Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C56E0808275711F0BE87EDAEDAE4EC9C.roa
File: C56E0808275711F0BE87EDAEDAE4EC9C.roa (raw, json)
Hash identifier: U13OYQtpiA0qPmv0EXhVKdOXcpp6gE8OuklXtfl+8w4=
Subject key identifier: DD:EF:01:9E:38:1A:B7:ED:71:17:0A:57:E1:68:0A:DE:47:2C:FC:19
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09B4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C56E0808275711F0BE87EDAEDAE4EC9C.roa
Signing time: Fri 02 May 2025 13:17:18 +0000
ROA not before: Fri 02 May 2025 13:17:13 +0000
ROA not after: Thu 01 Jan 2026 13:17:13 +0000
asID: 329007
IP address blocks: 102.135.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 2 13:17:13 2025 GMT
Not After : Jan 1 13:17:13 2026 GMT
Subject: CN=6814c5de-b970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:7a:49:34:e5:21:77:9f:79:e6:9d:5e:dd:
e1:52:a7:c8:03:d0:46:12:18:4d:09:cd:25:60:5e:
b8:1f:71:ef:91:82:89:c2:bc:83:40:2a:20:0f:9f:
b8:a5:4a:5c:99:69:ae:9d:49:86:ef:60:a3:2a:92:
5d:3b:a4:e5:7d:3b:54:d2:6e:97:03:b7:6c:22:46:
ae:94:ad:ca:c7:86:31:7c:38:1c:00:bd:7c:03:2a:
5a:ed:64:63:84:79:2c:e1:a7:56:6a:e9:f3:c2:78:
d3:c7:c0:4b:ec:82:41:11:37:63:25:2d:c8:38:53:
a4:7e:b6:45:34:a1:b2:af:e4:0d:0e:73:02:3f:89:
1f:97:c5:b5:db:80:d2:7e:3c:97:29:48:e8:c5:fc:
fe:ed:30:c8:ee:85:47:9c:5c:72:a0:7c:f1:de:16:
3b:9c:1b:c6:3f:99:21:a9:48:f4:a6:46:cb:15:41:
fc:c0:ea:c6:8f:25:88:d1:a0:69:80:f9:64:c5:7c:
5f:2c:de:b3:c0:15:bc:c1:c8:97:50:d8:08:28:43:
22:ab:4d:42:fe:3b:56:0d:5c:99:0a:9b:ca:c2:fa:
1e:6c:ce:9e:bf:a9:f8:90:65:8e:8c:be:c3:a9:00:
14:fe:bb:55:2d:c7:dd:e5:29:ca:d7:be:0c:e0:a4:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:01:9E:38:1A:B7:ED:71:17:0A:57:E1:68:0A:DE:47:2C:FC:19
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C56E0808275711F0BE87EDAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c5:8c:ea:df:70:8e:6d:53:09:cb:fc:03:47:99:a7:36:a1:
ea:9d:a8:79:85:38:ab:ac:97:7a:4a:3d:cb:87:76:72:a4:ee:
33:77:58:66:8e:44:62:e0:f9:28:32:a4:bf:cb:fe:b4:20:7c:
d1:bb:5d:3f:64:0a:ba:ce:13:69:45:4a:69:0b:da:9c:97:f7:
34:ea:75:4a:55:13:5c:59:93:33:a3:38:9d:bc:75:37:9e:54:
33:f7:05:1c:53:fe:b2:2b:5c:bf:4c:ee:59:28:44:fb:0d:3e:
60:49:60:40:b8:fc:eb:45:a7:1a:4d:98:bc:b1:d5:4b:36:5b:
19:e8:41:b3:cf:42:1c:ff:f9:29:da:93:95:95:48:a3:4c:32:
1b:38:15:a4:5c:8b:f6:c3:6b:4d:17:3e:40:a2:50:85:4f:a1:
44:9b:9f:5b:f6:94:f9:ad:16:70:31:1b:89:19:54:9d:70:cd:
63:a0:39:09:1f:99:9e:47:cd:4c:f3:c2:15:63:01:ce:70:81:
06:8c:61:a1:a5:c4:2c:46:f7:83:72:cc:60:33:2a:06:fd:6d:
9b:81:51:77:23:67:52:bc:53:ee:19:3a:03:65:cd:78:02:12:
7a:0a:20:99:c8:50:2d:00:1d:3c:2e:d1:9e:34:1a:45:32:78:
15:ba:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:33:03 2025 by rpki-client