Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0401CE4275811F0AE74A1B4DAE4EC9C.roa
File: C0401CE4275811F0AE74A1B4DAE4EC9C.roa (raw, json)
Hash identifier: ntv++jP1I8BPmJuN/EhdonBgGEDevZmDK2kk2P7e3Jk=
Subject key identifier: 59:89:2F:34:4B:83:23:2B:FE:AA:9A:CE:67:1F:90:B1:27:B7:8B:37
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09C0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0401CE4275811F0AE74A1B4DAE4EC9C.roa
Signing time: Fri 02 May 2025 13:24:19 +0000
ROA not before: Fri 02 May 2025 13:24:14 +0000
ROA not after: Thu 01 Jan 2026 13:24:14 +0000
asID: 329007
IP address blocks: 102.135.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2496 (0x9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 2 13:24:14 2025 GMT
Not After : Jan 1 13:24:14 2026 GMT
Subject: CN=6814c783-814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:6b:01:e4:e7:08:70:ee:c7:62:3f:61:ea:
89:3b:01:bc:2c:cf:56:23:13:2f:73:0a:d2:f5:91:
f2:60:36:d3:5b:89:8d:cf:c1:d2:50:a2:9a:a9:87:
c3:8a:ac:7d:79:03:dc:28:8c:b0:28:c7:22:df:79:
a7:0b:c6:d6:6c:fa:04:89:b9:84:31:41:e5:73:04:
da:8b:ef:92:b3:18:7e:0c:d0:51:d7:ac:56:54:96:
a4:c2:43:81:3d:63:8a:aa:02:47:6b:6f:e4:52:aa:
28:63:c5:db:67:a1:be:95:9c:77:29:33:50:94:5a:
ff:4e:04:36:07:af:9f:85:69:46:6a:8a:4f:c5:d1:
af:e6:a8:ab:bb:72:6f:1e:41:44:87:24:b8:15:56:
46:7a:10:5b:c0:7f:c0:8d:8e:5f:f1:e8:8b:c4:0d:
41:bc:20:c9:57:07:d4:0d:42:19:e5:32:8c:f5:b6:
6d:ce:39:6a:aa:45:0c:80:c7:7c:7a:b2:b4:a9:d5:
9b:d1:85:d5:b8:12:b3:bb:21:67:e7:ac:78:52:e9:
63:a4:a7:b7:8b:89:c8:32:67:dc:d0:ca:d8:3b:88:
b6:59:2b:1e:46:20:56:f8:d2:20:8d:d4:6f:36:1d:
57:9c:2e:bf:b0:40:7e:2f:9f:d5:ea:e6:0b:08:c3:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:2F:34:4B:83:23:2B:FE:AA:9A:CE:67:1F:90:B1:27:B7:8B:37
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0401CE4275811F0AE74A1B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.29.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:5e:f5:fc:eb:30:63:57:0b:e7:2d:39:a6:02:64:bc:5a:41:
b8:ed:c6:d6:25:ba:14:66:07:33:56:7e:3d:83:1c:12:a2:77:
ba:4a:e8:5a:2c:2c:6b:24:8f:f2:22:81:db:ca:9f:3d:4c:95:
a5:05:41:c2:ee:d8:65:06:aa:6d:d6:ba:11:c0:47:00:38:0e:
1b:89:8d:87:25:d6:6b:24:2a:5e:7a:2f:cb:62:29:06:df:a1:
c8:0a:bf:11:11:b3:09:da:77:46:f6:48:da:18:d9:6a:02:3f:
03:8f:2a:52:31:ce:65:d0:62:f4:dc:10:e9:4f:21:0f:36:d4:
cd:41:60:e7:d4:5e:d1:1e:df:3d:cd:7a:93:d2:2d:cf:e6:7f:
24:5f:45:48:78:4b:76:e3:48:4a:3c:d6:8c:82:9b:af:c5:76:
99:7a:45:7e:a5:66:b0:cd:de:7e:59:ea:1f:1b:3d:8b:1f:59:
d2:fc:99:01:d9:6d:21:dd:30:aa:31:97:5c:3b:76:71:70:4d:
15:8e:37:b4:dc:31:b8:19:01:77:ad:46:f4:22:15:87:0c:56:
c7:c0:28:fc:ff:dd:a8:e8:1a:72:aa:af:f6:9c:6a:52:61:30:
e9:a6:9e:88:f6:4d:00:a0:93:d7:aa:9d:40:d0:5f:a5:4e:ba:
55:8c:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:29:06 2025 by rpki-client