Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BC994D2485B11F08FECB6DFDAE4EC9C.roa
File: 6BC994D2485B11F08FECB6DFDAE4EC9C.roa (raw, json)
Hash identifier: TW9rVJdltBrq3Cb5TAtJAGcVFNhvPHWnIsKfUVc0Axc=
Subject key identifier: 7B:8F:EB:7B:4D:28:61:9A:CC:88:E4:CF:51:29:00:BA:CE:04:73:05
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B4B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BC994D2485B11F08FECB6DFDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 13:36:34 +0000
ROA not before: Fri 13 Jun 2025 13:36:28 +0000
ROA not after: Sat 13 Jun 2026 13:36:28 +0000
asID: 29802
IP address blocks: 102.135.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2891 (0xb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 13 13:36:28 2025 GMT
Not After : Jun 13 13:36:28 2026 GMT
Subject: CN=684c2962-eb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:a5:5b:73:d8:1d:4a:8f:20:68:70:c7:e5:
33:71:be:c1:60:d3:df:f5:75:6c:33:c4:ab:74:69:
69:9e:44:d3:fc:c1:5d:c8:99:f3:93:d1:f3:f4:bb:
5d:c3:e9:7f:f4:91:f0:db:4c:d4:cc:cd:af:76:46:
be:fd:e2:c4:2e:75:b9:a6:8d:af:3a:9f:81:25:6f:
9c:1f:59:a3:21:6c:7f:da:92:e9:87:4b:e6:67:94:
d2:28:87:aa:e6:85:a3:b7:21:30:22:ba:8e:f5:87:
53:3b:75:30:b5:a3:cd:85:03:50:45:a5:7e:3c:20:
95:f7:8d:54:6e:51:e6:f4:78:e0:c2:5e:e2:5d:58:
5f:17:1b:83:4f:98:5b:8f:7a:55:bf:c0:34:77:9e:
28:62:ee:fb:a4:5b:4a:da:1f:7b:50:cc:c0:93:80:
53:44:72:06:d3:7f:f4:fb:86:35:76:00:c0:e1:25:
cc:bd:7a:af:17:f1:a8:82:94:d9:7a:4d:f6:77:56:
ce:b8:f8:7e:54:d1:3e:e2:db:b6:27:02:98:bf:74:
ed:52:69:a1:2b:9d:b7:84:33:fa:1a:b8:1a:2d:e7:
7b:75:24:3e:33:9a:7e:ac:f7:c7:dd:a8:73:c0:aa:
4b:16:56:ac:d1:64:59:a2:ae:56:b1:34:a4:24:dc:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8F:EB:7B:4D:28:61:9A:CC:88:E4:CF:51:29:00:BA:CE:04:73:05
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BC994D2485B11F08FECB6DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ac:b7:36:8f:7a:9e:a4:dc:66:f7:8f:df:c3:42:4c:eb:41:
f2:16:9f:ad:e6:6b:25:e1:3f:d2:15:97:00:6b:db:79:34:9e:
2d:b7:7a:88:ba:94:d8:1c:14:8e:75:48:23:9a:58:30:fa:d1:
fc:51:a6:54:36:12:82:55:5b:8f:87:62:28:7d:36:29:14:fc:
80:cb:fd:91:9e:e1:33:37:e0:9f:9d:25:cb:16:4b:75:52:3e:
ba:f4:5b:b3:cc:66:2e:0f:a6:0d:f1:ca:9a:5a:eb:bb:66:b8:
bb:71:1f:b0:e7:ed:51:89:6a:75:c3:a8:4b:7f:c4:e2:11:3f:
67:f2:45:d2:4f:d1:a0:8e:f4:60:99:88:ad:eb:fd:de:b8:92:
b3:20:d8:d1:27:5c:74:db:3e:08:5f:eb:e6:59:aa:eb:cf:ce:
35:7c:a9:0a:a7:fe:63:28:ca:ac:5b:bc:4d:5c:03:66:42:d2:
55:ca:b1:58:a8:ba:cf:8c:df:05:73:52:b7:c0:54:cd:39:9b:
15:a2:88:d0:e5:ad:50:ad:5b:9d:e5:75:cf:c5:97:54:83:f8:
4d:8a:13:f5:9c:18:8a:05:f6:80:84:dc:45:ac:23:4b:9b:aa:
1d:e5:89:11:dd:9b:2f:99:84:e5:17:45:ac:dd:62:72:4d:1b:
ee:9c:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:30:28 2025 by rpki-client