Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/482D0488275811F0B9D197B1DAE4EC9C.roa
File: 482D0488275811F0B9D197B1DAE4EC9C.roa (raw, json)
Hash identifier: C0zeWTh3iF/EQK7esqW6j/uopgE9tMKl4bEY+3sm5As=
Subject key identifier: 6C:75:0E:55:20:4F:FA:4F:AA:89:EF:DE:27:71:D9:AC:CC:0A:9F:92
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09BA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/482D0488275811F0B9D197B1DAE4EC9C.roa
Signing time: Fri 02 May 2025 13:20:57 +0000
ROA not before: Fri 02 May 2025 13:20:53 +0000
ROA not after: Tue 13 Jan 2026 13:20:53 +0000
asID: 329007
IP address blocks: 102.135.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 2 13:20:53 2025 GMT
Not After : Jan 13 13:20:53 2026 GMT
Subject: CN=6814c6b9-8172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:7f:3a:78:c6:37:a6:a4:8d:34:d8:33:f0:
f4:52:4d:cc:45:0b:6c:9f:c4:7b:5f:45:1d:31:1a:
ad:8a:e7:ae:40:26:62:63:d9:eb:13:ed:7b:1a:d3:
87:01:e7:b0:9d:3e:1d:38:92:66:ca:20:68:7a:53:
34:7b:26:5a:7b:ff:d1:25:18:1f:7c:76:41:29:ec:
75:c5:c4:6a:f2:78:60:5f:72:b9:86:fe:27:6f:0c:
78:1b:f8:2f:63:2b:f5:cb:9b:7e:37:46:17:1d:be:
68:d3:bd:c0:fc:9e:39:fc:45:10:59:19:80:73:79:
f2:1e:02:4f:c6:e7:2d:76:7c:d5:5f:5c:49:3a:a5:
c7:13:15:d6:fd:bc:f4:14:77:6d:b0:fa:25:b9:b7:
b0:5d:63:f8:c9:ad:ec:e7:e0:72:54:cd:61:9d:b2:
74:f7:bf:e7:d3:60:00:0d:33:f3:e8:7e:b5:bf:45:
53:b5:9e:10:00:cf:fb:ce:12:1b:e1:ba:45:0f:75:
8e:45:1a:35:ab:4e:e9:eb:7c:b1:30:21:ff:01:60:
80:c8:51:de:2a:c2:7c:3a:f3:f2:f7:24:9a:bf:6a:
d6:99:27:5e:81:a6:ee:15:51:01:e6:3f:10:1b:ff:
cc:ef:bd:4b:b9:93:41:18:f9:33:38:7f:70:8e:c5:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:75:0E:55:20:4F:FA:4F:AA:89:EF:DE:27:71:D9:AC:CC:0A:9F:92
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/482D0488275811F0B9D197B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.29.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:cb:57:56:97:90:20:ca:39:70:65:cf:d6:7b:40:9e:17:dc:
71:71:18:13:cf:c7:bb:fc:83:9b:36:7f:6e:d4:23:26:d5:03:
39:91:d9:88:c1:9d:d4:1b:63:5b:b9:a2:ff:a5:db:b4:48:87:
7f:12:a9:02:be:f4:64:89:ad:db:ab:6e:44:56:22:ca:84:97:
15:e2:c8:e6:bd:71:77:67:c5:bd:6c:07:3c:0b:83:c2:e0:5c:
a8:63:70:af:87:5f:ed:26:ec:b7:1c:2e:a1:57:8f:c9:f1:66:
41:28:cd:70:e8:97:bd:c2:18:de:d6:b0:16:09:d6:04:61:c2:
cf:58:a3:7b:3f:c8:0a:8f:1e:90:95:7e:9a:af:da:a3:0b:3e:
56:d4:2d:c0:6e:71:a9:b3:3f:b9:e6:0d:5f:6b:85:82:06:f8:
bf:c8:20:2c:95:6b:2d:4d:08:26:70:d8:56:7b:43:d9:1f:80:
70:ed:4d:9f:ea:b9:89:87:5c:4b:7c:42:a8:8c:e7:a5:4b:b6:
f3:60:38:ac:ba:d2:86:f1:87:9c:34:58:70:4f:73:33:44:fd:
e5:18:09:cc:5b:0e:6c:d7:27:b1:1c:0f:48:bd:b6:5e:6f:fe:
12:d6:ed:4e:65:88:cc:f0:21:e0:91:d5:2e:89:70:e8:ed:7e:
0a:1b:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:06:45 2025 by rpki-client