Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EA6AA20C2A6211F086990A90DAE4EC9C.roa
File: EA6AA20C2A6211F086990A90DAE4EC9C.roa (raw, json)
Hash identifier: CSR3ctSbWirdnqEVUsNvD9iiOoIpBrCLZgqMiT+FET4=
Subject key identifier: 0B:A7:AC:E6:BD:4C:12:94:01:6E:BE:27:E9:2E:EB:1E:8F:0B:83:1C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09DD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EA6AA20C2A6211F086990A90DAE4EC9C.roa
Signing time: Tue 06 May 2025 10:14:38 +0000
ROA not before: Tue 06 May 2025 10:14:34 +0000
ROA not after: Wed 06 May 2026 10:14:34 +0000
asID: 43260
IP address blocks: 102.135.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 6 10:14:34 2025 GMT
Not After : May 6 10:14:34 2026 GMT
Subject: CN=6819e10e-cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:9f:f8:04:c8:1e:0e:04:51:56:31:90:14:
37:33:0d:5c:39:80:0e:80:13:0b:58:8d:45:85:e6:
9e:00:66:12:31:67:56:93:4b:9e:58:4a:5d:e7:f2:
89:bf:4d:a9:b6:47:be:37:dd:22:c7:85:31:bd:fb:
ec:6e:71:37:d8:95:1e:ab:40:ac:d4:d5:73:2b:43:
9e:25:f4:56:ab:33:fe:63:d6:1c:cb:e8:78:f4:5e:
9d:6c:32:62:79:73:f4:4f:af:f9:18:42:77:fd:d3:
7e:be:1a:04:56:ce:1f:c8:ad:bb:18:07:01:4d:e9:
af:85:e5:d7:db:26:2f:17:e0:db:b7:c2:67:ff:26:
38:2b:05:c1:48:a1:20:8a:fe:aa:1d:ed:a8:fc:73:
5f:26:8b:fe:02:01:a3:97:07:5f:57:c6:11:ad:99:
5f:e9:f2:3f:52:b1:d8:11:ac:50:26:6c:ad:a0:b5:
86:55:94:b9:22:5a:72:e6:42:6b:cd:3e:33:92:57:
0d:0b:19:f0:59:77:c2:e1:39:b1:82:cd:af:4a:c7:
af:a9:e7:31:1c:a2:e5:61:ff:7f:cb:0d:5d:05:f5:
06:fd:f9:88:a8:d8:91:7b:d7:b5:43:58:4e:50:8c:
af:20:da:47:a2:c8:20:76:ae:a2:8e:dd:c9:c9:59:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A7:AC:E6:BD:4C:12:94:01:6E:BE:27:E9:2E:EB:1E:8F:0B:83:1C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EA6AA20C2A6211F086990A90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.108.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4f:b8:8e:82:75:af:84:73:c4:b8:41:ab:02:e2:44:19:18:
74:95:0c:b5:82:3d:5f:a1:dc:cc:c5:fd:0c:6a:92:b7:04:74:
ff:56:13:1c:6c:55:f6:5f:dd:cd:8b:09:c3:a1:1d:db:b4:2f:
de:c7:b4:87:5f:05:b3:ec:df:5d:de:c4:a9:13:21:b6:2a:f2:
d4:83:0c:e0:d2:43:6a:13:52:eb:6f:40:af:7d:f4:b7:d5:23:
33:05:50:f4:3b:73:62:50:11:b5:92:7b:3d:5c:21:10:94:ae:
17:99:c9:75:2c:56:d3:31:5d:42:f7:d8:f8:80:6e:73:c5:fe:
48:cd:45:cb:da:2c:fd:4e:5f:bb:b8:03:57:81:ac:cb:2f:26:
76:f7:a5:e6:95:e3:04:34:05:7f:2e:0e:70:61:b2:43:66:b4:
6a:77:3c:8b:e1:47:79:de:c8:8d:af:82:b1:4d:6e:99:0c:82:
02:4a:a5:0e:79:a4:d8:e8:ec:18:5f:1e:ea:45:72:c7:db:22:
92:25:1c:2b:23:f1:66:8f:ea:aa:e1:49:d6:b2:6b:94:aa:76:
cc:fb:d7:a0:d7:c6:b4:26:83:ec:50:27:ae:0c:5a:73:1d:24:
37:3d:09:c6:c8:49:b8:b8:ec:58:a6:a9:2a:df:d1:c3:2b:5d:
e4:89:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:10 2025 by rpki-client