4:92:E7:62:17
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BB88752A2B1811F0B26BE4CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.28.0/24
Signature Algorithm: sha256WithRSAEncryption
76:78:62:eb:12:a1:25:c2:24:15:ad:b7:75:4e:25:f0:3e:ec:
64:99:cd:ae:58:29:95:63:3c:73:55:84:7d:e4:f5:bf:fd:18:
2a:6a:95:15:82:6c:b2:4c:0c:33:78:fb:04:bd:a3:74:31:ec:
c9:07:96:31:a7:ca:4d:81:17:c3:b5:95:21:31:8f:ab:49:0c:
a7:56:5b:f0:ae:64:dd:82:b5:5f:e0:e0:75:65:33:31:b8:cd:
d1:93:ca:64:88:50:82:ba:d7:9b:d3:87:1f:30:b0:d6:10:72:
1a:9c:af:5c:3e:08:fd:dc:a8:ec:71:84:d7:dd:c1:f7:33:8a:
a1:98:7c:e4:61:94:3a:99:cf:6d:39:6d:22:75:4c:9d:f9:41:
d8:83:f2:fa:67:c9:9c:2a:03:8f:e8:29:c4:91:45:fb:7a:2e:
c1:bd:1f:03:e0:f3:c9:9e:68:b9:4a:db:c9:20:c2:90:4f:da:
05:8a:fc:59:b2:c2:51:12:74:8a:bb:02:f9:71:b2:8d:87:f7:
bc:9f:18:33:67:26:b3:7a:fa:18:a4:13:4d:d6:2d:85:79:a7:
17:9c:66:fa:b9:d4:18:12:f4:ec:6e:c9:be:2a:ea:34:db:f8:
a9:89:12:86:d4:59:ed:bc:bb:55:50:45:a1:51:a2:f8:b2:3e:
0b:6e:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:20:23 2025 by rpki-client